@hiyve/cli 1.0.5 → 1.0.8

package/README.md

@@ -13,8 +13,7 @@ After login, you can install Hiyve packages normally:
 
 ```bash
 npm install @hiyve/rtc-client
-npm install @hiyve/auth
-npm install @hiyve/auth-react
+npm install @hiyve/react @hiyve/react-ui
 ```
 
 ## Commands
@@ -28,7 +27,7 @@ Authenticate with Hiyve and configure npm for @hiyve packages.
 npx hiyve-cli login
 
 # With API key as argument
-npx hiyve-cli login --key mk_your_api_key_here
+npx hiyve-cli login --key sk_live_your_secret_key_here
 ```
 
 ### `hiyve logout`
@@ -51,7 +50,7 @@ npx hiyve-cli whoami
 
 1. Log in to the [Hiyve SDK Admin Portal](https://console.hiyve.dev)
 2. Navigate to **API Keys** in the sidebar
-3. Copy your API key (starts with `mk_`)
+3. Copy your secret key (starts with `sk_test_` or `sk_live_`)
 
 ## What Does Login Do?
 
@@ -59,7 +58,7 @@ The `login` command:
 
 1. Validates your API key with the Hiyve registry
 2. Adds two lines to your `~/.npmrc` file:
-   - `@hiyve:registry=https://console.hiyve.dev/api/registry/`
+   - `@hiyve:registry=https://api.hiyve.dev/registry/`
    - `//:_authToken=your_api_key`
 
 This tells npm to fetch `@hiyve/*` packages from the private Hiyve registry instead of the public npm registry.
@@ -68,8 +67,7 @@ This tells npm to fetch `@hiyve/*` packages from the private Hiyve registry inst
 
 ### "Invalid API key" error
 
-- Make sure your API key starts with `mk_`
-- Check that your API key is 35 characters long
+- Make sure your key starts with `sk_test_` or `sk_live_`
 - Verify your account is active in the admin portal
 
 ### "Connection failed" error
@@ -94,7 +92,7 @@ cat ~/.npmrc | grep hiyve
 ## Security
 
 - Your API key is stored in `~/.npmrc` (standard npm token storage)
-- The API key is sent only to `console.hiyve.dev`
+- The API key is sent only to `api.hiyve.dev`
 - Run `hiyve logout` to remove your credentials
 
 ## Support

package/bin/hiyve.js

@@ -11,11 +11,19 @@ import { login } from '../src/commands/login.js';
 import { logout } from '../src/commands/logout.js';
 import { whoami } from '../src/commands/whoami.js';
 import { list } from '../src/commands/list.js';
+import { init } from '../src/commands/init.js';
+import { setDevMode } from '../src/config.js';
 
 program
   .name('hiyve')
   .description('Hiyve SDK CLI - Configure npm for private @hiyve packages')
-  .version('1.0.0');
+  .version('1.0.0')
+  .option('--dev', 'Use dev registry (api.muziemedia.com)')
+  .hook('preAction', () => {
+    if (program.opts().dev) {
+      setDevMode(true);
+    }
+  });
 
 program
   .command('login')
@@ -39,6 +47,12 @@ program
   .description('List all available @hiyve packages')
   .action(list);
 
+program
+  .command('init [project-name]')
+  .description('Scaffold a new Hiyve project')
+  .option('-t, --template <name>', 'Template: basic, ai, or full')
+  .action(init);
+
 // Show help if no command provided
 program.parse();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiyve/cli",
-  "version": "1.0.5",
+  "version": "1.0.8",
   "description": "Hiyve SDK CLI - Configure npm for private @hiyve packages",
   "type": "module",
   "bin": {
@@ -12,7 +12,8 @@
     "src"
   ],
   "scripts": {
-    "test": "echo \"No tests yet\"",
+    "test": "vitest run",
+    "test:watch": "vitest",
     "deploy": "./deploy.sh"
   },
   "keywords": [
@@ -37,9 +38,12 @@
     "access": "public"
   },
   "dependencies": {
-    "chalk": "^5.3.0",
+    "chalk": "^5.6.2",
     "commander": "^12.1.0",
-    "ora": "^8.1.0",
+    "ora": "^8.2.0",
     "prompts": "^2.4.2"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.9"
   }
-}
+}

package/src/commands/init.js

@@ -0,0 +1,442 @@
+/**
+ * Hiyve CLI - init command
+ *
+ * Scaffold a new Hiyve project from a template.
+ */
+
+import { writeFileSync, mkdirSync, existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import chalk from 'chalk';
+import ora from 'ora';
+import prompts from 'prompts';
+
+const TEMPLATES = {
+  basic: {
+    name: 'Basic',
+    description: 'Video conferencing with controls and participant list',
+    packages: ['@hiyve/react', '@hiyve/react-ui', '@hiyve/core', '@hiyve/rtc-client', '@hiyve/utilities'],
+    features: { intelligence: false, collaboration: false, capture: false },
+  },
+  ai: {
+    name: 'AI-Powered',
+    description: 'Video + search, transcription, meeting intelligence',
+    packages: [
+      '@hiyve/react', '@hiyve/react-ui', '@hiyve/react-intelligence', '@hiyve/react-capture',
+      '@hiyve/core', '@hiyve/cloud', '@hiyve/rtc-client', '@hiyve/utilities',
+    ],
+    features: { intelligence: true, collaboration: false, capture: true },
+  },
+  full: {
+    name: 'Full Suite',
+    description: 'Video + AI + chat, polls, Q&A, file sharing, notes',
+    packages: [
+      '@hiyve/react', '@hiyve/react-ui', '@hiyve/react-intelligence', '@hiyve/react-capture',
+      '@hiyve/react-collaboration', '@hiyve/react-notes', '@hiyve/react-room',
+      '@hiyve/core', '@hiyve/cloud', '@hiyve/rtc-client', '@hiyve/utilities',
+    ],
+    features: { intelligence: true, collaboration: true, capture: true },
+  },
+};
+
+export async function init(projectName, options) {
+  console.log('');
+  console.log(chalk.cyan('  Hiyve Project Scaffolding'));
+  console.log(chalk.gray('  ─'.repeat(20)));
+  console.log('');
+
+  // Resolve project name
+  if (!projectName) {
+    const response = await prompts({
+      type: 'text',
+      name: 'name',
+      message: 'Project name:',
+      initial: 'my-hiyve-app',
+      validate: (val) => (val.trim() ? true : 'Project name is required'),
+    });
+    if (!response.name) {
+      console.log(chalk.yellow('  Cancelled.'));
+      process.exit(0);
+    }
+    projectName = response.name.trim();
+  }
+
+  // Resolve template
+  let templateKey = options.template;
+  if (!templateKey || !TEMPLATES[templateKey]) {
+    const response = await prompts({
+      type: 'select',
+      name: 'template',
+      message: 'Choose a template:',
+      choices: Object.entries(TEMPLATES).map(([key, t]) => ({
+        title: `${t.name} ${chalk.gray(`— ${t.description}`)}`,
+        value: key,
+      })),
+      initial: 0,
+    });
+    if (!response.template) {
+      console.log(chalk.yellow('  Cancelled.'));
+      process.exit(0);
+    }
+    templateKey = response.template;
+  }
+
+  const template = TEMPLATES[templateKey];
+  const projectDir = resolve(process.cwd(), projectName);
+
+  if (existsSync(projectDir)) {
+    console.log(chalk.red(`  Directory "${projectName}" already exists.`));
+    process.exit(1);
+  }
+
+  const spinner = ora(`Creating ${chalk.cyan(projectName)} with ${template.name} template...`).start();
+
+  try {
+    // Create directory structure
+    mkdirSync(projectDir, { recursive: true });
+    mkdirSync(join(projectDir, 'src'), { recursive: true });
+    mkdirSync(join(projectDir, 'server'), { recursive: true });
+
+    // Generate files
+    writeFile(projectDir, 'package.json', generatePackageJson(projectName, template));
+    writeFile(projectDir, 'tsconfig.json', generateTsConfig());
+    writeFile(projectDir, 'vite.config.ts', generateViteConfig());
+    writeFile(projectDir, '.env.example', generateEnvExample(template));
+    writeFile(projectDir, '.gitignore', generateGitignore());
+    writeFile(projectDir, 'src/main.tsx', generateMain());
+    writeFile(projectDir, 'src/App.tsx', generateApp(template));
+    writeFile(projectDir, 'index.html', generateIndexHtml(projectName));
+    writeFile(projectDir, 'server/index.ts', generateServer(template));
+
+    spinner.succeed(`Created ${chalk.cyan(projectName)}`);
+
+    console.log('');
+    console.log(chalk.gray('  Next steps:'));
+    console.log('');
+    console.log(`  ${chalk.cyan('cd')} ${projectName}`);
+    console.log(`  ${chalk.cyan('cp')} .env.example .env   ${chalk.gray('# Add your API key')}`);
+    console.log(`  ${chalk.cyan('npm install')}`);
+    console.log(`  ${chalk.cyan('npm run dev')}`);
+    console.log('');
+    console.log(chalk.gray(`  Template: ${template.name}`));
+    console.log(chalk.gray(`  Packages: ${template.packages.length}`));
+    console.log('');
+  } catch (err) {
+    spinner.fail('Failed to create project');
+    console.error(chalk.red(`  ${err.message}`));
+    process.exit(1);
+  }
+}
+
+// ─── File Generators ──────────────────────────────────────
+
+function writeFile(dir, filePath, content) {
+  const fullPath = join(dir, filePath);
+  const parentDir = join(fullPath, '..');
+  mkdirSync(parentDir, { recursive: true });
+  writeFileSync(fullPath, content, 'utf-8');
+}
+
+function generatePackageJson(name, template) {
+  const deps = {};
+  for (const pkg of template.packages) {
+    deps[pkg] = 'latest';
+  }
+  deps['react'] = '^18.2.0';
+  deps['react-dom'] = '^18.2.0';
+  deps['@mui/material'] = '^5.15.0';
+  deps['@mui/icons-material'] = '^5.15.0';
+  deps['@emotion/react'] = '^11.11.0';
+  deps['@emotion/styled'] = '^11.11.0';
+
+  const pkg = {
+    name,
+    version: '0.1.0',
+    private: true,
+    type: 'module',
+    scripts: {
+      dev: 'concurrently "vite" "tsx watch server/index.ts"',
+      build: 'vite build',
+      preview: 'vite preview',
+      'server': 'tsx server/index.ts',
+    },
+    dependencies: deps,
+    devDependencies: {
+      '@types/react': '^18.2.0',
+      '@types/react-dom': '^18.2.0',
+      '@vitejs/plugin-react': '^4.2.0',
+      'concurrently': '^8.2.0',
+      'dotenv': '^16.3.0',
+      'express': '^4.18.0',
+      'tsx': '^4.7.0',
+      'typescript': '^5.3.0',
+      'vite': '^5.0.0',
+    },
+  };
+
+  return JSON.stringify(pkg, null, 2) + '\n';
+}
+
+function generateTsConfig() {
+  const config = {
+    compilerOptions: {
+      target: 'ES2020',
+      useDefineForClassFields: true,
+      lib: ['ES2020', 'DOM', 'DOM.Iterable'],
+      module: 'ESNext',
+      skipLibCheck: true,
+      moduleResolution: 'bundler',
+      allowImportingTsExtensions: true,
+      resolveJsonModule: true,
+      isolatedModules: true,
+      noEmit: true,
+      jsx: 'react-jsx',
+      strict: true,
+      noUnusedLocals: true,
+      noUnusedParameters: true,
+      noFallthroughCasesInSwitch: true,
+    },
+    include: ['src'],
+  };
+  return JSON.stringify(config, null, 2) + '\n';
+}
+
+function generateViteConfig() {
+  return `import { defineConfig } from 'vite';
+import react from '@vitejs/plugin-react';
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 3000,
+    proxy: {
+      '/api': 'http://localhost:4000',
+    },
+  },
+});
+`;
+}
+
+function generateEnvExample(template) {
+  let env = `# Hiyve API Key (from console.hiyve.dev)
+HIYVE_API_KEY=sk_live_your_secret_key_here
+
+# Room configuration
+HIYVE_SIGNALING_URL=https://signal.hiyve.dev
+`;
+
+  if (template.features.intelligence) {
+    env += `
+# Cloud API (for AI features)
+HIYVE_CLOUD_URL=https://api.hiyve.dev
+`;
+  }
+
+  return env;
+}
+
+function generateGitignore() {
+  return `node_modules
+dist
+.env
+*.local
+`;
+}
+
+function generateMain() {
+  return `import React from 'react';
+import ReactDOM from 'react-dom/client';
+import App from './App';
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>,
+);
+`;
+}
+
+function generateApp(template) {
+  if (template.features.intelligence && template.features.collaboration) {
+    // Full template — use @hiyve/react-room PrebuiltRoom
+    return `import React, { useState, useCallback } from 'react';
+import { HiyveRoom, PrebuiltRoom, PrebuiltLobby } from '@hiyve/react-room';
+
+export default function App() {
+  const [roomToken, setRoomToken] = useState<string | null>(null);
+  const [cloudToken, setCloudToken] = useState<string | null>(null);
+  const [displayName, setDisplayName] = useState('');
+
+  const handleJoin = useCallback(async (name: string) => {
+    setDisplayName(name);
+    const res = await fetch('/api/token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ roomName: 'my-room', userId: name, displayName: name }),
+    });
+    const data = await res.json();
+    setRoomToken(data.roomToken);
+    if (data.cloudToken) setCloudToken(data.cloudToken);
+  }, []);
+
+  const handleLeave = useCallback(() => {
+    setRoomToken(null);
+    setCloudToken(null);
+  }, []);
+
+  if (!roomToken) {
+    return <PrebuiltLobby onJoin={handleJoin} />;
+  }
+
+  return (
+    <HiyveRoom roomToken={roomToken} cloudToken={cloudToken} intelligence>
+      <PrebuiltRoom userId={displayName} onLeave={handleLeave} />
+    </HiyveRoom>
+  );
+}
+`;
+  }
+
+  // Basic / AI template — compose directly
+  const imports = [`import { HiyveProvider, useRoom, useConnection } from '@hiyve/react';`];
+  imports.push(`import { VideoGrid, ControlBar } from '@hiyve/react-ui';`);
+
+  let providerOpen = '      <HiyveProvider generateRoomToken={generateRoomToken}>';
+  let providerClose = '      </HiyveProvider>';
+  let extraComponents = '';
+
+  if (template.features.intelligence) {
+    extraComponents += `\n          {/* AI features available via @hiyve/react-intelligence hooks */}`;
+  }
+
+  return `import React, { useState, useCallback } from 'react';
+${imports.join('\n')}
+
+function Room({ onLeave }: { onLeave: () => void }) {
+  return (
+    <div style={{ display: 'flex', flexDirection: 'column', height: '100vh', background: '#121212' }}>
+      <div style={{ flex: 1, overflow: 'hidden' }}>
+        <VideoGrid localVideoElementId="local-video" />
+      </div>${extraComponents}
+      <ControlBar onLeave={onLeave} />
+    </div>
+  );
+}
+
+export default function App() {
+  const [roomToken, setRoomToken] = useState<string | null>(null);
+
+  const handleJoin = useCallback(async () => {
+    const res = await fetch('/api/token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ roomName: 'my-room', userId: 'user-' + Date.now() }),
+    });
+    const data = await res.json();
+    setRoomToken(data.roomToken);
+  }, []);
+
+  const generateRoomToken = useCallback(() => Promise.resolve(roomToken!), [roomToken]);
+
+  if (!roomToken) {
+    return (
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'center', height: '100vh', background: '#121212' }}>
+        <button onClick={handleJoin} style={{ padding: '12px 32px', fontSize: 18, borderRadius: 8, border: 'none', background: '#6c63ff', color: '#fff', cursor: 'pointer' }}>
+          Join Room
+        </button>
+      </div>
+    );
+  }
+
+  return (
+${providerOpen}
+      <Room onLeave={() => setRoomToken(null)} />
+${providerClose}
+  );
+}
+`;
+}
+
+function generateIndexHtml(name) {
+  return `<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>${name}</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
+`;
+}
+
+function generateServer(template) {
+  const hasCloud = template.features.intelligence;
+
+  return `import express from 'express';
+import 'dotenv/config';
+
+const app = express();
+app.use(express.json());
+
+const API_KEY = process.env.HIYVE_API_KEY;
+const SIGNALING_URL = process.env.HIYVE_SIGNALING_URL || 'https://signal.hiyve.dev';
+${hasCloud ? `const CLOUD_URL = process.env.HIYVE_CLOUD_URL || 'https://api.hiyve.dev';\n` : ''}
+/**
+ * Generate a room token for the client.
+ * In production, add your own authentication before issuing tokens.
+ */
+app.post('/api/token', async (req, res) => {
+  const { roomName, userId, displayName } = req.body;
+
+  try {
+    const response = await fetch(\`\${SIGNALING_URL}/api/rooms/token\`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'Authorization': \`Bearer \${API_KEY}\`,
+      },
+      body: JSON.stringify({ roomName, userId, displayName: displayName || userId }),
+    });
+
+    if (!response.ok) {
+      throw new Error(\`Token request failed: \${response.status}\`);
+    }
+
+    const data = await response.json();
+${hasCloud ? `
+    // Also generate a cloud token for AI features
+    let cloudToken: string | undefined;
+    try {
+      const cloudRes = await fetch(\`\${CLOUD_URL}/auth/tokens/cloud\`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'x-api-key': API_KEY!,
+        },
+        body: JSON.stringify({ userId }),
+      });
+      if (cloudRes.ok) {
+        const cloudData = await cloudRes.json();
+        cloudToken = cloudData.token;
+      }
+    } catch {
+      // Cloud token optional — continue without it
+    }
+
+    res.json({ roomToken: data.token, cloudToken });
+` : `    res.json({ roomToken: data.token });
+`}  } catch (err: any) {
+    console.error('Token error:', err.message);
+    res.status(500).json({ error: 'Failed to generate token' });
+  }
+});
+
+const PORT = process.env.PORT || 4000;
+app.listen(PORT, () => {
+  console.log(\`Server running on http://localhost:\${PORT}\`);
+});
+`;
+}

package/src/commands/list.js

@@ -6,7 +6,7 @@
 
 import chalk from 'chalk';
 import ora from 'ora';
-import { REGISTRY_URL } from '../config.js';
+import { getApiUrl } from '../config.js';
 import { getCurrentConfig } from '../utils/npmrc.js';
 
 /**
@@ -30,7 +30,7 @@ export async function list() {
   const spinner = ora('Fetching packages...').start();
 
   try {
-    const response = await fetch(`${REGISTRY_URL}packages`, {
+    const response = await fetch(`${getApiUrl()}packages`, {
       headers: {
         Authorization: `Bearer ${config.apiKey}`,
       },

package/src/commands/login.js

@@ -8,7 +8,7 @@ import prompts from 'prompts';
 import chalk from 'chalk';
 import ora from 'ora';
 import { configureNpmrc } from '../utils/npmrc.js';
-import { REGISTRY_URL } from '../config.js';
+import { getApiUrl, getRegistryUrl } from '../config.js';
 
 /**
  * Login to Hiyve and configure npm
@@ -31,7 +31,9 @@ export async function login(options) {
       message: 'Enter your Hiyve API key:',
       validate: (value) => {
         if (!value) return 'API key is required';
-        if (!value.startsWith('mk_')) return 'API key should start with mk_';
+        if (!value.startsWith('sk_') && !value.startsWith('mk_')) {
+          return 'API key should start with sk_test_, sk_live_, or mk_';
+        }
         if (value.length < 35) return 'API key appears to be too short';
         return true;
       },
@@ -46,11 +48,14 @@ export async function login(options) {
     apiKey = response.apiKey;
   }
 
-  // Validate API key format
-  if (!apiKey.match(/^mk_[a-fA-F0-9]{32}$/)) {
+  // Validate API key format (sk_test_*, sk_live_*, or legacy mk_*)
+  const isSecretKey = apiKey.match(/^sk_(test|live)_[a-fA-F0-9]+$/);
+  const isManagementKey = apiKey.match(/^mk_[a-fA-F0-9]{32}$/);
+
+  if (!isSecretKey && !isManagementKey) {
     console.log('');
     console.log(chalk.red('✗ Invalid API key format'));
-    console.log(chalk.gray('  API key should be 35 characters: mk_ followed by 32 hex characters'));
+    console.log(chalk.gray('  Expected: sk_test_* or sk_live_* (from console.hiyve.dev)'));
     process.exit(1);
   }
 
@@ -58,7 +63,7 @@ export async function login(options) {
   const spinner = ora('Verifying API key...').start();
 
   try {
-    const response = await fetch(`${REGISTRY_URL}verify`, {
+    const response = await fetch(`${getApiUrl()}verify`, {
       headers: {
         Authorization: `Bearer ${apiKey}`,
       },
@@ -90,7 +95,7 @@ export async function login(options) {
   const spinner2 = ora('Configuring npm...').start();
 
   try {
-    await configureNpmrc(REGISTRY_URL, apiKey);
+    await configureNpmrc(getRegistryUrl(), apiKey);
     spinner2.succeed('npm configured for @hiyve packages');
   } catch (err) {
     spinner2.fail('Failed to configure npm');
@@ -106,7 +111,7 @@ export async function login(options) {
 
   // Fetch available packages from registry
   try {
-    const packagesResponse = await fetch(`${REGISTRY_URL}packages`, {
+    const packagesResponse = await fetch(`${getApiUrl()}packages`, {
       headers: { Authorization: `Bearer ${apiKey}` },
     });
 
@@ -135,14 +140,14 @@ export async function login(options) {
       // Fallback if packages endpoint fails
       console.log('You can now install Hiyve packages:');
       console.log(chalk.cyan('  npm install @hiyve/rtc-client'));
-      console.log(chalk.cyan('  npm install @hiyve/client-provider'));
+      console.log(chalk.cyan('  npm install @hiyve/react'));
       console.log('');
     }
   } catch {
     // Fallback on network error
     console.log('You can now install Hiyve packages:');
     console.log(chalk.cyan('  npm install @hiyve/rtc-client'));
-    console.log(chalk.cyan('  npm install @hiyve/client-provider'));
+    console.log(chalk.cyan('  npm install @hiyve/react'));
     console.log('');
   }
 }

package/src/commands/whoami.js

@@ -7,7 +7,7 @@
 import chalk from 'chalk';
 import ora from 'ora';
 import { getCurrentConfig } from '../utils/npmrc.js';
-import { REGISTRY_URL } from '../config.js';
+import { getApiUrl } from '../config.js';
 
 /**
  * Show current authentication status
@@ -39,7 +39,7 @@ export async function whoami() {
     const spinner = ora('Verifying with server...').start();
 
     try {
-      const response = await fetch(`${REGISTRY_URL}verify`, {
+      const response = await fetch(`${getApiUrl()}verify`, {
         headers: {
           Authorization: `Bearer ${config.apiKey}`,
         },

package/src/config.js

@@ -1,10 +1,45 @@
 /**
  * Hiyve CLI Configuration
+ *
+ * Two URLs matter:
+ *   - API URL: where the CLI talks to (verify, list, packages). Switches with --dev.
+ *   - Registry URL: what goes into ~/.npmrc for npm to fetch tarballs. Always prod.
  */
 
-// Registry URL - the private npm registry endpoint
-export const REGISTRY_URL = 'https://console.hiyve.dev/api/registry/';
+const PROD_API_URL = 'https://api.hiyve.dev/registry/';
+const DEV_API_URL = 'https://api.muziemedia.com/registry/';
+
+let _devMode = false;
+
+/**
+ * Enable dev mode (CLI API calls go to api.muziemedia.com)
+ */
+export function setDevMode(enabled) {
+  _devMode = enabled;
+}
+
+/**
+ * Get the API URL for CLI operations (verify, list, packages).
+ * Switches between dev and prod based on --dev flag.
+ */
+export function getApiUrl() {
+  return _devMode ? DEV_API_URL : PROD_API_URL;
+}
+
+/**
+ * Get the registry URL for ~/.npmrc (where npm fetches tarballs).
+ * Always prod — there is one S3 bucket, both APIs point to the same packages.
+ */
+export function getRegistryUrl() {
+  return PROD_API_URL;
+}
+
+// Backwards-compatible named export
+export const REGISTRY_URL = PROD_API_URL;
 
 export default {
   REGISTRY_URL,
+  getApiUrl,
+  getRegistryUrl,
+  setDevMode,
 };

package/src/config.test.js

@@ -0,0 +1,32 @@
+import { describe, it, expect } from 'vitest';
+import config, { REGISTRY_URL, getApiUrl, getRegistryUrl, setDevMode } from './config.js';
+
+describe('config', () => {
+  it('exports REGISTRY_URL as a named export', () => {
+    expect(REGISTRY_URL).toBe('https://api.hiyve.dev/registry/');
+  });
+
+  it('default export contains REGISTRY_URL', () => {
+    expect(config).toHaveProperty('REGISTRY_URL');
+    expect(config.REGISTRY_URL).toBe('https://api.hiyve.dev/registry/');
+  });
+
+  it('getApiUrl returns prod URL by default', () => {
+    setDevMode(false);
+    expect(getApiUrl()).toBe('https://api.hiyve.dev/registry/');
+  });
+
+  it('getApiUrl returns dev URL when dev mode is enabled', () => {
+    setDevMode(true);
+    expect(getApiUrl()).toBe('https://api.muziemedia.com/registry/');
+    setDevMode(false);
+  });
+
+  it('getRegistryUrl always returns prod URL regardless of dev mode', () => {
+    setDevMode(false);
+    expect(getRegistryUrl()).toBe('https://api.hiyve.dev/registry/');
+    setDevMode(true);
+    expect(getRegistryUrl()).toBe('https://api.hiyve.dev/registry/');
+    setDevMode(false);
+  });
+});

package/src/index.js

@@ -7,5 +7,6 @@
 export { login } from './commands/login.js';
 export { logout } from './commands/logout.js';
 export { whoami } from './commands/whoami.js';
+export { init } from './commands/init.js';
 export { configureNpmrc, removeNpmrc, getCurrentConfig } from './utils/npmrc.js';
-export { REGISTRY_URL, SCOPED_PACKAGES } from './config.js';
+export { REGISTRY_URL, getApiUrl, getRegistryUrl, setDevMode } from './config.js';

package/src/utils/npmrc.js

@@ -12,7 +12,7 @@ const NPMRC_PATH = path.join(os.homedir(), '.npmrc');
 
 /**
  * Configure ~/.npmrc for Hiyve registry
- * @param {string} registryUrl - The registry URL (e.g., https://console.hiyve.dev/api/registry/)
+ * @param {string} registryUrl - The registry URL (e.g., https://api.hiyve.dev/registry/)
  * @param {string} apiKey - The API key for authentication
  */
 export async function configureNpmrc(registryUrl, apiKey) {
@@ -23,23 +23,26 @@ export async function configureNpmrc(registryUrl, apiKey) {
     content = fs.readFileSync(NPMRC_PATH, 'utf8');
   }
 
-  // Remove any existing @hiyve config lines
+  // Remove any existing @hiyve config lines (both old and new registry URLs)
   const lines = content.split('\n').filter((line) => {
     const trimmed = line.trim();
     return (
       !trimmed.startsWith('@hiyve:registry') &&
       !trimmed.includes('//console.hiyve.dev/') &&
-      !trimmed.includes(':_authToken=mk_')
+      !trimmed.includes('//api.hiyve.dev/') &&
+      !trimmed.includes('//api.muziemedia.com/') &&
+      !trimmed.includes(':_authToken=mk_') &&
+      !trimmed.includes(':_authToken=sk_')
     );
   });
 
-  // Parse the registry URL to extract host
+  // Parse the registry URL to derive the auth token path
   const url = new URL(registryUrl);
-  const registryHost = url.host;
+  const authPath = `//${url.host}${url.pathname}`;
 
   // Add new config lines
   lines.push(`@hiyve:registry=${registryUrl}`);
-  lines.push(`//${registryHost}/api/registry/:_authToken=${apiKey}`);
+  lines.push(`${authPath}:_authToken=${apiKey}`);
 
   // Write back, removing empty lines at start/end
   const finalContent = lines.filter((line) => line.trim()).join('\n') + '\n';
@@ -56,13 +59,16 @@ export async function removeNpmrc() {
 
   const content = fs.readFileSync(NPMRC_PATH, 'utf8');
 
-  // Remove @hiyve config lines
+  // Remove @hiyve config lines (both old and new registry URLs)
   const lines = content.split('\n').filter((line) => {
     const trimmed = line.trim();
     return (
       !trimmed.startsWith('@hiyve:registry') &&
       !trimmed.includes('//console.hiyve.dev/') &&
-      !trimmed.includes(':_authToken=mk_')
+      !trimmed.includes('//api.hiyve.dev/') &&
+      !trimmed.includes('//api.muziemedia.com/') &&
+      !trimmed.includes(':_authToken=mk_') &&
+      !trimmed.includes(':_authToken=sk_')
     );
   });
 
@@ -86,22 +92,22 @@ export function getCurrentConfig() {
   // Find registry line
   const registryLine = lines.find((line) => line.trim().startsWith('@hiyve:registry'));
 
-  // Find token line
+  // Find token line (sk_* or legacy mk_*)
   const tokenLine = lines.find((line) => {
     const trimmed = line.trim();
-    return trimmed.includes(':_authToken=mk_');
+    return trimmed.includes(':_authToken=sk_') || trimmed.includes(':_authToken=mk_');
   });
 
   if (!registryLine || !tokenLine) {
     return null;
   }
 
-  // Extract API key
-  const tokenMatch = tokenLine.match(/:_authToken=(mk_[a-fA-F0-9]+)/);
+  // Extract API key (sk_* or legacy mk_*)
+  const tokenMatch = tokenLine.match(/:_authToken=((?:sk_|mk_)[a-zA-Z0-9_]+)/);
   const apiKey = tokenMatch ? tokenMatch[1] : null;
 
   // Mask API key for display
-  const maskedApiKey = apiKey ? `${apiKey.slice(0, 6)}...${apiKey.slice(-4)}` : null;
+  const maskedApiKey = apiKey ? `${apiKey.slice(0, 8)}...${apiKey.slice(-4)}` : null;
 
   return {
     apiKey,

package/src/utils/npmrc.test.js

@@ -0,0 +1,331 @@
+import { vi, describe, it, expect, beforeEach } from 'vitest';
+import fs from 'fs';
+import os from 'os';
+
+vi.mock('fs');
+vi.mock('os');
+
+// os.homedir() is called at module scope to build NPMRC_PATH,
+// so we must set the return value before the module loads.
+os.homedir.mockReturnValue('/mock-home');
+
+const { configureNpmrc, removeNpmrc, getCurrentConfig } = await import('./npmrc.js');
+
+const NPMRC_PATH = '/mock-home/.npmrc';
+
+describe('configureNpmrc', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    os.homedir.mockReturnValue('/mock-home');
+  });
+
+  it('creates .npmrc when it does not exist', async () => {
+    fs.existsSync.mockReturnValue(false);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_live_abc123def456');
+
+    expect(fs.writeFileSync).toHaveBeenCalledOnce();
+    const [writePath, content] = fs.writeFileSync.mock.calls[0];
+    expect(writePath).toBe(NPMRC_PATH);
+    expect(content).toContain('@hiyve:registry=https://api.hiyve.dev/registry/');
+    expect(content).toContain(':_authToken=sk_live_abc123def456');
+  });
+
+  it('replaces existing @hiyve lines when .npmrc already has them', async () => {
+    const existingContent = [
+      '@hiyve:registry=https://old-registry.example.com/',
+      '//console.hiyve.dev/api/registry/:_authToken=sk_live_oldkey1234',
+      'other-config=value',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_live_newkey5678');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    // Old lines should be gone
+    expect(content).not.toContain('old-registry.example.com');
+    expect(content).not.toContain('sk_live_oldkey1234');
+    // New lines should be present
+    expect(content).toContain('@hiyve:registry=https://api.hiyve.dev/registry/');
+    expect(content).toContain(':_authToken=sk_live_newkey5678');
+  });
+
+  it('replaces legacy mk_ tokens', async () => {
+    const existingContent = [
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=mk_oldlegacykey1234',
+      'other-config=value',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_live_newkey5678');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('mk_oldlegacykey1234');
+    expect(content).toContain(':_authToken=sk_live_newkey5678');
+  });
+
+  it('removes old console.hiyve.dev lines when switching to new registry', async () => {
+    const existingContent = [
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=sk_live_oldkey1234',
+      'other-config=value',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_live_newkey5678');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('console.hiyve.dev');
+    expect(content).toContain('api.hiyve.dev');
+  });
+
+  it('preserves non-hiyve lines', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '//npm.pkg.github.com/:_authToken=ghp_abc123',
+      '@hiyve:registry=https://old.example.com/',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_test_abcdef000000');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).toContain('registry=https://registry.npmjs.org/');
+    expect(content).toContain('//npm.pkg.github.com/:_authToken=ghp_abc123');
+  });
+
+  it('writes correct @hiyve:registry and authToken lines', async () => {
+    fs.existsSync.mockReturnValue(false);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'sk_live_1a2b3c4d5e6f');
+
+    const [, content, encoding] = fs.writeFileSync.mock.calls[0];
+    expect(encoding).toBe('utf8');
+
+    const lines = content.split('\n').filter((l) => l.trim());
+    const registryLine = lines.find((l) => l.startsWith('@hiyve:registry='));
+    const tokenLine = lines.find((l) => l.includes(':_authToken='));
+
+    expect(registryLine).toBe('@hiyve:registry=https://api.hiyve.dev/registry/');
+    expect(tokenLine).toBe('//api.hiyve.dev/registry/:_authToken=sk_live_1a2b3c4d5e6f');
+  });
+});
+
+describe('removeNpmrc', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    os.homedir.mockReturnValue('/mock-home');
+  });
+
+  it('removes @hiyve lines with sk_ tokens (new registry)', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=sk_live_abc123def456',
+      'other-config=true',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('@hiyve:registry');
+    expect(content).not.toContain('api.hiyve.dev');
+    expect(content).not.toContain('sk_live_abc123def456');
+  });
+
+  it('removes @hiyve lines with sk_ tokens (old registry)', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=sk_live_abc123def456',
+      'other-config=true',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('@hiyve:registry');
+    expect(content).not.toContain('console.hiyve.dev');
+    expect(content).not.toContain('sk_live_abc123def456');
+  });
+
+  it('removes @hiyve lines with legacy mk_ tokens', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=mk_abc123def456789012345678901234',
+      'other-config=true',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('@hiyve:registry');
+    expect(content).not.toContain('mk_abc123');
+  });
+
+  it('preserves non-hiyve lines', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=sk_test_abc123',
+      '@myorg:registry=https://myorg.example.com/',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).toContain('registry=https://registry.npmjs.org/');
+    expect(content).toContain('@myorg:registry=https://myorg.example.com/');
+  });
+
+  it('handles case when .npmrc does not exist', async () => {
+    fs.existsSync.mockReturnValue(false);
+
+    await expect(removeNpmrc()).resolves.toBeUndefined();
+    expect(fs.readFileSync).not.toHaveBeenCalled();
+    expect(fs.writeFileSync).not.toHaveBeenCalled();
+  });
+});
+
+describe('getCurrentConfig', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    os.homedir.mockReturnValue('/mock-home');
+  });
+
+  it('returns null when .npmrc does not exist', () => {
+    fs.existsSync.mockReturnValue(false);
+
+    expect(getCurrentConfig()).toBeNull();
+  });
+
+  it('returns null when .npmrc has no @hiyve config', () => {
+    const content = [
+      'registry=https://registry.npmjs.org/',
+      '//npm.pkg.github.com/:_authToken=ghp_abc123',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    expect(getCurrentConfig()).toBeNull();
+  });
+
+  it('returns config for sk_ keys (new registry)', () => {
+    const content = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=sk_live_1a2b3c4d5e6f7890abcd',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result).toEqual({
+      apiKey: 'sk_live_1a2b3c4d5e6f7890abcd',
+      maskedApiKey: 'sk_live_...abcd',
+      registryUrl: 'https://api.hiyve.dev/registry/',
+    });
+  });
+
+  it('returns config for sk_ keys (old registry — backward compat)', () => {
+    const content = [
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=sk_live_1a2b3c4d5e6f7890abcd',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result).toEqual({
+      apiKey: 'sk_live_1a2b3c4d5e6f7890abcd',
+      maskedApiKey: 'sk_live_...abcd',
+      registryUrl: 'https://console.hiyve.dev/api/registry/',
+    });
+  });
+
+  it('returns config for legacy mk_ keys', () => {
+    const content = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=mk_1a2b3c4d5e6f7890abcd',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result).toEqual({
+      apiKey: 'mk_1a2b3c4d5e6f7890abcd',
+      maskedApiKey: 'mk_1a2b3...abcd',
+      registryUrl: 'https://api.hiyve.dev/registry/',
+    });
+  });
+
+  it('maskedApiKey shows first 8 and last 4 chars', () => {
+    const apiKey = 'sk_test_aabbccdd11223344eeff';
+    const content = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      `//api.hiyve.dev/registry/:_authToken=${apiKey}`,
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result.apiKey).toBe(apiKey);
+    expect(result.maskedApiKey).toBe('sk_test_...eeff');
+  });
+
+  it('returns null when only registry line is present but no token', () => {
+    const content = '@hiyve:registry=https://api.hiyve.dev/registry/\n';
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    expect(getCurrentConfig()).toBeNull();
+  });
+
+  it('returns null when only token line is present but no registry', () => {
+    const content = '//api.hiyve.dev/registry/:_authToken=sk_live_abc123def456\n';
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    // The token line contains "//api.hiyve.dev/" so it would be found,
+    // but there is no @hiyve:registry line, so result should be null
+    expect(getCurrentConfig()).toBeNull();
+  });
+});