@algolia/wizard 0.67.0 → 0.69.0

package/dist/main.js

@@ -48,7 +48,7 @@ function runAlgoliaCli(args, { onOutput, redact } = {}) {
   const store = useWizard.getState();
   const command = mask(args.join(" "), redact);
   const logId = store.logStart("tool", `algolia ${command}`);
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     const child = spawn("npx", npxArgs(args), { shell });
     let stdout = "";
     let stderr = "";
@@ -71,7 +71,7 @@ function runAlgoliaCli(args, { onOutput, redact } = {}) {
       splitters.stdout.flush();
       splitters.stderr.flush();
       if (code === 0) {
-        resolve4(stdout);
+        resolve5(stdout);
       } else {
         const failed = stderr.trim();
         let detail = "";
@@ -275,15 +275,15 @@ var useWizard = create((set, get) => ({
   ),
   openLearnMore: () => set({ homeScreen: "learnMore" }),
   backToHome: () => set({ homeScreen: "home" }),
-  waitForStart: () => new Promise((resolve4) => {
+  waitForStart: () => new Promise((resolve5) => {
     if (get().phase !== "idle") {
-      resolve4();
+      resolve5();
       return;
     }
     const unsubscribe = useWizard.subscribe((s) => {
       if (s.phase !== "idle") {
         unsubscribe();
-        resolve4();
+        resolve5();
       }
     });
   }),
@@ -385,11 +385,11 @@ var useWizard = create((set, get) => ({
       (t) => t.id === id ? { ...t, status, durationMs: Date.now() - t.startedAt } : t
     )
   })),
-  requestUserInput: (req) => new Promise((resolve4) => {
+  requestUserInput: (req) => new Promise((resolve5) => {
     set({
       phase: "awaitingInput",
       inputReq: req,
-      _resolve: resolve4
+      _resolve: resolve5
     });
   }),
   submitInput: async (value) => {
@@ -1969,7 +1969,7 @@ function identify(traits) {
 // package.json
 var package_default = {
   name: "@algolia/wizard",
-  version: "0.67.0",
+  version: "0.69.0",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {
@@ -2810,10 +2810,11 @@ import { relative as relative3 } from "node:path";
 import { z as z12 } from "zod";
 
 // src/lib/keychain.ts
+import { createHash } from "node:crypto";
 import { deletePassword, getPassword, setPassword } from "cross-keychain";
 import { z as z11 } from "zod";
 var SERVICE = "algolia-wizard";
-var account = (userId) => `api-keys:${userId}`;
+var account = (userId) => `api-keys-${createHash("sha256").update(userId).digest("hex")}`;
 var storedKeysSchema = z11.record(z11.string(), z11.string());
 function entryId(kind, index, appId) {
   return `${kind}:${appId}:${index}`;
@@ -2875,15 +2876,17 @@ function storeKey(kind, userId, index, appId, value) {
 }
 function deleteStoredKeys(userId) {
   return serialized(async () => {
-    try {
-      await deletePassword(SERVICE, account(userId));
-    } catch (err) {
-      const message = err.message;
-      if (/not found/i.test(message)) return;
-      logger.warn(
-        { err: message, userId },
-        "could not delete the API keys from the keychain"
-      );
+    for (const keychainAccount of [account(userId), "api-keys"]) {
+      try {
+        await deletePassword(SERVICE, keychainAccount);
+      } catch (err) {
+        const message = err.message;
+        if (/not found/i.test(message)) continue;
+        logger.warn(
+          { err: message, userId },
+          "could not delete the API keys from the keychain"
+        );
+      }
     }
   });
 }
@@ -3016,10 +3019,10 @@ var GIT_ENV_OVERRIDES = [
 function gitSucceeds(root, args) {
   const env = { ...process.env };
   for (const key of GIT_ENV_OVERRIDES) delete env[key];
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     execFile("git", ["-C", root, ...args], { env }, (err) => {
-      if (!err) return resolve4(true);
-      resolve4(
+      if (!err) return resolve5(true);
+      resolve5(
         err.code === 1 ? false : void 0
       );
     });
@@ -3303,7 +3306,7 @@ import { relative as relative5 } from "node:path";
 // src/lib/tools/reviewScript.ts
 import { tool as tool8 } from "ai";
 import z15 from "zod";
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import { readFile as readFile7, stat as stat2 } from "node:fs/promises";
 import { relative as relative4 } from "node:path";
 
@@ -3320,7 +3323,7 @@ function serializePrompt(work) {
 var reviewedCommandApprovals = /* @__PURE__ */ new WeakMap();
 async function fileDigest(filePath) {
   const content = await readFile7(filePath);
-  return createHash("sha256").update(content).digest("hex");
+  return createHash2("sha256").update(content).digest("hex");
 }
 function grantReviewedCommandApproval(ctx, approval) {
   reviewedCommandApprovals.set(ctx, approval);
@@ -3466,7 +3469,7 @@ var SIGKILL_DELAY_MS = 5e3;
 function runShell(command, opts) {
   const timeoutMs = opts.timeoutMs ?? DEFAULT_SHELL_TIMEOUT_MS;
   const startedAt = Date.now();
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     let output = "";
     let timedOut = false;
     let settled = false;
@@ -3481,7 +3484,7 @@ function runShell(command, opts) {
       settled = true;
       clearTimeout(timer);
       clearTimeout(killTimer);
-      resolve4({
+      resolve5({
         exitCode,
         output: truncateText(output.trim()),
         timedOut,
@@ -3738,8 +3741,8 @@ function defaultCreateModel() {
 }
 function approvedCommandHistory(approvedCommands) {
   return Array.from(approvedCommands).map((entry) => {
-    const sep2 = entry.indexOf("\0");
-    return { cwd: entry.slice(0, sep2), command: entry.slice(sep2 + 1) };
+    const sep3 = entry.indexOf("\0");
+    return { cwd: entry.slice(0, sep3), command: entry.slice(sep3 + 1) };
   });
 }
 async function classifyCommandSafety(createModel, command, cwd, explanation, approvedHistory) {
@@ -4854,7 +4857,7 @@ ${formatCompletedSteps(ctx.completedSteps)}`,
 // src/actions/implement.ts
 import z28 from "zod";
 import { access, mkdir as mkdir5, readFile as readFile8 } from "node:fs/promises";
-import { join as join10, relative as relative6 } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute3, join as join10, relative as relative6, resolve as resolve4, sep as sep2 } from "node:path";
 
 // src/lib/git.ts
 import { execFile as execFile2 } from "node:child_process";
@@ -4862,7 +4865,7 @@ import { copyFile, mkdir as mkdir4, stat as stat3 } from "node:fs/promises";
 import { basename as basename2, dirname as dirname3, isAbsolute as isAbsolute2, join as join8, resolve as resolve3 } from "node:path";
 var MAX_BUFFER = 32 * 1024 * 1024;
 function git(args) {
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     execFile2("git", args, { maxBuffer: MAX_BUFFER }, (err, stdout, stderr) => {
       if (err)
         return reject(
@@ -4870,7 +4873,7 @@ function git(args) {
             `git ${args.join(" ")} failed: ${stderr.toString().trim() || err.message}`
           )
         );
-      resolve4(stdout.toString());
+      resolve5(stdout.toString());
     });
   });
 }
@@ -5133,12 +5136,22 @@ function searchInstructions(input) {
   const entity = input.findings.confirmedEntities ? input.findings.confirmedEntities[0].name : null;
   const attributes = input.findings.confirmedEntities ? input.findings.confirmedEntities[0].attributes : null;
   const entitySchemaMessage = entity && attributes ? `The following entity schema should be used to build the UI: ${JSON.stringify({ entity, attributes })}` : null;
-  const doc = getFrameworkSpecificDoc(frameworksForDoc(input.language));
+  const packageManagedInstructions = input.frontendHasPackageJson ? packageSearchInstructions(input) : cdnSearchInstructions(input);
   return [
     "Implement an in-app Algolia search experience.",
     entitySchemaMessage ?? "",
     `Build the search UI for ${input.searchUiTarget}.`,
     "Create search UI only. Do not create or modify ingestion scripts, rake/manage/CLI tasks, migrations, seeders, or other data-loading code, even if the data looks incomplete.",
+    ...packageManagedInstructions,
+    "Meet WCAG AA contrast (4.5:1 body text, 3:1 large text/icons) between the panel's text and its own background, and give the input and the active result a focus indicator visible against whatever sits behind it. Style the panel through the widget's class and CSS-variable overrides (or, when hand-built, the app's existing theme tokens) \u2014 never assume a light surface or reuse the surrounding page's colors unchanged inside the panel.",
+    "The panel takes its width from the input by default, so a small input makes it unreadably narrow: give it a min-width of 320px independent of the input, anchored to the input edge it opens from so widening does not push it off-screen.",
+    "Match the styles of the application as closely as possible.",
+    "The summary should be extremely concise; do not mention manual testing steps."
+  ];
+}
+function packageSearchInstructions(input) {
+  const doc = getFrameworkSpecificDoc(frameworksForDoc(input.language));
+  return [
     ...doc ? [
       "Follow the Algolia SDK reference below for client setup, search UI wiring, and Insights instrumentation \u2014 Insights is required, not optional; prefer the reference over prior knowledge:",
       doc
@@ -5149,16 +5162,22 @@ function searchInstructions(input) {
     `Import and render the new component in ${input.searchLocation ? `"${input.searchLocation}"` : "the best, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working search input and results panel against the target index.`,
     "If a search box already exists, replace its usage with an import and render of your new component; remove the old implementation.",
     "When rendering results with an existing shared component (e.g. a card), import and reuse that component rather than inlining its markup \u2014 inlining silently drops the styles and behavior its own file provides.",
-    "Meet WCAG AA contrast (4.5:1 body text, 3:1 large text/icons) between the panel's text and its own background, and give the input and the active result a focus indicator visible against whatever sits behind it. Style the panel through the widget's class and CSS-variable overrides (or, when hand-built, the app's existing theme tokens) \u2014 never assume a light surface or reuse the surrounding page's colors unchanged inside the panel.",
     "Vendor theme CSS, and any CSS you write against vendor class names, must be global: import the theme from the component's own script module or the app's global stylesheet, and put overrides in a global block (Astro <style is:global>, an unscoped Vue block, a plain global CSS file). Never a framework-scoped style block or a CSS Module \u2014 scoping rewrites the vendor selectors and the widget's runtime DOM carries no scope attribute, so not one rule matches: styling silently does nothing and the build still passes.",
-    "The panel takes its width from the input by default, so a small input makes it unreadably narrow: give it a min-width of 320px independent of the input, anchored to the input edge it opens from so widening does not push it off-screen.",
     `Define ${SEARCH_CONFIG_APP_ID}, ${SEARCH_CONFIG_SEARCH_KEY}, and ${SEARCH_CONFIG_INDEX_NAME} as exported constants in a module that fits this project's existing conventions for shared client-side config \u2014 reuse an existing one if it already holds config like this, or add a small new one otherwise. These are PUBLIC values, safe to commit and expose client-side: never read them from an environment variable or a .env* file, and never hardcode them anywhere except in that one module (import them wherever the search client needs them).`,
     `Set ${SEARCH_CONFIG_APP_ID} to "${input.appId}" and ${SEARCH_CONFIG_INDEX_NAME} to "${input.targetIndex}".`,
     input.searchKey ? `Set ${SEARCH_CONFIG_SEARCH_KEY} to "${input.searchKey}".` : `A real search-only key could not be provisioned${input.searchKeyError ? ` (${input.searchKeyError})` : ""} \u2014 set ${SEARCH_CONFIG_SEARCH_KEY} to the placeholder "${SEARCH_KEY_PLACEHOLDER}" and add a prominent TODO for the developer to fill in a real one.`,
     'Report the repo-relative path of that module as "searchConfigFile" in your final status.',
-    "Install any Algolia packages you import with the project's own package manager via runShell, and declare them in the project's dependency manifest.",
-    "Match the styles of the application as closely as possible.",
-    "The summary should be extremely concise; do not mention manual testing steps."
+    "Install any Algolia packages you import with the project's own package manager via runShell, and declare them in the project's dependency manifest."
+  ];
+}
+function cdnSearchInstructions(input) {
+  return [
+    `The target frontend has no package.json. Add the search container to its existing HTML or template, create separate classic config and search scripts, define window.${SEARCH_CONFIG_APP_ID}, window.${SEARCH_CONFIG_SEARCH_KEY}, and window.${SEARCH_CONFIG_INDEX_NAME} in the config script, and report that script as "searchConfigFile". Never create package.json, create a component, use imports or exports, or run npm, pnpm, yarn, or bun.`,
+    `Set window.${SEARCH_CONFIG_APP_ID} to "${input.appId}" and window.${SEARCH_CONFIG_INDEX_NAME} to "${input.targetIndex}".`,
+    input.searchKey ? `Set window.${SEARCH_CONFIG_SEARCH_KEY} to "${input.searchKey}".` : `A real search-only key could not be provisioned${input.searchKeyError ? ` (${input.searchKeyError})` : ""} \u2014 set window.${SEARCH_CONFIG_SEARCH_KEY} to the placeholder "${SEARCH_KEY_PLACEHOLDER}" and add a prominent TODO for the developer to fill in a real one.`,
+    'Load these exact pinned tags in order before the config and search scripts: <script src="https://cdn.jsdelivr.net/npm/algoliasearch@5.59.0/dist/lite/builds/browser.umd.js" integrity="sha256-pduQHl1jn0IaN/BIpSotQm7Y5THdpKcX3Bw6xdRteRw=" crossorigin="anonymous"></script> then <script src="https://cdn.jsdelivr.net/npm/instantsearch.js@4.117.0/dist/instantsearch.production.min.js" integrity="sha256-5zhKxAGeH7ThWfnmdD4pS1gsmafE2b8aWRsq8set/dc=" crossorigin="anonymous"></script>.',
+    'When using the InstantSearch theme, load this exact tag before the application styles: <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/instantsearch.css@8.22.1/themes/satellite-min.css" integrity="sha256-5/eHPZl63VYJSDVOKrOgGe/5+owUkX3uPAW6+XYeLNc=" crossorigin="anonymous">. Never use an unversioned or differently versioned theme URL, and never omit its integrity attribute.',
+    `In that classic search script, use window['algoliasearch/lite'].liteClient and window.instantsearch. Add window.instantsearch.widgets.autocomplete as the only search widget. Configure it with container '#autocomplete', placeholder 'Search...', and an indices array containing one object whose indexName is window.${SEARCH_CONFIG_INDEX_NAME}; put item and noResults functions in its templates option, implement getURL only for an existing route, and match the item template to the entity schema. Keep insights: true and call search.start(). Do not substitute searchBox or hits, omit indices, use imports or exports, or use type="module".`
   ];
 }
 function validationInstructions(input) {
@@ -5170,6 +5189,9 @@ function validationInstructions(input) {
     "Do not run the test suite or any test command.",
     "Do not modify files. Report each implementation issue as a concrete instruction for the next implementation pass.",
     `Available type-check and lint tools: ${JSON.stringify(input.findings.verification ?? [])}.`,
+    ...!input.frontendHasPackageJson ? [
+      "The frontend has no package.json: never create one or run npm, pnpm, yarn, or bun. Validate the CDN implementation by inspecting its HTML or template and classic scripts for the search container, Algolia \u2192 InstantSearch \u2192 config \u2192 search load order, browser globals, autocomplete widget configuration, search.start(), and exact pinned CDN URLs and integrity attributes for every Algolia script or stylesheet. Source inspection is required even when the project has no automated checks. window.instantsearch.widgets.autocomplete is a real widget in the pinned InstantSearch build; do not report its use as an error, and do not fetch a remote bundle or URL to verify it."
+    ] : [],
     "Always call reportStatus with status=success after validation, even when sufficient=false.",
     "Set sufficient=true only when the search bar is unique, correctly placed, and structurally complete.",
     "Set sufficient=false for an implementation issue. Include concrete additionalInstructions for the next pass.",
@@ -5325,11 +5347,25 @@ async function pathExists(path) {
     return false;
   }
 }
+async function frontendHasPackageJson(repoRoot, searchLocation) {
+  let directory = repoRoot;
+  if (searchLocation) {
+    const candidate = dirname5(resolve4(repoRoot, searchLocation));
+    const candidateRelative = relative6(repoRoot, candidate);
+    const outsideRoot = candidateRelative === ".." || candidateRelative.startsWith(`..${sep2}`) || isAbsolute3(candidateRelative);
+    if (!outsideRoot) directory = candidate;
+  }
+  for (; ; ) {
+    if (await pathExists(join10(directory, "package.json"))) return true;
+    if (directory === repoRoot) return false;
+    directory = dirname5(directory);
+  }
+}
 async function resolveBuildCheckPlan(ctx, repoRoot, input) {
   if (!input.findings.verification?.length) {
     return { run: false, installDependencies: false };
   }
-  const installDependencies = isJsProject(input.language) && !await pathExists(join10(repoRoot, "node_modules"));
+  const installDependencies = input.frontendHasPackageJson && isJsProject(input.language) && !await pathExists(join10(repoRoot, "node_modules"));
   const accepted = Boolean(
     await ctx.requestUserInput({
       prompt: installDependencies ? MISSING_DEPENDENCIES_PROMPT : BUILD_CHECK_PROMPT,
@@ -5507,7 +5543,11 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES) {
     ingestDir: INGEST_DIR,
     ingestionSource,
     uploadFilePath,
-    searchUiTarget: searchUiTarget(language)
+    searchUiTarget: searchUiTarget(language),
+    frontendHasPackageJson: await frontendHasPackageJson(
+      repoRoot,
+      searchLocation
+    )
   };
   let agentRuns = 0;
   let ingestCommand;
@@ -6092,7 +6132,7 @@ function getWorkflow(id) {
 }
 
 // src/ui/Welcome.tsx
-import { dirname as dirname5, join as join11 } from "node:path";
+import { dirname as dirname6, join as join11 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { useState as useState10 } from "react";
 import { Box as Box11, Spacer, Text as Text12, useInput as useInput6, useWindowSize as useWindowSize5 } from "ink";
@@ -6124,7 +6164,7 @@ var sidebarItems = [
 // src/ui/Welcome.tsx
 import Image, { TerminalInfoContext, defaultTerminalInfo } from "ink-picture";
 import { jsx as jsx10, jsxs as jsxs11 } from "react/jsx-runtime";
-var IMAGE_PATH = join11(dirname5(fileURLToPath2(import.meta.url)), "algolia.png");
+var IMAGE_PATH = join11(dirname6(fileURLToPath2(import.meta.url)), "algolia.png");
 var TERMINAL_INFO = {
   ...defaultTerminalInfo,
   supportsUnicode: true,
@@ -7442,11 +7482,11 @@ async function requestTerminalSize(stdout = process.stdout, {
   stdout.write("\x1B[2J\x1B[H");
 }
 function waitForResize(stdout, timeoutMs) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     const finish = (didResize) => () => {
       clearTimeout(timer);
       stdout.off("resize", onResize);
-      resolve4(didResize);
+      resolve5(didResize);
     };
     const onResize = finish(true);
     const timer = setTimeout(finish(false), timeoutMs);
@@ -7454,15 +7494,15 @@ function waitForResize(stdout, timeoutMs) {
   });
 }
 function delay(ms) {
-  return new Promise((resolve4) => {
-    setTimeout(resolve4, ms);
+  return new Promise((resolve5) => {
+    setTimeout(resolve5, ms);
   });
 }
 
 // package.json with { type: 'json' }
 var package_default2 = {
   name: "@algolia/wizard",
-  version: "0.67.0",
+  version: "0.69.0",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@algolia/wizard",
-  "version": "0.67.0",
+  "version": "0.69.0",
   "description": "Magically implement Algolia functionality in your codebase",
   "type": "module",
   "engines": {