@algolia/wizard 0.33.0-rc.126.240 → 0.34.0-rc.125.243

package/dist/main.js

@@ -253,7 +253,6 @@ var useWizard = create((set, get) => ({
   cliOutput: [],
   targetIndex: null,
   writtenFiles: [],
-  approvedCommands: /* @__PURE__ */ new Set(),
   logs: [],
   error: null,
   inputReq: null,
@@ -349,10 +348,6 @@ var useWizard = create((set, get) => ({
   setTargetIndex: (index) => set({ targetIndex: index }),
   recordWrittenFile: (path) => set((s) => ({ writtenFiles: [...s.writtenFiles, path] })),
   clearWrittenFiles: () => set({ writtenFiles: [] }),
-  isCommandApproved: (command, cwd) => get().approvedCommands.has(`${cwd}\0${command}`),
-  approveCommand: (command, cwd) => set((s) => ({
-    approvedCommands: new Set(s.approvedCommands).add(`${cwd}\0${command}`)
-  })),
   logStart: (kind, name, input) => {
     const id = nanoid();
     set((s) => ({
@@ -401,7 +396,6 @@ var useWizard = create((set, get) => ({
       cliOutput: [],
       targetIndex: null,
       writtenFiles: [],
-      approvedCommands: /* @__PURE__ */ new Set(),
       logs: [],
       error: null,
       inputReq: null,
@@ -1026,6 +1020,7 @@ function EnterToContinuePrompt({
 function PromptInput() {
   const { phase, inputReq, submitInput } = useWizard();
   const [draft, setDraft] = useState6("");
+  const promptKey = inputReq && `${inputReq.promptType}:${inputReq.prompt}`;
   if (phase === "done" || phase === "error") {
     return /* @__PURE__ */ jsx7(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text9, { color: "gray", dimColor: true, children: "Press Enter or Esc to exit" }) });
   }
@@ -1044,7 +1039,8 @@ function PromptInput() {
         cancelable: inputReq.cancelable,
         error: inputReq.error,
         onSelect: submitInput
-      }
+      },
+      promptKey
     ) });
   }
   if (inputReq.promptType === "multiSelect") {
@@ -1059,7 +1055,8 @@ function PromptInput() {
         options: inputReq.options,
         error: inputReq.error,
         onSelect: submitInput
-      }
+      },
+      promptKey
     ) });
   }
   if (inputReq.promptType === "notice") {
@@ -1070,7 +1067,8 @@ function PromptInput() {
         messages: inputReq.messages,
         options: ["Continue"],
         onSelect: submitInput
-      }
+      },
+      promptKey
     ) });
   }
   if (inputReq.promptType === "enterToContinue") {
@@ -1096,7 +1094,8 @@ function PromptInput() {
         options: labels,
         secondary: inputReq.secondary,
         onSelect: (value) => submitInput(value === labels[0])
-      }
+      },
+      promptKey
     ) });
   }
   return /* @__PURE__ */ jsxs8(Box9, { flexDirection: "column", children: [
@@ -2716,8 +2715,8 @@ var selectIndexStep = async (ctx) => {
 };
 
 // src/lib/agent.ts
-import { ToolLoopAgent, hasToolCall, Output as Output3 } from "ai";
-import { createAnthropic as createAnthropic3 } from "@ai-sdk/anthropic";
+import { ToolLoopAgent, hasToolCall, Output as Output2 } from "ai";
+import { createAnthropic as createAnthropic2 } from "@ai-sdk/anthropic";
 import "zod";
 
 // src/lib/tools/index.ts
@@ -2760,17 +2759,23 @@ async function hasSymlinkParent(ctx, target) {
 // src/lib/tools/listFiles.ts
 function listFilesTool(ctx) {
   return tool({
-    description: "List files in the current working directory",
-    inputSchema: z6.object(),
-    execute: async () => {
-      logger.info("called listFiles tool");
+    description: 'List files in a directory (default: the current working directory). Pass path to list a subdirectory directly \u2014 e.g. "packages/api" \u2014 without first changeDirectory-ing into it.',
+    inputSchema: z6.object({
+      path: z6.string().optional().describe("Directory to list, relative to cwd (default: cwd)")
+    }),
+    execute: async ({ path = "." }) => {
+      logger.info({ path }, "called listFiles tool");
       if (++ctx.counts.list > ctx.limits.list) {
         return `Refused: list limit (${ctx.limits.list}) reached. Stop listing and proceed with the information you already have.`;
       }
-      const resolved2 = resolveInRoot(ctx, ".");
+      const resolved2 = resolveInRoot(ctx, path);
       if (!resolved2.ok) return resolved2.error;
-      const entries = await readdir(resolved2.target, { withFileTypes: true });
-      return entries.map((e) => e.isDirectory() ? `${e.name}/` : e.name).join("\n");
+      try {
+        const entries = await readdir(resolved2.target, { withFileTypes: true });
+        return entries.map((e) => e.isDirectory() ? `${e.name}/` : e.name).join("\n");
+      } catch (err) {
+        return `Error listing ${path}: ${err.message}`;
+      }
     }
   });
 }
@@ -3197,11 +3202,13 @@ function appendEnv(content, entries) {
   return content + prefix + lines;
 }
 function hasEnv(content, name) {
-  return new RegExp(`^(\\s*(?:export\\s+)?${name})\\s*=`, "m").test(content);
+  return new RegExp(`^([ \\t]*(?:export[ \\t]+)?${name})[ \\t]*=`, "m").test(
+    content
+  );
 }
 function readEnv(content, name) {
   const found = content.match(
-    new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=\\s*(.*)$`, "m")
+    new RegExp(`^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=[ \\t]*(.*)$`, "m")
   );
   if (!found) return null;
   const raw = found[1].trim();
@@ -3212,16 +3219,16 @@ function readEnv(content, name) {
 function upsertEnv(content, name, value) {
   if (!hasEnv(content, name)) return appendEnv(content, [[name, value]]);
   return content.replace(
-    new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=.*$`, "gm"),
+    new RegExp(`^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=.*$`, "gm"),
     () => `${name}=${value}`
   );
 }
 function writeCredentialsTool(ctx) {
   return tool6({
-    description: `Write the active Algolia credentials (${APP_ID_VAR} and ${API_KEY_VAR}) and the target index name (${INDEX_NAME_VAR}) into the given env file. The credentials come from the selected Algolia application, with a write key scoped to the target index; you only pass the path to the env file. ${INDEX_NAME_VAR} is always set to this run's target index, replacing any value already there. An ${APP_ID_VAR} or ${API_KEY_VAR} the file already gives a value is left untouched; a missing or blank one is filled in when it can be paired with the selected application. The env file is added to .gitignore automatically; do not edit .gitignore yourself.`,
+    description: `Write the active Algolia credentials (${APP_ID_VAR} and ${API_KEY_VAR}) and the target index name (${INDEX_NAME_VAR}) into the given env file. The credentials come from the selected Algolia application, with a write key scoped to the target index; you only pass the path to the env file. ${INDEX_NAME_VAR} is always set to this run's target index, replacing any value already there. An ${APP_ID_VAR} or ${API_KEY_VAR} the file already gives a value is left untouched; a missing or blank one is filled in when it can be paired with the selected application. The env file is added to .gitignore automatically; do not edit .gitignore yourself. If the script or app that reads these credentials lives in a subdirectory (e.g. a package in a monorepo), an env file at the repo root is the wrong default \u2014 a script only loads env vars from its own directory (or one it's explicitly configured to read), so check every directory from the script's own up to the repo root, not just those two: its own directory, each ancestor in between (a shared workspace-level directory above the immediate package is common), and the root. Use whichever of those already holds real credentials; only fall back to the repo root when none of them do. Never invent a brand-new file in one of those directories when a real one already exists in another \u2014 that leaves the real one stale and the new one wrong. Listing just the script's own directory and the very top-level root is not enough to find a workspace-level file in between; check the intermediate ones too. If instructions describe a location that doesn't match the project you actually find (e.g. a path outside the repo, or a convention the project doesn't follow), don't stop and ask before doing anything \u2014 call this tool on the real, in-repo file the script actually reads (that's always the safe default), then note the mismatch afterward. Ending your turn with only a question and no call to this tool leaves the project unconfigured.`,
     inputSchema: z13.object({
       filePath: z13.string().describe(
-        'Path to the env file to write credentials into (e.g. ".env")'
+        'Path to the env file to write credentials into, relative to the repo root (e.g. ".env", or "packages/api/.env" when the consuming script lives in that package)'
       )
     }),
     execute: async ({ filePath }) => {
@@ -3399,8 +3406,7 @@ function searchFilesTool(ctx) {
 }
 
 // src/lib/tools/runShell.ts
-import { tool as tool8, generateText, Output } from "ai";
-import { createAnthropic } from "@ai-sdk/anthropic";
+import { tool as tool8 } from "ai";
 import z15 from "zod";
 import { relative as relative4 } from "node:path";
 
@@ -3509,10 +3515,8 @@ function runShell(command, opts) {
 // src/lib/tools/runShell.ts
 function storeApproval(root) {
   return async (req) => {
-    const store = useWizard.getState();
-    if (store.isCommandApproved(req.command, req.cwd)) return "approve";
     const rel = relative4(root, req.cwd);
-    const answer = await store.requestUserInput({
+    const answer = await useWizard.getState().requestUserInput({
       prompt: "Run this command?",
       promptType: "commandApproval",
       options: [],
@@ -3521,170 +3525,20 @@ function storeApproval(root) {
         cwd: rel === "" || rel.startsWith("..") ? req.cwd : rel
       }
     });
-    if (answer !== "approve") return "reject";
-    store.approveCommand(req.command, req.cwd);
-    return "approve";
+    return answer === "approve" ? "approve" : "reject";
   };
 }
 var EXPLORATORY_COMMANDS = /* @__PURE__ */ new Set(["ls", "find", "tree", "dir"]);
-function commandSegments(command) {
-  return command.split(/&&|;|\|/).map((segment) => segment.trim());
-}
 function isExploratoryCommand(command) {
-  return commandSegments(command).map((segment) => segment.split(/\s+/)[0]).some((word) => word !== void 0 && EXPLORATORY_COMMANDS.has(word));
-}
-var READ_ONLY_BINARIES = /* @__PURE__ */ new Set([
-  "cat",
-  "head",
-  "tail",
-  "wc",
-  "pwd",
-  "echo",
-  "date",
-  "whoami",
-  "hostname",
-  "uname",
-  "which",
-  "file",
-  "stat",
-  "grep",
-  "egrep",
-  "fgrep",
-  "rg",
-  "diff"
-]);
-var READ_ONLY_NO_ARGS_BINARIES = /* @__PURE__ */ new Set(["env", "printenv"]);
-var GIT_READ_ONLY_SUBCOMMANDS = /* @__PURE__ */ new Set([
-  "status",
-  "log",
-  "diff",
-  "show",
-  "describe",
-  "blame",
-  "ls-files",
-  "rev-parse",
-  "cat-file",
-  "shortlog",
-  "ls-remote"
-]);
-var VERSION_CHECK_BINARIES = /* @__PURE__ */ new Set([
-  "node",
-  "tsc",
-  "npm",
-  "pnpm",
-  "yarn",
-  "python",
-  "python3",
-  "ruby",
-  "go",
-  "cargo",
-  "rustc",
-  "php",
-  "composer",
-  "java",
-  "mvn",
-  "gradle",
-  "bundle",
-  "git"
-]);
-var VERSION_FLAGS = /* @__PURE__ */ new Set(["--version", "-v", "-V"]);
-function hasFileRedirect(segment) {
-  return segment.replace(/\d>&\d/g, "").includes(">");
-}
-function hasShellInjectionRisk(segment) {
-  if (segment.includes("$(") || segment.includes("<(") || segment.includes("`")) {
-    return true;
-  }
-  return segment.replace(/\d>&\d/g, "").includes("&");
-}
-function fastPathSegmentSafety(segment) {
-  if (!segment) return true;
-  if (hasFileRedirect(segment)) return false;
-  if (hasShellInjectionRisk(segment)) return false;
-  const [cmd0, ...rest] = segment.split(/\s+/);
-  if (cmd0 === void 0) return true;
-  if (VERSION_CHECK_BINARIES.has(cmd0) && rest.length === 1 && VERSION_FLAGS.has(rest[0])) {
-    return true;
-  }
-  if (READ_ONLY_BINARIES.has(cmd0)) return true;
-  if (READ_ONLY_NO_ARGS_BINARIES.has(cmd0)) {
-    return rest.length === 0 ? true : void 0;
-  }
-  if (cmd0 === "git") {
-    return GIT_READ_ONLY_SUBCOMMANDS.has(rest[0] ?? "") ? true : void 0;
-  }
-  return void 0;
-}
-function fastPathSafety(command) {
-  const results = commandSegments(command).map(fastPathSegmentSafety);
-  if (results.some((r) => r === false)) return false;
-  if (results.every((r) => r === true)) return true;
-  return void 0;
-}
-var CLASSIFIER_MODEL = "claude-haiku-4-5";
-var commandSafetySchema = z15.object({
-  safe: z15.boolean(),
-  reason: z15.string().describe("One short sentence explaining the verdict.")
-});
-function defaultCreateModel() {
-  const token = getAuthToken();
-  if (!token) {
-    throw new Error("Not authenticated: no user token available");
-  }
-  return createAnthropic({
-    apiKey: token,
-    baseURL: PROXY_BASE_URL,
-    fetch: proxyFetch
-  });
-}
-function approvedCommandHistory(approvedCommands) {
-  return Array.from(approvedCommands).map((entry) => {
-    const sep2 = entry.indexOf("\0");
-    return { cwd: entry.slice(0, sep2), command: entry.slice(sep2 + 1) };
-  });
+  return command.split(/&&|;|\|/).map((segment) => segment.trim().split(/\s+/)[0]).some((word) => word !== void 0 && EXPLORATORY_COMMANDS.has(word));
 }
-async function classifyCommandSafety(createModel, command, cwd, explanation, approvedHistory) {
-  try {
-    const anthropic = createModel();
-    const { output } = await generateText({
-      model: anthropic(CLASSIFIER_MODEL),
-      temperature: 0,
-      output: Output.object({ schema: commandSafetySchema }),
-      prompt: [
-        "A coding agent wants to run this shell command in a user's project without asking for approval first. The command may be in any programming language or ecosystem.",
-        "Judge it SAFE only if it cannot modify, delete, move, rename, or install anything the project cares about, cannot push/publish/deploy/commit anything, and cannot make a network request that changes remote state.",
-        "Three broad categories are safe, and most commands you will see fall into one of them:",
-        "(1) Reporting or listing existing state, with no side effect \u2014 e.g. `git status`, `npm ls`, `npm outdated`, `pip show`, `pip freeze`, `cargo tree`, `docker ps`, `docker images`, `kubectl get pods`, `terraform state list`. This includes a read-only GET-style query to a remote registry or API that only fetches public metadata and changes nothing remote (e.g. `npm view <package>`, `pip index versions <package>`, `curl` with no -X/--request other than GET and no -d/--data) \u2014 safe because nothing changes, not because it stays local.",
-        '(2) A "preview" or "check" mode that reports what a change WOULD do, or reports a problem, without making the change. This is a general pattern, not a fixed list \u2014 ANY command that takes a dry-run/check/plan/validate/diff/list-only flag is safe when that flag is present, regardless of whether the same flag would normally appear on a "safe" kind of command: `terraform plan`, `terraform validate`, `terraform fmt -check`, `black --check`, `prettier --check`, `isort --check`, `gofmt -l` (list-only), `stylelint` with no `--fix`, and equally `git push --dry-run`, `npm publish --dry-run`, `kubectl apply --dry-run=client` \u2014 these last three are otherwise-unsafe operations (push, publish, cluster changes) that the dry-run flag turns into a report. The corresponding command WITHOUT that flag (e.g. `terraform apply`, `black .`, `gofmt -w`, `git push`) is a different, unsafe command \u2014 the flag is what makes the difference, for any tool, not just the ones named here. This cuts both ways, so do not assume a bare invocation is the safe one: `cargo fmt`, `black`, `prettier`, `isort`, `rustfmt`, and `terraform fmt` all REWRITE FILES by default and need an explicit check/diff/dry-run flag to become safe, while `gofmt`, `eslint`, `stylelint`, `rubocop`, and `ruff check` default to a safe check-only mode and need an explicit fix/write flag to become unsafe \u2014 the same-looking bare command is safe for one group and unsafe for the other, so judge each by what its own flags actually say, not by resemblance to a tool you already judged.',
-        "(3) Running the project's own tests, type checker, linter, or build/compile step (e.g. `npm run build`, `yarn build`, `vite build`, `webpack`, `tsc`, `cargo build`, `go build`, `mvn compile`), as long as it is not passed an autofix/write/update flag (e.g. --fix, -u, --write, rubocop -a) \u2014 this holds even though the point of a build step is to write compiled output to a build/dist/target directory inside the project (e.g. a target/, build/, dist/, or __pycache__ directory): writing that output does not make the command unsafe. It stops being safe the moment the command chain goes past building \u2014 a step that also deploys, publishes, uploads, or pushes the build (e.g. `next build && vercel deploy`, `npm run build && npm publish`) is unsafe for that later segment even though the build segment itself is fine; judge each chained segment on its own, same as elsewhere in this list.",
-        "Deleting or removing anything is unsafe, even something in a cache or build directory (e.g. `rm -rf __pycache__`, `cargo clean`, `git clean`), and even if the command otherwise fits one of the three categories above. Installing, uninstalling, or upgrading a dependency, changing a database schema, or writing to a path outside the project is also unsafe. A command chained with && or ; is only safe if every part of the chain is safe on its own.",
-        "One specific, narrow exception to all of the above: when the command literally invokes one of these runner programs BY NAME as the leading command \u2014 npx, bunx, pnpm dlx, yarn dlx, pipx run, uvx \u2014 it is unsafe regardless of what it then runs, even something that looks like a harmless test/lint/typecheck command (e.g. `npx tsc --noEmit`, `uvx ruff check .`), because that runner can fetch and execute a different, unreviewed version of a package from a registry each time. This exception is about that specific syntax, not a general doubt about whether a tool is installed: a plain `ruff check .`, `pytest`, or any other bare command name is NOT this exception merely because you cannot verify from the string alone that it is installed \u2014 judge those the same as any other already-installed project tool, per the categories above. If you are unsure, judge it unsafe.",
-        ...approvedHistory.length > 0 ? [
-          "The user has already explicitly approved these exact commands earlier in this session (working directory in parentheses, then the command):",
-          approvedHistory.map((h) => `- (${h.cwd}) ${h.command}`).join("\n"),
-          "If the new command performs the same action and side-effect profile as one of these \u2014 differing only in a trivial way, such as a different file path, package name, or argument value that does not change what kind of action it is \u2014 judge it SAFE on that precedent, even if it would not otherwise fit categories (1)-(3) above. Do not stretch this to a command that merely shares a binary name, or superficially resembles one on the list while doing something riskier or of a different kind (e.g. an approved `rm build/tmp.log` does not license a new `rm -rf src/`, and an approved `git push origin feature-x` does not license `git push --force`)."
-        ] : [],
-        `Command: ${command}`,
-        `Working directory: ${cwd}`,
-        `Stated purpose: ${explanation}`
-      ].join("\n")
-    });
-    if (!output.safe) {
-      logger.info(
-        { command, reason: output.reason },
-        "runShell: classifier judged command unsafe, requiring approval"
-      );
-    }
-    return output.safe;
-  } catch (err) {
-    logger.warn(
-      { err, command },
-      "runShell: command safety classifier failed, requiring approval"
-    );
-    return false;
+async function approveAndRun(ctx, command, cwd, explanation) {
+  const decision = await ctx.shell.approve({ command, cwd, explanation });
+  if (decision === "reject") {
+    ctx.shell.executions.push({ command, cwd, approved: false });
+    logger.info({ command }, "runShell: user rejected the command");
+    return "The user rejected this command. Do not retry it. Propose a different command, or report the limitation via reportStatus.";
   }
-}
-async function runAndRecord(ctx, command, cwd) {
   useWizard.getState().pushNotice({ messages: [`Running: ${command}`] });
   const env = await ctx.shell.env().catch((err) => {
     logger.warn({ err, command }, "runShell: could not resolve command env");
@@ -3720,18 +3574,9 @@ async function runAndRecord(ctx, command, cwd) {
     output: run2.output
   };
 }
-async function approveAndRun(ctx, command, cwd, explanation) {
-  const decision = await ctx.shell.approve({ command, cwd, explanation });
-  if (decision === "reject") {
-    ctx.shell.executions.push({ command, cwd, approved: false });
-    logger.info({ command }, "runShell: user rejected the command");
-    return "The user rejected this command. Do not retry it. Propose a different command, or report the limitation via reportStatus.";
-  }
-  return runAndRecord(ctx, command, cwd);
-}
-function runShellTool(ctx, createModel = defaultCreateModel) {
+function runShellTool(ctx) {
   return tool8({
-    description: "Run a shell command in the project. Use this for anything the project needs done in its own ecosystem: installing dependencies, running a script you wrote, running the project's lint/typecheck/test commands. Do not use this to find or read files \u2014 use listFiles, searchFiles, and readFile instead of ls/find/cat/head/tail/grep/rg. This tool refuses ls/find/tree/dir outright; a read command like cat is not refused (some read-only commands run without approval, see below), but it's still the wrong tool for reading a file \u2014 the dedicated tools exist for that and won't count against this tool's command budget. The user approves any command that could change the project before it runs, so write a clear `explanation`. A command judged read-only (inspection, or running tests/typecheck/lint without an autofix flag, in any language) runs immediately without approval. If the user rejects a command, do not retry it \u2014 propose a different approach.",
+    description: "Run a shell command in the project. Use this for anything the project needs done in its own ecosystem: installing dependencies, running a script you wrote, running the project's lint/typecheck/test commands. To inspect the project, use listFiles or searchFiles instead of ls/find \u2014 this tool refuses those. The user sees and approves every command before it runs, so write a clear `explanation`. If the user rejects a command, do not retry it \u2014 propose a different approach.",
     inputSchema: z15.object({
       command: z15.string().describe(
         "The command to run, exactly as it would be typed in a shell. Pipes, && and redirects are allowed."
@@ -3750,29 +3595,9 @@ function runShellTool(ctx, createModel = defaultCreateModel) {
       const resolved2 = resolveInRoot(ctx, cwd ?? ".");
       if (!resolved2.ok) return resolved2.error;
       if (isExploratoryCommand(command)) {
-        return "Refused: use listFiles or searchFiles to find files, and readFile to read one, instead of ls/find/tree/dir.";
+        return "Refused: use listFiles or searchFiles to inspect the project instead of ls/find/tree.";
       }
       logger.info({ command, cwd: resolved2.target }, "called runShell tool");
-      const fast = fastPathSafety(command);
-      let isSafe = fast;
-      if (isSafe === void 0) {
-        const store = useWizard.getState();
-        isSafe = store.isCommandApproved(command, resolved2.target);
-        if (!isSafe) {
-          isSafe = await classifyCommandSafety(
-            createModel,
-            command,
-            resolved2.target,
-            explanation,
-            approvedCommandHistory(store.approvedCommands)
-          );
-        }
-      }
-      if (isSafe) {
-        return serializePrompt(
-          () => runAndRecord(ctx, command, resolved2.target)
-        );
-      }
       return serializePrompt(
         () => approveAndRun(ctx, command, resolved2.target, explanation)
       );
@@ -3822,8 +3647,8 @@ function reviewScriptTool(ctx) {
 }
 
 // src/lib/tools/generateRecord.ts
-import { tool as tool10, generateText as generateText2, Output as Output2, NoObjectGeneratedError } from "ai";
-import { createAnthropic as createAnthropic2 } from "@ai-sdk/anthropic";
+import { tool as tool10, generateText, Output, NoObjectGeneratedError } from "ai";
+import { createAnthropic } from "@ai-sdk/anthropic";
 import { nanoid as nanoid2 } from "nanoid";
 import { mkdir as mkdir5, writeFile as writeFile6 } from "node:fs/promises";
 import { dirname as dirname6 } from "node:path";
@@ -3833,18 +3658,18 @@ var RECORD_MODEL = "claude-haiku-4-5";
 var MAX_RECORDS = 100;
 var BATCH_SIZE = 10;
 var MAX_BATCH_ATTEMPTS = 3;
-function defaultCreateModel2() {
+function defaultCreateModel() {
   const token = getAuthToken();
   if (!token) {
     throw new Error("Not authenticated: no user token available");
   }
-  return createAnthropic2({
+  return createAnthropic({
     apiKey: token,
     baseURL: PROXY_BASE_URL,
     fetch: proxyFetch
   });
 }
-function generateRecordTool(ctx, createModel = defaultCreateModel2) {
+function generateRecordTool(ctx, createModel = defaultCreateModel) {
   return tool10({
     description: "Generate realistic sample records for an entity and write them to a JSON file. Provide the entity name and its attributes; this tool asks a model to invent varied, realistic values, each with a unique objectID, and returns the file path to read them from at runtime. Do not invent the record values or objectIDs yourself, and do not inline the returned records into the script \u2014 call this tool and read the file it writes.",
     inputSchema: z17.object({
@@ -3865,9 +3690,9 @@ function generateRecordTool(ctx, createModel = defaultCreateModel2) {
           let lastError;
           for (let attempt = 1; attempt <= MAX_BATCH_ATTEMPTS; attempt++) {
             try {
-              const { output } = await generateText2({
+              const { output } = await generateText({
                 model: anthropic(RECORD_MODEL),
-                output: Output2.object({
+                output: Output.object({
                   schema: z17.object({
                     records: z17.array(recordSchema).length(batchCount)
                   })
@@ -4032,7 +3857,7 @@ async function runAgentAttempt(req, attempt) {
   if (!token) {
     throw new Error("Not authenticated: no user token available");
   }
-  const anthropic = createAnthropic3({
+  const anthropic = createAnthropic2({
     apiKey: token,
     baseURL: PROXY_BASE_URL,
     fetch: proxyFetch
@@ -4069,7 +3894,7 @@ async function runAgentAttempt(req, attempt) {
         }
       };
     }),
-    output: Output3.object({ schema: req.outputSchema }),
+    output: Output2.object({ schema: req.outputSchema }),
     tools: createTools(toolContext, {
       output: req.outputSchema,
       tools: req.tools
@@ -4157,6 +3982,7 @@ var detectLanguage = () => runAgent({
     "Return the exact version",
     "Exclude things like CSS frameworks, build tools, or testing frameworks",
     `Determine publicEnvVarPrefix: check the project's own env var usage first (e.g. names already referenced in code, .env/.env.example); if none exists, fall back to the detected framework's known convention for exposing env vars to client-side code; use "" when the project has no such convention (e.g. a backend-only project).`,
+    "A brand-new project has no existing env var usage to find \u2014 one or two targeted checks (e.g. .env/.env.example, or a grep for the bundler's public-prefix convention) are enough to confirm that. Do not keep searching once those turn up nothing; fall back to the framework convention immediately.",
     'Use as few tools as possible, but do not guess. If you cant find the answer, say "unknown"',
     "When done, call reportStatus"
   ],
@@ -4252,7 +4078,7 @@ async function runAnalysis(mode, extraInstructions = []) {
 // package.json
 var package_default = {
   name: "@algolia/wizard",
-  version: "0.33.0-rc.126.240",
+  version: "0.34.0-rc.125.243",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {
@@ -4658,8 +4484,7 @@ ${formatCompletedSteps(ctx.completedSteps)}`,
 
 // src/actions/implement.ts
 import z29 from "zod";
-import { mkdir as mkdir7 } from "node:fs/promises";
-import { join as join12, relative as relative6 } from "node:path";
+import { relative as relative6 } from "node:path";
 
 // src/lib/git.ts
 import { execFile as execFile2 } from "node:child_process";
@@ -4717,41 +4542,43 @@ async function copyUploadIntoProject(repoRoot, ingestDir, sourcePath) {
   }
   return { ok: true, relPath };
 }
-function hasEnvVar(content, name) {
-  return new RegExp(`^(\\s*(?:export\\s+)?${name})\\s*=`, "m").test(content);
-}
-async function readEnvVar(repoRoot, name) {
-  let content;
+var ENV_FILE_PRECEDENCE = [".env", ".env.local"];
+async function readEnvFileIfExists(path) {
   try {
-    content = await readFile8(join10(repoRoot, ".env"), "utf8");
+    return await readFile8(path, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     return void 0;
   }
-  const match = new RegExp(
-    `^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=[ \\t]*(.*)$`,
-    "m"
-  ).exec(content);
-  if (!match) return void 0;
-  const value = match[1].trim().replace(/^(['"])(.*)\1$/, "$2").trim();
-  if (!value || value.startsWith("<")) return void 0;
-  return value;
 }
-async function writeSearchEnvValues(repoRoot, vars) {
-  const target = join10(repoRoot, ".env");
-  let existing = "";
-  try {
-    existing = await readFile8(target, "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") throw err;
+async function definingEnvFile(repoRoot, name) {
+  let found;
+  for (const file of ENV_FILE_PRECEDENCE) {
+    const path = join10(repoRoot, file);
+    const content = await readEnvFileIfExists(path);
+    if (content !== void 0 && hasEnv(content, name)) found = { path, content };
   }
-  const missing = vars.filter((v) => !hasEnvVar(existing, v.name));
-  if (missing.length === 0) return [];
-  const prefix = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
-  const lines = missing.map(({ name, value }) => `${name}=${value}
-`).join("");
-  await writeFile7(target, existing + prefix + lines, "utf8");
-  return missing.map((v) => v.name);
+  return found;
+}
+function usableEnvValue(content, name) {
+  const value = readEnv(content, name);
+  return value && !value.startsWith("<") ? value : void 0;
+}
+async function readEnvVar(repoRoot, name) {
+  const found = await definingEnvFile(repoRoot, name);
+  return found ? usableEnvValue(found.content, name) : void 0;
+}
+async function writeSearchEnvValues(repoRoot, vars, defaultFileName = ".env") {
+  const written = [];
+  for (const { name, value } of vars) {
+    const found = await definingEnvFile(repoRoot, name);
+    if (found && usableEnvValue(found.content, name) !== void 0) continue;
+    const path = found?.path ?? join10(repoRoot, defaultFileName);
+    const existing = found?.content ?? await readEnvFileIfExists(path) ?? "";
+    await writeFile7(path, upsertEnv(existing, name, value), "utf8");
+    written.push({ name, file: path });
+  }
+  return written;
 }
 function normalizeFindingPaths(findings) {
   return {
@@ -4842,6 +4669,7 @@ var resolveEnvVarPrefix = (frameworkName) => runAgent({
   instructions: [
     `The developer corrected the project's framework to "${frameworkName}".`,
     `Determine publicEnvVarPrefix for this framework: check the project's own env var usage first (e.g. names already referenced in code, .env/.env.example); if none exists, fall back to this framework's known convention for exposing env vars to client-side code; use "" when the framework has no such convention (e.g. a backend-only framework).`,
+    "A brand-new project has no existing env var usage to find \u2014 one or two targeted checks (e.g. .env/.env.example, or a grep for the framework's public-prefix convention) are enough to confirm that. Do not keep searching once those turn up nothing; fall back to the framework convention immediately.",
     'Use as few tools as possible, but do not guess. If you cant find the answer, say "unknown"',
     "When done, call reportStatus"
   ],
@@ -4878,6 +4706,7 @@ var MAX_IMPLEMENT_VERIFICATION_ATTEMPTS = 3;
 var DEFAULT_IMPLEMENT_USE_CASES = ["ingestion", "search"];
 var INGEST_DIR = ".algolia-wizard";
 var JS_LANGUAGES = ["javascript", "typescript", "jsx", "tsx", "node"];
+var ENV_LOCAL_AWARE_PREFIXES = ["VITE_", "NEXT_PUBLIC_", "REACT_APP_"];
 function lower(entries) {
   return entries.map((entry) => entry.name.toLowerCase());
 }
@@ -4948,7 +4777,7 @@ function algoliaClientDoc(input) {
 function ingestionInstructions(input) {
   return [
     ...input.confirmed && input.confirmed.length ? [
-      `Create an ingestion script under "${input.ingestDir}/" at the repo root. That directory already exists \u2014 writeFile creates any nested path itself, so never run a shell command just to create a directory.`,
+      `Create an ingestion script under "${input.ingestDir}/" at the repo root.`,
       `Ingest only the confirmed entity (name, source paths, attributes): ${JSON.stringify(input.confirmed)}.`,
       `Ingesting writes to Algolia, so the script needs a write API key and App ID \u2014 read them from the ${API_KEY_VAR} and ${APP_ID_VAR} environment variables rather than hardcoding them. The wizard sets these when it runs the script.`,
       `Read the index name from the ${INDEX_NAME_VAR} environment variable, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or entity name \u2014 the write key only works for that exact index. Exit with an error if ${INDEX_NAME_VAR} is unset.`,
@@ -4977,17 +4806,19 @@ function searchInstructions(input) {
     `Create the search experience as its own component in a new file, following the project's existing component conventions (location, naming, styling approach). Do not write it inline into an existing file.`,
     `Import and render that new component from ${input.searchLocation ? `"${input.searchLocation}"` : "the best shared, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working search input and results list against the target index.`,
     "If a search box already exists, replace its usage with an import and render of your new component; remove the old implementation.",
+    "When rendering results with an existing shared component (e.g. a card), import and reuse that component rather than inlining its markup \u2014 inlining silently drops the styles and behavior its own file provides.",
     `Read the index name from the ${publicIndexNameVar(input.publicEnvVarPrefix)} env var, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or component name.`,
     "Read the App ID, the search-only API key, and the index name from env vars; never hardcode them. A search-only key is safe to expose client-side.",
     // The key is provisioned only after verification passes, and the wizard
-    // reads .env to decide whether a key already exists — an agent-invented
-    // value there would be reused as if it were real.
-    `Add Algolia App ID "${input.appId}"; leave the search-only key as a placeholder. Do not create or edit .env \u2014 the wizard writes the resolved key there itself.`,
-    // The wizard writes these exact names into .env right after this step.
+    // reads the project's env files to decide whether a key already exists —
+    // an agent-scaffolded value there, even a blank one, would be treated as
+    // real and silently override whatever the wizard writes.
+    `Add Algolia App ID "${input.appId}"; leave the search-only key as a placeholder in the code only. Do not create or edit any .env* file (.env, .env.local, etc.) yourself, not even to add a blank placeholder line \u2014 the wizard resolves the real key and writes it there itself.`,
+    // The wizard writes these exact names into the project's env files right after this step.
     `Use exactly these env var names in the code: ${input.searchEnvVars.map(({ name }) => name).join(", ")}.`,
     "Install any Algolia packages you import with the project's own package manager via runShell, and declare them in the project's dependency manifest.",
     "Match the styles of the application as closely as possible.",
-    "The summary should be extremely concise; do not mention env var setup or manual testing steps \u2014 the wizard writes the resolved credentials to .env and reports that separately."
+    "The summary should be extremely concise; do not mention env var setup or manual testing steps \u2014 the wizard writes the resolved credentials to the project env files and reports that separately."
   ];
 }
 function verificationInstructions(input) {
@@ -5183,9 +5014,6 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES) {
   const targetIndex = selected?.selection;
   useWizard.getState().setTargetIndex(targetIndex ?? null);
   await assertGitRepoWithHead(repoRoot);
-  if (useCases.includes("ingestion")) {
-    await mkdir7(join12(repoRoot, INGEST_DIR), { recursive: true });
-  }
   const normalized = normalizeFindingPaths(findings);
   const confirmed2 = normalized.confirmedEntities;
   const searchLocation = normalized.searchImplementationAnalysis;
@@ -5250,11 +5078,11 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES) {
       const appIdVarName = publicAppIdVar(publicEnvVarPrefix);
       const searchKeyVarName = publicSearchKeyVar(publicEnvVarPrefix);
       summaries.push(
-        `\u26A0\uFE0F .env already sets ${appIdVarName}=${envAppId}, but the active Algolia application is ${appId}. The wizard left those values alone \u2014 update ${appIdVarName} and ${searchKeyVarName} by hand, or searches will fail.`
+        `\u26A0\uFE0F Your project's env files already set ${appIdVarName}=${envAppId}, but the active Algolia application is ${appId}. The wizard left those values alone \u2014 update ${appIdVarName} and ${searchKeyVarName} by hand, or searches will fail.`
       );
       logger.warn(
         { envAppId, appId },
-        "implement: .env holds credentials for a different Algolia application; not reusing its search key"
+        "implement: env files hold credentials for a different Algolia application; not reusing its search key"
       );
     }
   }
@@ -5427,7 +5255,7 @@ ${detail}` : ""}`
         searchKeyError = err.message;
         logger.warn(
           { err: searchKeyError },
-          "implement: could not provision a search-only API key; the .env value stays a placeholder"
+          "implement: could not provision a search-only API key; the env value stays a placeholder"
         );
       }
     }
@@ -5441,34 +5269,42 @@ ${detail}` : ""}`
       (v) => !v.value.startsWith("<")
     );
     if (resolvedSearchEnvVars.length > 0) {
+      const defaultEnvFile = ENV_LOCAL_AWARE_PREFIXES.includes(
+        publicEnvVarPrefix
+      ) ? ".env.local" : ".env";
       const written = await writeSearchEnvValues(
         repoRoot,
-        resolvedSearchEnvVars
+        resolvedSearchEnvVars,
+        defaultEnvFile
       );
-      if (written.length > 0) {
-        summaries.push(`Wrote ${written.join(", ")} to .env.`);
-      }
-      const ignored = await ensureGitIgnored(repoRoot, join12(repoRoot, ".env"));
-      if (ignored === "added") {
-        summaries.push("Added .env to .gitignore.");
-      } else if (ignored === "tracked") {
-        summaries.push(
-          '\u26A0\uFE0F .env is tracked by git, so a .gitignore rule cannot un-stage it. Run "git rm --cached .env" before committing, or the credentials go into history.'
-        );
+      const writtenFiles = [...new Set(written.map((w) => w.file))];
+      for (const file of writtenFiles) {
+        const label = relative6(repoRoot, file);
+        const names = written.filter((w) => w.file === file).map((w) => w.name);
+        summaries.push(`Wrote ${names.join(", ")} to ${label}.`);
+        const ignored = await ensureGitIgnored(repoRoot, file);
+        if (ignored === "added") {
+          summaries.push(`Added ${label} to .gitignore.`);
+        } else if (ignored === "tracked") {
+          summaries.push(
+            `\u26A0\uFE0F ${label} is tracked by git, so a .gitignore rule cannot un-stage it. Run "git rm --cached ${label}" before committing, or the credentials go into history.`
+          );
+        }
       }
+      const writtenNames = new Set(written.map((w) => w.name));
       const stale = [];
       for (const v of resolvedSearchEnvVars) {
-        if (written.includes(v.name)) continue;
+        if (writtenNames.has(v.name)) continue;
         const current = await readEnvVar(repoRoot, v.name);
         if (current && current !== v.value) stale.push(v);
       }
       if (stale.length > 0 && !envAppIdMismatch) {
         summaries.push(
-          `\u26A0\uFE0F .env already assigns a different value to ${stale.map((v) => `${v.name} (should be ${v.value})`).join(", ")} \u2014 the wizard left it alone. Fix it by hand, or searches will fail.`
+          `\u26A0\uFE0F Your project's env files already assign a different value to ${stale.map((v) => `${v.name} (should be ${v.value})`).join(", ")} \u2014 the wizard left it alone. Fix it by hand, or searches will fail.`
         );
         logger.warn(
           { vars: stale.map((v) => v.name) },
-          "implement: .env holds different values for the resolved search credentials; not overwriting them"
+          "implement: env files hold different values for the resolved search credentials; not overwriting them"
         );
       }
     }
@@ -5477,7 +5313,7 @@ ${detail}` : ""}`
     );
     if (unresolvedSearchEnvVars.length > 0) {
       summaries.push(
-        `Could not resolve a value for ${unresolvedSearchEnvVars.map((v) => v.name).join(", ")} \u2014 fill it in manually in .env.` + (searchKeyError ? ` Reason: ${searchKeyError}` : "")
+        `Could not resolve a value for ${unresolvedSearchEnvVars.map((v) => v.name).join(", ")} \u2014 fill it in manually in .env or .env.local.` + (searchKeyError ? ` Reason: ${searchKeyError}` : "")
       );
     }
   } else {
@@ -5811,7 +5647,7 @@ function parseCliArgs(argv) {
 
 // src/lib/resetState.ts
 import { readdir as readdir3, rm as rm2 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { join as join12 } from "node:path";
 var KEEP = ["wizard.log"];
 async function resetProjectState() {
   const dir = stateDir();
@@ -5825,7 +5661,7 @@ async function resetProjectState() {
   const targets = entries.filter((name) => !KEEP.includes(name));
   await Promise.all(
     targets.map(
-      (name) => rm2(join13(dir, name), { recursive: true, force: true })
+      (name) => rm2(join12(dir, name), { recursive: true, force: true })
     )
   );
   return { dir, removed: targets };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@algolia/wizard",
-  "version": "0.33.0-rc.126.240",
+  "version": "0.34.0-rc.125.243",
   "description": "Magically implement Algolia functionality in your codebase",
   "type": "module",
   "engines": {