@algolia/wizard 0.9.0-rc.88.85 → 0.9.0-rc.93.108

package/dist/main.js

@@ -4,7 +4,7 @@
 import { render } from "ink";
 
 // src/ui/App.tsx
-import { Box as Box15, Text as Text15, useApp, useInput as useInput6, useWindowSize as useWindowSize8 } from "ink";
+import { Box as Box16, Text as Text16, useApp, useInput as useInput7, useWindowSize as useWindowSize8 } from "ink";
 
 // src/core/store.ts
 import { create } from "zustand";
@@ -17,10 +17,8 @@ function npxArgs(args) {
   return ["--yes", "@algolia/cli@latest", ...args];
 }
 var shell = process.platform === "win32";
-function childEnv(withoutAdminKey) {
-  if (!withoutAdminKey) return void 0;
-  const { ALGOLIA_API_KEY: _adminKey, ...rest } = process.env;
-  return rest;
+function mask(text, secret) {
+  return secret ? text.replaceAll(secret, "***") : text;
 }
 function lineSplitter(emit) {
   let buffer = "";
@@ -45,14 +43,12 @@ var stderrSink = (stream, line) => {
   if (stream === "stdout") return;
   wizardSink(stream, line);
 };
-function runAlgoliaCli(args, { onOutput, withoutAdminKey } = {}) {
+function runAlgoliaCli(args, { onOutput, redact } = {}) {
   const store = useWizard.getState();
-  const logId = store.logStart("tool", `algolia ${args.join(" ")}`);
+  const command = mask(args.join(" "), redact);
+  const logId = store.logStart("tool", `algolia ${command}`);
   return new Promise((resolve4, reject) => {
-    const child = spawn("npx", npxArgs(args), {
-      shell,
-      env: childEnv(withoutAdminKey)
-    });
+    const child = spawn("npx", npxArgs(args), { shell });
     let stdout = "";
     let stderr = "";
     const splitters = {
@@ -79,13 +75,13 @@ function runAlgoliaCli(args, { onOutput, withoutAdminKey } = {}) {
         const failed = stderr.trim();
         let detail = "";
         if (failed) {
-          detail = `: ${failed}`;
+          detail = `: ${mask(failed, redact)}`;
         } else if (stdout.trim()) {
           detail = " (no stderr; stdout withheld \u2014 it may contain credentials)";
         }
         reject(
           new Error(
-            `Algolia CLI \`${args.join(" ")}\` failed (exit ${code})${detail}`
+            `Algolia CLI \`${command}\` failed (exit ${code})${detail}`
           )
         );
       }
@@ -626,10 +622,13 @@ function Notices() {
 }
 
 // src/ui/PromptInput.tsx
-import { Box as Box7, Text as Text7, useInput as useInput2 } from "ink";
+import { Box as Box8, Text as Text8, useInput as useInput3 } from "ink";
 import TextInput from "ink-text-input";
 import { useState as useState5 } from "react";
 
+// src/ui/CommandApproval.tsx
+import { Box as Box5, Text as Text5, useInput } from "ink";
+
 // src/ui/NextAction.tsx
 import { Box as Box4, Text as Text4 } from "ink";
 import { Fragment, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
@@ -653,14 +652,60 @@ function NextAction({
   ] });
 }
 
+// src/ui/CommandApproval.tsx
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+function CommandApproval({
+  command,
+  onDecide
+}) {
+  useInput((_input, key) => {
+    if (key.return) onDecide("approve");
+    else if (key.escape) onDecide("reject");
+  });
+  return /* @__PURE__ */ jsxs4(Box5, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx4(Text5, { color: COLORS.primary, bold: true, children: "Run this command?" }),
+    /* @__PURE__ */ jsxs4(
+      Box5,
+      {
+        flexDirection: "column",
+        paddingLeft: 2,
+        borderStyle: "single",
+        borderColor: COLORS.success,
+        borderTop: false,
+        borderBottom: false,
+        borderRight: false,
+        gap: 1,
+        children: [
+          /* @__PURE__ */ jsxs4(Box5, { children: [
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, children: "$ " }),
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.strong, wrap: "wrap", children: command.command })
+          ] }),
+          /* @__PURE__ */ jsxs4(Box5, { gap: 1, children: [
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, children: "in:" }),
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, wrap: "wrap", children: command.cwd })
+          ] }),
+          command.explanation && /* @__PURE__ */ jsxs4(Box5, { gap: 1, children: [
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, children: "why:" }),
+            /* @__PURE__ */ jsx4(Text5, { color: COLORS.accent, wrap: "wrap", children: command.explanation })
+          ] })
+        ]
+      }
+    ),
+    /* @__PURE__ */ jsxs4(Box5, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(NextAction, { action: "approve", keyHint: "enter" }),
+      /* @__PURE__ */ jsx4(NextAction, { action: "reject", keyHint: "esc", hierarchy: "secondary" })
+    ] })
+  ] });
+}
+
 // src/ui/SelectPrompt.tsx
-import { Box as Box6, Text as Text6, useInput, useWindowSize as useWindowSize5 } from "ink";
+import { Box as Box7, Text as Text7, useInput as useInput2, useWindowSize as useWindowSize5 } from "ink";
 import { useLayoutEffect as useLayoutEffect2, useRef as useRef3, useState as useState4 } from "react";
 
 // src/ui/ScrollView.tsx
-import { Box as Box5, Text as Text5, measureElement as measureElement2, useWindowSize as useWindowSize4 } from "ink";
+import { Box as Box6, Text as Text6, measureElement as measureElement2, useWindowSize as useWindowSize4 } from "ink";
 import { useCallback, useLayoutEffect, useRef as useRef2, useState as useState3 } from "react";
-import { jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsxs as jsxs5 } from "react/jsx-runtime";
 var INDICATOR_ROWS = 2;
 function fittedWidth(node, columns) {
   let left = 0;
@@ -730,14 +775,14 @@ function useScrollWindow({
   };
 }
 function ScrollView({ scroll, children }) {
-  return /* @__PURE__ */ jsxs4(Box5, { ref: scroll.viewportRef, flexDirection: "column", flexGrow: 1, children: [
-    scroll.hiddenAbove > 0 && /* @__PURE__ */ jsxs4(Text5, { color: COLORS.dim, children: [
+  return /* @__PURE__ */ jsxs5(Box6, { ref: scroll.viewportRef, flexDirection: "column", flexGrow: 1, children: [
+    scroll.hiddenAbove > 0 && /* @__PURE__ */ jsxs5(Text6, { color: COLORS.dim, children: [
       "\u2191 ",
       scroll.hiddenAbove,
       " more"
     ] }),
     children,
-    scroll.hiddenBelow > 0 && /* @__PURE__ */ jsxs4(Text5, { color: COLORS.dim, children: [
+    scroll.hiddenBelow > 0 && /* @__PURE__ */ jsxs5(Text6, { color: COLORS.dim, children: [
       "\u2193 ",
       scroll.hiddenBelow,
       " more"
@@ -746,7 +791,7 @@ function ScrollView({ scroll, children }) {
 }
 
 // src/ui/SelectPrompt.tsx
-import { jsx as jsx4, jsxs as jsxs5 } from "react/jsx-runtime";
+import { jsx as jsx5, jsxs as jsxs6 } from "react/jsx-runtime";
 var CANCEL = "cancel";
 var ARROW_WIDTH = 4;
 var COLUMN_GAP = 2;
@@ -808,7 +853,7 @@ function SelectPrompt({
     revealIndex(index);
   }, [index, revealIndex]);
   const visible = rows.slice(scroll.offset, scroll.offset + scroll.capacity);
-  useInput((input, key) => {
+  useInput2((input, key) => {
     if (rows.length === 0) return;
     if (key.upArrow || input === "k") {
       setIndex((i) => (i - 1 + rows.length) % rows.length);
@@ -831,56 +876,56 @@ function SelectPrompt({
       }
     }
   });
-  return /* @__PURE__ */ jsx4(Box6, { ref: containerRef, flexGrow: 1, children: /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", gap: 1, width, children: [
-    /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", gap: 1, flexShrink: 0, children: [
-      error && /* @__PURE__ */ jsx4(Text6, { color: COLORS.danger, children: error }),
-      messages?.map((m, i) => /* @__PURE__ */ jsx4(Text6, { color: COLORS.muted, children: m }, `msg-${i}`)),
-      table && /* @__PURE__ */ jsx4(Table, { columns: table.columns, rows: table.rows }),
-      /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", children: [
-        question && /* @__PURE__ */ jsx4(Text6, { color: COLORS.muted, children: question }),
-        helpText && /* @__PURE__ */ jsx4(Text6, { color: COLORS.dim, children: helpText })
+  return /* @__PURE__ */ jsx5(Box7, { ref: containerRef, flexGrow: 1, children: /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", gap: 1, width, children: [
+    /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", gap: 1, flexShrink: 0, children: [
+      error && /* @__PURE__ */ jsx5(Text7, { color: COLORS.danger, children: error }),
+      messages?.map((m, i) => /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: m }, `msg-${i}`)),
+      table && /* @__PURE__ */ jsx5(Table, { columns: table.columns, rows: table.rows }),
+      /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", children: [
+        question && /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: question }),
+        helpText && /* @__PURE__ */ jsx5(Text7, { color: COLORS.dim, children: helpText })
       ] })
     ] }),
-    /* @__PURE__ */ jsx4(ScrollView, { scroll, children: visible.map((option, visibleIndex) => {
+    /* @__PURE__ */ jsx5(ScrollView, { scroll, children: visible.map((option, visibleIndex) => {
       const i = scroll.offset + visibleIndex;
       const highlighted = i === index;
       const isCancel = i === cancelIndex;
       const bullet = multi && !isCancel ? checked.has(i) ? "\u25CF " : "\u25CB " : "";
       const sec = isCancel ? void 0 : secondary?.[i];
       const labelColor = highlighted ? COLORS.highlight.fg : void 0;
-      const label = /* @__PURE__ */ jsxs5(Text6, { color: labelColor, wrap: "truncate", children: [
+      const label = /* @__PURE__ */ jsxs6(Text7, { color: labelColor, wrap: "truncate", children: [
         highlighted ? "\u276F   " : "    ",
         bullet,
         option
       ] });
       const isText = sec?.kind === "text";
-      return /* @__PURE__ */ jsxs5(
-        Box6,
+      return /* @__PURE__ */ jsxs6(
+        Box7,
         {
           width: isText ? "100%" : barWidth,
           paddingX: 1,
           paddingY: 1,
           backgroundColor: highlighted ? COLORS.highlight.bg : void 0,
           children: [
-            /* @__PURE__ */ jsx4(Box6, { width: isText ? labelWidth : barLabelWidth, children: label }),
-            isText && textWidth > 0 && /* @__PURE__ */ jsx4(Box6, { width: textWidth, children: /* @__PURE__ */ jsx4(
-              Text6,
+            /* @__PURE__ */ jsx5(Box7, { width: isText ? labelWidth : barLabelWidth, children: label }),
+            isText && textWidth > 0 && /* @__PURE__ */ jsx5(Box7, { width: textWidth, children: /* @__PURE__ */ jsx5(
+              Text7,
               {
                 wrap: "truncate",
                 color: highlighted ? COLORS.primary : COLORS.muted,
                 children: sec.value
               }
             ) }),
-            sec?.kind === "badge" && /* @__PURE__ */ jsx4(Box6, { width: badgeWidth, justifyContent: "flex-end", children: /* @__PURE__ */ jsx4(Text6, { color: COLORS.badge, wrap: "truncate", children: sec.value }) })
+            sec?.kind === "badge" && /* @__PURE__ */ jsx5(Box7, { width: badgeWidth, justifyContent: "flex-end", children: /* @__PURE__ */ jsx5(Text7, { color: COLORS.badge, wrap: "truncate", children: sec.value }) })
           ]
         },
         `row-${i}`
       );
     }) }),
-    /* @__PURE__ */ jsx4(Box6, { flexShrink: 0, children: /* @__PURE__ */ jsx4(Text6, { children: hints.map(({ key, label }, i) => /* @__PURE__ */ jsxs5(Text6, { children: [
+    /* @__PURE__ */ jsx5(Box7, { flexShrink: 0, children: /* @__PURE__ */ jsx5(Text7, { children: hints.map(({ key, label }, i) => /* @__PURE__ */ jsxs6(Text7, { children: [
       i > 0 ? "   " : "",
-      /* @__PURE__ */ jsx4(Text6, { color: COLORS.primary, children: key }),
-      /* @__PURE__ */ jsxs5(Text6, { color: COLORS.dim, children: [
+      /* @__PURE__ */ jsx5(Text7, { color: COLORS.primary, children: key }),
+      /* @__PURE__ */ jsxs6(Text7, { color: COLORS.dim, children: [
         " ",
         label
       ] })
@@ -889,23 +934,23 @@ function SelectPrompt({
 }
 
 // src/ui/PromptInput.tsx
-import { jsx as jsx5, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs7 } from "react/jsx-runtime";
 var ACCEPT_REJECT_OPTIONS = ["Accept", "Reject"];
 function EnterToContinuePrompt({
   question,
   messages,
   onDecide
 }) {
-  useInput2((_input, key) => {
+  useInput3((_input, key) => {
     if (key.return) onDecide(true);
     else if (key.escape) onDecide(false);
   });
-  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", gap: 1, children: [
-    messages?.map((m, i) => /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: m }, `msg-${i}`)),
-    question && /* @__PURE__ */ jsx5(Text7, { color: COLORS.primary, children: question }),
-    /* @__PURE__ */ jsxs6(Box7, { gap: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx5(NextAction, { action: "continue", keyHint: "enter" }),
-      /* @__PURE__ */ jsx5(NextAction, { action: "decline", keyHint: "esc", hierarchy: "secondary" })
+  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", gap: 1, children: [
+    messages?.map((m, i) => /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: m }, `msg-${i}`)),
+    question && /* @__PURE__ */ jsx6(Text8, { color: COLORS.primary, children: question }),
+    /* @__PURE__ */ jsxs7(Box8, { gap: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx6(NextAction, { action: "continue", keyHint: "enter" }),
+      /* @__PURE__ */ jsx6(NextAction, { action: "decline", keyHint: "esc", hierarchy: "secondary" })
     ] })
   ] });
 }
@@ -913,11 +958,11 @@ function PromptInput() {
   const { phase, inputReq, submitInput } = useWizard();
   const [draft, setDraft] = useState5("");
   if (phase === "done" || phase === "error") {
-    return /* @__PURE__ */ jsx5(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text7, { color: "gray", dimColor: true, children: "Press Enter or Esc to exit" }) });
+    return /* @__PURE__ */ jsx6(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx6(Text8, { color: "gray", dimColor: true, children: "Press Enter or Esc to exit" }) });
   }
   if (phase !== "awaitingInput" || !inputReq) return null;
   if (inputReq.promptType === "multipleChoice") {
-    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx6(Box8, { flexGrow: 1, children: /* @__PURE__ */ jsx6(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -934,7 +979,7 @@ function PromptInput() {
     ) });
   }
   if (inputReq.promptType === "multiSelect") {
-    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx6(Box8, { flexGrow: 1, children: /* @__PURE__ */ jsx6(
       SelectPrompt,
       {
         multi: true,
@@ -949,7 +994,7 @@ function PromptInput() {
     ) });
   }
   if (inputReq.promptType === "notice") {
-    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx6(Box8, { flexGrow: 1, children: /* @__PURE__ */ jsx6(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -960,7 +1005,7 @@ function PromptInput() {
     ) });
   }
   if (inputReq.promptType === "enterToContinue") {
-    return /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx6(
       EnterToContinuePrompt,
       {
         question: inputReq.prompt,
@@ -969,9 +1014,12 @@ function PromptInput() {
       }
     );
   }
+  if (inputReq.promptType === "commandApproval" && inputReq.command) {
+    return /* @__PURE__ */ jsx6(CommandApproval, { command: inputReq.command, onDecide: submitInput });
+  }
   if (inputReq.promptType === "acceptReject") {
     const labels = inputReq.options?.length ? inputReq.options : ACCEPT_REJECT_OPTIONS;
-    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx6(Box8, { flexGrow: 1, children: /* @__PURE__ */ jsx6(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -982,15 +1030,15 @@ function PromptInput() {
       }
     ) });
   }
-  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", children: [
-    inputReq.error && /* @__PURE__ */ jsx5(Text7, { color: COLORS.danger, children: inputReq.error }),
-    inputReq.messages?.map((m, i) => /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: m }, `msg-${i}`)),
-    /* @__PURE__ */ jsxs6(Box7, { children: [
-      /* @__PURE__ */ jsxs6(Text7, { color: COLORS.primary, children: [
+  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", children: [
+    inputReq.error && /* @__PURE__ */ jsx6(Text8, { color: COLORS.danger, children: inputReq.error }),
+    inputReq.messages?.map((m, i) => /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: m }, `msg-${i}`)),
+    /* @__PURE__ */ jsxs7(Box8, { children: [
+      /* @__PURE__ */ jsxs7(Text8, { color: COLORS.primary, children: [
         inputReq.prompt,
         " "
       ] }),
-      /* @__PURE__ */ jsx5(
+      /* @__PURE__ */ jsx6(
         TextInput,
         {
           value: draft,
@@ -1008,7 +1056,7 @@ function PromptInput() {
 // src/ui/Welcome.tsx
 import { dirname as dirname2, join as join3 } from "node:path";
 import { fileURLToPath } from "node:url";
-import { Box as Box8, Spacer, Text as Text8, useInput as useInput3, useWindowSize as useWindowSize6 } from "ink";
+import { Box as Box9, Spacer, Text as Text9, useInput as useInput4, useWindowSize as useWindowSize6 } from "ink";
 
 // src/ui/copy/welcome.ts
 var sidebarItems = [
@@ -1021,12 +1069,12 @@ var sidebarItems = [
     description: "push 100 records to Algolia in seconds"
   },
   {
-    title: "detect your framework",
-    description: "React, Vue, Angular, Vanilla JS"
+    title: "detect your stack",
+    description: "whatever language and framework you already use"
   },
   {
     title: "scaffold a search UI",
-    description: "a styled InstantSearch component, wired into your app"
+    description: "a search box and results, wired into your app"
   },
   {
     title: "ship it",
@@ -1036,20 +1084,20 @@ var sidebarItems = [
 
 // src/ui/Welcome.tsx
 import Image, { InkPictureProvider } from "ink-picture";
-import { jsx as jsx6, jsxs as jsxs7 } from "react/jsx-runtime";
+import { jsx as jsx7, jsxs as jsxs8 } from "react/jsx-runtime";
 var IMAGE_PATH = join3(dirname2(fileURLToPath(import.meta.url)), "algolia.png");
 function SidebarItem({
   title,
   description
 }) {
-  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs7(Box8, { gap: 1, children: [
-      /* @__PURE__ */ jsx6(Text8, { color: COLORS.success, children: "\u2192" }),
-      /* @__PURE__ */ jsx6(Text8, { color: COLORS.strong, bold: true, children: title })
+  return /* @__PURE__ */ jsxs8(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs8(Box9, { gap: 1, children: [
+      /* @__PURE__ */ jsx7(Text9, { color: COLORS.success, children: "\u2192" }),
+      /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: title })
     ] }),
-    /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 2, children: [
-      /* @__PURE__ */ jsx6(Spacer, {}),
-      /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: description })
+    /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 2, children: [
+      /* @__PURE__ */ jsx7(Spacer, {}),
+      /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: description })
     ] })
   ] });
 }
@@ -1057,7 +1105,7 @@ function Welcome() {
   const confirmStart = useWizard((s) => s.confirmStart);
   const openLearnMore = useWizard((s) => s.openLearnMore);
   const { rows } = useWindowSize6();
-  useInput3((input, key) => {
+  useInput4((input, key) => {
     if (key.return) confirmStart();
     else if (input === "i") openLearnMore();
   });
@@ -1075,16 +1123,16 @@ function Welcome() {
   if (rows < 30) {
     layout = scales["small"];
   }
-  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", justifyContent: "space-between", width: "100%", children: [
-    /* @__PURE__ */ jsx6(
-      Box8,
+  return /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", justifyContent: "space-between", width: "100%", children: [
+    /* @__PURE__ */ jsx7(
+      Box9,
       {
         paddingY: layout.main.padding.y,
         paddingX: layout.main.padding.x,
         flexDirection: "column",
         justifyContent: "center",
-        children: /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", gap: 2, children: [
-          /* @__PURE__ */ jsx6(InkPictureProvider, { children: /* @__PURE__ */ jsx6(
+        children: /* @__PURE__ */ jsxs8(Box9, { flexDirection: "column", gap: 2, children: [
+          /* @__PURE__ */ jsx7(InkPictureProvider, { children: /* @__PURE__ */ jsx7(
             Image,
             {
               src: IMAGE_PATH,
@@ -1095,16 +1143,16 @@ function Welcome() {
               protocol: "halfBlock"
             }
           ) }),
-          /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: "\u2726 From zero \u2192 working search in ~10 minutes" }),
-          /* @__PURE__ */ jsxs7(Box8, { gap: 1, flexDirection: "column", children: [
-            /* @__PURE__ */ jsx6(NextAction, { action: "start wizard", keyHint: "enter" }),
-            /* @__PURE__ */ jsx6(NextAction, { action: "learn more", keyHint: "i", hierarchy: "secondary" })
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "\u2726 From zero \u2192 working search in ~10 minutes" }),
+          /* @__PURE__ */ jsxs8(Box9, { gap: 1, flexDirection: "column", children: [
+            /* @__PURE__ */ jsx7(NextAction, { action: "start wizard", keyHint: "enter" }),
+            /* @__PURE__ */ jsx7(NextAction, { action: "learn more", keyHint: "i", hierarchy: "secondary" })
           ] })
         ] })
       }
     ),
-    /* @__PURE__ */ jsxs7(
-      Box8,
+    /* @__PURE__ */ jsxs8(
+      Box9,
       {
         backgroundColor: COLORS.bg.sidebar,
         width: 40,
@@ -1114,8 +1162,8 @@ function Welcome() {
         flexDirection: "column",
         justifyContent: "center",
         children: [
-          /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: "WHAT THIS WIZARD WILL DO" }),
-          sidebarItems.map((i, idx) => /* @__PURE__ */ jsx6(SidebarItem, { title: i.title, description: i.description }, idx))
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "WHAT THIS WIZARD WILL DO" }),
+          sidebarItems.map((i, idx) => /* @__PURE__ */ jsx7(SidebarItem, { title: i.title, description: i.description }, idx))
         ]
       }
     )
@@ -1124,7 +1172,7 @@ function Welcome() {
 
 // src/ui/LearnMore.tsx
 import { Fragment as Fragment2 } from "react";
-import { Box as Box9, Text as Text9, useInput as useInput4, useWindowSize as useWindowSize7 } from "ink";
+import { Box as Box10, Text as Text10, useInput as useInput5, useWindowSize as useWindowSize7 } from "ink";
 
 // src/ui/copy/learn-more.ts
 var accessIntro = "Everything runs locally on your machine. Nothing is written or sent without an explicit yes from you.";
@@ -1132,12 +1180,17 @@ var accessItems = [
   {
     tag: "READ",
     title: "Project files",
-    description: "reads package.json, configs & source to detect your stack. Read-only; nothing is uploaded."
+    description: "reads manifests, configs & source to detect your stack. Read-only; nothing is uploaded."
   },
   {
     tag: "WRITE",
     title: "Code changes",
-    description: "creates & edits files (search UI, config). Shown as a diff first \u2014 nothing lands without your approval."
+    description: "creates & edits files (search UI, config) in a throwaway git worktree \u2014 your checkout is never touched."
+  },
+  {
+    tag: "EXEC",
+    title: "Setup commands",
+    description: "runs dependency installs, the ingestion script & your own checks. Every command is shown in full and needs your OK; its output is shown as-is, so a command that prints a secret will display it."
   },
   {
     tag: "NET",
@@ -1147,13 +1200,13 @@ var accessItems = [
   {
     tag: "KEY",
     title: "Credentials",
-    description: "saves your Admin API key to .env and adds it to .gitignore."
+    description: "writes your Algolia app id and a search-only key (safe to expose) to .env in the worktree."
   }
 ];
 var neverItems = [
   "Send your source code to a model or third party",
   "Commit or push to git",
-  "Touch files outside your project directory"
+  "Run a command you haven't approved"
 ];
 var policyLinks = [
   { label: "Terms", url: "https://www.algolia.com/policies/terms" },
@@ -1161,10 +1214,11 @@ var policyLinks = [
 ];
 
 // src/ui/LearnMore.tsx
-import { jsx as jsx7, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs9 } from "react/jsx-runtime";
 var TAG_COLORS = {
   READ: COLORS.success,
   WRITE: COLORS.badge,
+  EXEC: COLORS.danger,
   NET: COLORS.accent,
   KEY: COLORS.muted
 };
@@ -1177,12 +1231,12 @@ function NeverLine({
 }) {
   const used = segments.reduce((n, s) => n + s.text.length, 0);
   const rightPad = Math.max(0, width - 2 - NEVER_BOX_PAD_X - used);
-  return /* @__PURE__ */ jsxs8(Text9, { children: [
-    /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: "\u2502" }),
+  return /* @__PURE__ */ jsxs9(Text10, { children: [
+    /* @__PURE__ */ jsx8(Text10, { color: COLORS.danger, children: "\u2502" }),
     " ".repeat(NEVER_BOX_PAD_X),
-    segments.map((s, i) => /* @__PURE__ */ jsx7(Text9, { color: s.color, bold: s.bold, children: s.text }, i)),
+    segments.map((s, i) => /* @__PURE__ */ jsx8(Text10, { color: s.color, bold: s.bold, children: s.text }, i)),
     " ".repeat(rightPad),
-    /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: "\u2502" })
+    /* @__PURE__ */ jsx8(Text10, { color: COLORS.danger, children: "\u2502" })
   ] });
 }
 function LearnMore() {
@@ -1190,12 +1244,12 @@ function LearnMore() {
   const backToHome = useWizard((s) => s.backToHome);
   const { columns } = useWindowSize7();
   const dividerWidth = Math.max(0, columns - PADDING_X * 2);
-  useInput4((_input, key) => {
+  useInput5((_input, key) => {
     if (key.escape) backToHome();
     else if (key.return) confirmStart();
   });
-  return /* @__PURE__ */ jsxs8(
-    Box9,
+  return /* @__PURE__ */ jsxs9(
+    Box10,
     {
       flexDirection: "column",
       paddingX: PADDING_X,
@@ -1203,31 +1257,31 @@ function LearnMore() {
       width: "100%",
       gap: 1,
       children: [
-        /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: "What algolia wizard accesses" }),
-        /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: accessIntro }),
-        /* @__PURE__ */ jsx7(Box9, { flexDirection: "column", children: accessItems.map((item) => /* @__PURE__ */ jsxs8(Box9, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx7(Text9, { color: COLORS.border, children: "\u2500".repeat(dividerWidth) }),
-          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, marginTop: 1, children: [
-            /* @__PURE__ */ jsx7(Box9, { width: TAG_COLUMN_WIDTH, flexShrink: 0, children: /* @__PURE__ */ jsx7(Text9, { color: TAG_COLORS[item.tag], bold: true, children: `[${item.tag}]` }) }),
-            /* @__PURE__ */ jsx7(Box9, { flexDirection: "column", children: /* @__PURE__ */ jsxs8(Text9, { children: [
-              /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: item.title }),
-              /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: ` \u2014 ${item.description}` })
+        /* @__PURE__ */ jsx8(Text10, { color: COLORS.strong, bold: true, children: "What algolia wizard accesses" }),
+        /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: accessIntro }),
+        /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", children: accessItems.map((item) => /* @__PURE__ */ jsxs9(Box10, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx8(Text10, { color: COLORS.border, children: "\u2500".repeat(dividerWidth) }),
+          /* @__PURE__ */ jsxs9(Box10, { flexDirection: "row", gap: 1, marginTop: 1, children: [
+            /* @__PURE__ */ jsx8(Box10, { width: TAG_COLUMN_WIDTH, flexShrink: 0, children: /* @__PURE__ */ jsx8(Text10, { color: TAG_COLORS[item.tag], bold: true, children: `[${item.tag}]` }) }),
+            /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", children: /* @__PURE__ */ jsxs9(Text10, { children: [
+              /* @__PURE__ */ jsx8(Text10, { color: COLORS.strong, bold: true, children: item.title }),
+              /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: ` \u2014 ${item.description}` })
             ] }) })
           ] })
         ] }, item.tag)) }),
-        /* @__PURE__ */ jsxs8(Box9, { marginTop: 1, flexDirection: "column", children: [
-          /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: `\u256D${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256E` }),
-          /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
-          /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsxs9(Box10, { marginTop: 1, flexDirection: "column", children: [
+          /* @__PURE__ */ jsx8(Text10, { color: COLORS.danger, children: `\u256D${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256E` }),
+          /* @__PURE__ */ jsx8(NeverLine, { width: dividerWidth }),
+          /* @__PURE__ */ jsx8(
             NeverLine,
             {
               width: dividerWidth,
               segments: [{ text: "I NEVER", color: COLORS.danger, bold: true }]
             }
           ),
-          neverItems.map((item) => /* @__PURE__ */ jsxs8(Fragment2, { children: [
-            /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
-            /* @__PURE__ */ jsx7(
+          neverItems.map((item) => /* @__PURE__ */ jsxs9(Fragment2, { children: [
+            /* @__PURE__ */ jsx8(NeverLine, { width: dividerWidth }),
+            /* @__PURE__ */ jsx8(
               NeverLine,
               {
                 width: dividerWidth,
@@ -1239,24 +1293,24 @@ function LearnMore() {
               }
             )
           ] }, item)),
-          /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
-          /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: `\u2570${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256F` })
+          /* @__PURE__ */ jsx8(NeverLine, { width: dividerWidth }),
+          /* @__PURE__ */ jsx8(Text10, { color: COLORS.danger, children: `\u2570${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256F` })
         ] }),
-        /* @__PURE__ */ jsx7(Box9, { marginTop: 1, flexDirection: "column", children: policyLinks.map((link) => /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
-          /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: `${link.label}:` }),
-          /* @__PURE__ */ jsx7(Text9, { color: COLORS.accent, children: link.url })
+        /* @__PURE__ */ jsx8(Box10, { marginTop: 1, flexDirection: "column", children: policyLinks.map((link) => /* @__PURE__ */ jsxs9(Box10, { flexDirection: "row", gap: 1, children: [
+          /* @__PURE__ */ jsx8(Text10, { color: COLORS.strong, bold: true, children: `${link.label}:` }),
+          /* @__PURE__ */ jsx8(Text10, { color: COLORS.accent, children: link.url })
         ] }, link.label)) }),
-        /* @__PURE__ */ jsxs8(Box9, { marginTop: 1, flexDirection: "row", gap: 3, children: [
-          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "[" }),
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.primary, children: "esc" }),
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "] back" })
+        /* @__PURE__ */ jsxs9(Box10, { marginTop: 1, flexDirection: "row", gap: 3, children: [
+          /* @__PURE__ */ jsxs9(Box10, { flexDirection: "row", gap: 1, children: [
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: "[" }),
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.primary, children: "esc" }),
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: "] back" })
           ] }),
-          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "[" }),
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.primary, children: "enter" }),
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "]" }),
-            /* @__PURE__ */ jsx7(Text9, { color: COLORS.success, bold: true, children: "start wizard" })
+          /* @__PURE__ */ jsxs9(Box10, { flexDirection: "row", gap: 1, children: [
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: "[" }),
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.primary, children: "enter" }),
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.muted, children: "]" }),
+            /* @__PURE__ */ jsx8(Text10, { color: COLORS.success, bold: true, children: "start wizard" })
           ] })
         ] })
       ]
@@ -1265,10 +1319,10 @@ function LearnMore() {
 }
 
 // src/ui/Sidebar.tsx
-import { Box as Box12, Text as Text12 } from "ink";
+import { Box as Box13, Text as Text13 } from "ink";
 
 // src/ui/Steps.tsx
-import { Box as Box10, Text as Text10 } from "ink";
+import { Box as Box11, Text as Text11 } from "ink";
 import Spinner from "ink-spinner";
 
 // src/core/persistence.ts
@@ -1297,12 +1351,12 @@ async function clearWorkflowState(workflowId) {
 }
 
 // src/ui/Steps.tsx
-import { jsx as jsx8, jsxs as jsxs9 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs10 } from "react/jsx-runtime";
 function Steps() {
   const { steps } = useWizard();
   const visibleSteps = steps.filter(isStepVisible);
-  return /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", gap: 1, children: visibleSteps.map((s) => /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", children: /* @__PURE__ */ jsxs9(Text10, { color: COLORS.status[s.status], children: [
-    s.status === "running" ? /* @__PURE__ */ jsx8(Spinner, { type: "dots" }) : MARKER[s.status],
+  return /* @__PURE__ */ jsx9(Box11, { flexDirection: "column", gap: 1, children: visibleSteps.map((s) => /* @__PURE__ */ jsx9(Box11, { flexDirection: "column", children: /* @__PURE__ */ jsxs10(Text11, { color: COLORS.status[s.status], children: [
+    s.status === "running" ? /* @__PURE__ */ jsx9(Spinner, { type: "dots" }) : MARKER[s.status],
     " ",
     s.title
   ] }) }, s.id)) });
@@ -1311,27 +1365,27 @@ function CurrentStep() {
   const { steps } = useWizard();
   const currentStep = steps.filter(isStepVisible).find((s) => s.status === "running");
   if (!currentStep) return null;
-  return /* @__PURE__ */ jsxs9(Text10, { color: COLORS.status.running, children: [
-    /* @__PURE__ */ jsx8(Spinner, { type: "dots" }),
+  return /* @__PURE__ */ jsxs10(Text11, { color: COLORS.status.running, children: [
+    /* @__PURE__ */ jsx9(Spinner, { type: "dots" }),
     " ",
     ` ${currentStep.title}`
   ] });
 }
 
 // src/ui/Progress.tsx
-import { Box as Box11, Text as Text11 } from "ink";
-import { jsx as jsx9, jsxs as jsxs10 } from "react/jsx-runtime";
+import { Box as Box12, Text as Text12 } from "ink";
+import { jsx as jsx10, jsxs as jsxs11 } from "react/jsx-runtime";
 function Progress() {
   const { steps, currentStepIndex } = useWizard();
   const visibleSteps = steps.filter(isStepVisible);
   if (visibleSteps.length === 0) return null;
   const visibleCountThroughCurrent = steps.slice(0, currentStepIndex + 1).filter(isStepVisible).length;
   const activeStepNumber = Math.max(1, visibleCountThroughCurrent);
-  return /* @__PURE__ */ jsxs10(Box11, { flexDirection: "row", gap: 1, children: [
-    /* @__PURE__ */ jsx9(Text11, { color: COLORS.muted, children: "STEP" }),
-    /* @__PURE__ */ jsx9(Text11, { bold: true, children: activeStepNumber }),
-    /* @__PURE__ */ jsx9(Text11, { bold: true, children: "/" }),
-    /* @__PURE__ */ jsx9(Text11, { bold: true, children: visibleSteps.length })
+  return /* @__PURE__ */ jsxs11(Box12, { flexDirection: "row", gap: 1, children: [
+    /* @__PURE__ */ jsx10(Text12, { color: COLORS.muted, children: "STEP" }),
+    /* @__PURE__ */ jsx10(Text12, { bold: true, children: activeStepNumber }),
+    /* @__PURE__ */ jsx10(Text12, { bold: true, children: "/" }),
+    /* @__PURE__ */ jsx10(Text12, { bold: true, children: visibleSteps.length })
   ] });
 }
 
@@ -1342,10 +1396,10 @@ var sidebarCommands = [
 ];
 
 // src/ui/Sidebar.tsx
-import { jsx as jsx10, jsxs as jsxs11 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs12 } from "react/jsx-runtime";
 function Sidebar() {
-  return /* @__PURE__ */ jsxs11(
-    Box12,
+  return /* @__PURE__ */ jsxs12(
+    Box13,
     {
       backgroundColor: "#14171E",
       width: 30,
@@ -1354,16 +1408,16 @@ function Sidebar() {
       flexDirection: "column",
       justifyContent: "space-between",
       children: [
-        /* @__PURE__ */ jsxs11(Box12, { flexDirection: "column", gap: 1, children: [
-          /* @__PURE__ */ jsx10(Text12, { color: COLORS.muted, children: "PROGRESS" }),
-          /* @__PURE__ */ jsx10(Steps, {})
+        /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", gap: 1, children: [
+          /* @__PURE__ */ jsx11(Text13, { color: COLORS.muted, children: "PROGRESS" }),
+          /* @__PURE__ */ jsx11(Steps, {})
         ] }),
-        /* @__PURE__ */ jsxs11(Box12, { flexDirection: "column", gap: 1, children: [
-          /* @__PURE__ */ jsx10(Progress, {}),
-          /* @__PURE__ */ jsx10(Box12, { flexDirection: "column", children: sidebarCommands.map((c) => {
-            return /* @__PURE__ */ jsxs11(Box12, { flexDirection: "row", gap: 1, children: [
-              /* @__PURE__ */ jsx10(Text12, { color: COLORS.primary, children: `[${c.keyHint}]` }),
-              /* @__PURE__ */ jsx10(Text12, { color: COLORS.muted, children: c.description })
+        /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", gap: 1, children: [
+          /* @__PURE__ */ jsx11(Progress, {}),
+          /* @__PURE__ */ jsx11(Box13, { flexDirection: "column", children: sidebarCommands.map((c) => {
+            return /* @__PURE__ */ jsxs12(Box13, { flexDirection: "row", gap: 1, children: [
+              /* @__PURE__ */ jsx11(Text13, { color: COLORS.primary, children: `[${c.keyHint}]` }),
+              /* @__PURE__ */ jsx11(Text13, { color: COLORS.muted, children: c.description })
             ] });
           }) })
         ] })
@@ -1373,12 +1427,12 @@ function Sidebar() {
 }
 
 // src/ui/Ribbon.tsx
-import { Box as Box13, Text as Text13 } from "ink";
-import { jsx as jsx11, jsxs as jsxs12 } from "react/jsx-runtime";
+import { Box as Box14, Text as Text14 } from "ink";
+import { jsx as jsx12, jsxs as jsxs13 } from "react/jsx-runtime";
 function Ribbon() {
   const firstCommand = sidebarCommands[0];
-  return /* @__PURE__ */ jsxs12(
-    Box13,
+  return /* @__PURE__ */ jsxs13(
+    Box14,
     {
       backgroundColor: "#14171E",
       flexDirection: "row",
@@ -1386,11 +1440,11 @@ function Ribbon() {
       paddingX: 2,
       paddingY: 1,
       children: [
-        /* @__PURE__ */ jsx11(Progress, {}),
-        /* @__PURE__ */ jsx11(CurrentStep, {}),
-        /* @__PURE__ */ jsxs12(Box13, { flexDirection: "row", gap: 1, children: [
-          /* @__PURE__ */ jsx11(Text13, { color: COLORS.primary, children: `[${firstCommand.keyHint}]` }),
-          /* @__PURE__ */ jsx11(Text13, { color: COLORS.muted, children: firstCommand.description })
+        /* @__PURE__ */ jsx12(Progress, {}),
+        /* @__PURE__ */ jsx12(CurrentStep, {}),
+        /* @__PURE__ */ jsxs13(Box14, { flexDirection: "row", gap: 1, children: [
+          /* @__PURE__ */ jsx12(Text14, { color: COLORS.primary, children: `[${firstCommand.keyHint}]` }),
+          /* @__PURE__ */ jsx12(Text14, { color: COLORS.muted, children: firstCommand.description })
         ] })
       ]
     }
@@ -1401,8 +1455,8 @@ function Ribbon() {
 import { useState as useState6 } from "react";
 
 // src/ui/Logs.tsx
-import { Box as Box14, Text as Text14, useInput as useInput5 } from "ink";
-import { jsx as jsx12, jsxs as jsxs13 } from "react/jsx-runtime";
+import { Box as Box15, Text as Text15, useInput as useInput6 } from "ink";
+import { jsx as jsx13, jsxs as jsxs14 } from "react/jsx-runtime";
 var KIND_COLOR = {
   tool: COLORS.primary,
   prompt: COLORS.badge
@@ -1433,14 +1487,14 @@ function formatTimestamp(ms) {
 function Logs() {
   const logs = useWizard((s) => s.logs);
   const scroll = useScrollWindow({ itemCount: logs.length, followBottom: true });
-  useInput5((_input, key) => {
+  useInput6((_input, key) => {
     if (key.upArrow) scroll.scrollBy(-1);
     else if (key.downArrow) scroll.scrollBy(1);
   });
   const visible = logs.slice(scroll.offset, scroll.offset + scroll.capacity);
-  return /* @__PURE__ */ jsxs13(Box14, { flexDirection: "column", paddingX: 4, paddingY: 2, flexGrow: 1, children: [
-    logs.length === 0 && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: "No logs yet." }),
-    /* @__PURE__ */ jsx12(ScrollView, { scroll, children: visible.map((entry) => {
+  return /* @__PURE__ */ jsxs14(Box15, { flexDirection: "column", paddingX: 4, paddingY: 2, flexGrow: 1, children: [
+    logs.length === 0 && /* @__PURE__ */ jsx13(Text15, { color: COLORS.dim, children: "No logs yet." }),
+    /* @__PURE__ */ jsx13(ScrollView, { scroll, children: visible.map((entry) => {
       const timestamp = `[${formatTimestamp(entry.startedAt)}]`;
       const durationText = entry.kind === "tool" && entry.durationMs !== void 0 ? `${entry.durationMs}ms` : "";
       const rawPreview = rawInputText(entry.input);
@@ -1450,14 +1504,14 @@ function Logs() {
       const name = truncate2(entry.name, budget);
       budget -= name.length;
       const preview = rawPreview ? truncate2(rawPreview, budget) : "";
-      return /* @__PURE__ */ jsxs13(Box14, { flexDirection: "row", gap: ROW_GAP, children: [
-        /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: timestamp }),
-        /* @__PURE__ */ jsx12(Text14, { color: logNameColor(entry), wrap: "truncate", children: name }),
-        preview && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, wrap: "truncate", children: preview }),
-        durationText && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: durationText })
+      return /* @__PURE__ */ jsxs14(Box15, { flexDirection: "row", gap: ROW_GAP, children: [
+        /* @__PURE__ */ jsx13(Text15, { color: COLORS.dim, children: timestamp }),
+        /* @__PURE__ */ jsx13(Text15, { color: logNameColor(entry), wrap: "truncate", children: name }),
+        preview && /* @__PURE__ */ jsx13(Text15, { color: COLORS.dim, wrap: "truncate", children: preview }),
+        durationText && /* @__PURE__ */ jsx13(Text15, { color: COLORS.dim, children: durationText })
       ] }, entry.id);
     }) }),
-    /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: "\u2191/\u2193 scroll" })
+    /* @__PURE__ */ jsx13(Text15, { color: COLORS.dim, children: "\u2191/\u2193 scroll" })
   ] });
 }
 
@@ -1649,7 +1703,7 @@ function track(event, payload) {
 }
 
 // src/ui/App.tsx
-import { jsx as jsx13, jsxs as jsxs14 } from "react/jsx-runtime";
+import { jsx as jsx14, jsxs as jsxs15 } from "react/jsx-runtime";
 function App() {
   const { phase, error, homeScreen, currentStepIndex, steps, inputReq } = useWizard();
   const { exit } = useApp();
@@ -1657,7 +1711,7 @@ function App() {
   const [showLogs, setShowLogs] = useState6(false);
   const finished = phase === "done" || phase === "error";
   const currentStep = steps[currentStepIndex];
-  useInput6(
+  useInput7(
     (_input, key) => {
       if (key.return) {
         exit();
@@ -1665,7 +1719,7 @@ function App() {
     },
     { isActive: finished }
   );
-  useInput6((_input, key) => {
+  useInput7((_input, key) => {
     if (phase === "idle" || phase === "authenticating") return;
     if (key.tab) {
       setShowLogs(!showLogs);
@@ -1676,8 +1730,8 @@ function App() {
       });
     }
   });
-  const escOwnedElsewhere = phase === "idle" || phase === "authenticating" || phase === "awaitingInput" && inputReq?.promptType === "enterToContinue";
-  useInput6((_input, key) => {
+  const escOwnedElsewhere = phase === "idle" || phase === "authenticating" || phase === "awaitingInput" && (inputReq?.promptType === "enterToContinue" || inputReq?.promptType === "commandApproval");
+  useInput7((_input, key) => {
     if (escOwnedElsewhere) return;
     if (key.escape) {
       track("AI Wizard Interaction", {
@@ -1696,8 +1750,8 @@ function App() {
     /* Clamped to exactly the viewport: a taller frame makes Ink clear and repaint
        the whole screen, and the scrolling throws off its cursor arithmetic —
        flicker and leftover rows. */
-    /* @__PURE__ */ jsxs14(
-      Box15,
+    /* @__PURE__ */ jsxs15(
+      Box16,
       {
         backgroundColor: COLORS.bg.main,
         flexDirection: "row",
@@ -1705,16 +1759,16 @@ function App() {
         height: scrollsPastViewport ? void 0 : rows,
         overflow: scrollsPastViewport ? "visible" : "hidden",
         children: [
-          mainWindowVisible && /* @__PURE__ */ jsxs14(
-            Box15,
+          mainWindowVisible && /* @__PURE__ */ jsxs15(
+            Box16,
             {
               flexDirection,
               width: "100%",
               maxHeight: rows,
               justifyContent: "space-between",
               children: [
-                showLogs ? /* @__PURE__ */ jsx13(Logs, {}) : /* @__PURE__ */ jsxs14(
-                  Box15,
+                showLogs ? /* @__PURE__ */ jsx14(Logs, {}) : /* @__PURE__ */ jsxs15(
+                  Box16,
                   {
                     flexDirection: "column",
                     paddingX: 4,
@@ -1722,26 +1776,26 @@ function App() {
                     width: showSidebar ? 70 : "100%",
                     flexGrow: 1,
                     children: [
-                      phase === "authenticating" && /* @__PURE__ */ jsxs14(Box15, { flexDirection: "column", marginBottom: 1, children: [
-                        /* @__PURE__ */ jsx13(Text15, { color: COLORS.strong, bold: true, children: "Signing in to Algolia" }),
-                        /* @__PURE__ */ jsx13(Text15, { color: COLORS.muted, children: "A browser window will open \u2014 complete sign-in there." })
+                      phase === "authenticating" && /* @__PURE__ */ jsxs15(Box16, { flexDirection: "column", marginBottom: 1, children: [
+                        /* @__PURE__ */ jsx14(Text16, { color: COLORS.strong, bold: true, children: "Signing in to Algolia" }),
+                        /* @__PURE__ */ jsx14(Text16, { color: COLORS.muted, children: "A browser window will open \u2014 complete sign-in there." })
                       ] }),
-                      /* @__PURE__ */ jsx13(CliOutput, {}),
-                      /* @__PURE__ */ jsx13(Notices, {}),
-                      /* @__PURE__ */ jsx13(PromptInput, {}),
-                      phase === "running" && showSidebar && /* @__PURE__ */ jsx13(Box15, { marginTop: 1, children: /* @__PURE__ */ jsx13(CurrentStep, {}) }),
-                      phase === "error" && error && /* @__PURE__ */ jsx13(Box15, { marginTop: 1, children: /* @__PURE__ */ jsxs14(Text15, { color: COLORS.status.error, children: [
+                      /* @__PURE__ */ jsx14(CliOutput, {}),
+                      /* @__PURE__ */ jsx14(Notices, {}),
+                      /* @__PURE__ */ jsx14(PromptInput, {}),
+                      phase === "running" && showSidebar && /* @__PURE__ */ jsx14(Box16, { marginTop: 1, children: /* @__PURE__ */ jsx14(CurrentStep, {}) }),
+                      phase === "error" && error && /* @__PURE__ */ jsx14(Box16, { marginTop: 1, children: /* @__PURE__ */ jsxs15(Text16, { color: COLORS.status.error, children: [
                         "\u2716 ",
                         error
                       ] }) })
                     ]
                   }
                 ),
-                showSidebar ? /* @__PURE__ */ jsx13(Sidebar, {}) : /* @__PURE__ */ jsx13(Ribbon, {})
+                showSidebar ? /* @__PURE__ */ jsx14(Sidebar, {}) : /* @__PURE__ */ jsx14(Ribbon, {})
               ]
             }
           ),
-          phase === "idle" && (homeScreen === "learnMore" ? /* @__PURE__ */ jsx13(LearnMore, {}) : /* @__PURE__ */ jsx13(Welcome, {}))
+          phase === "idle" && (homeScreen === "learnMore" ? /* @__PURE__ */ jsx14(LearnMore, {}) : /* @__PURE__ */ jsx14(Welcome, {}))
         ]
       }
     )
@@ -1821,7 +1875,7 @@ async function ensureConsent() {
   if (config.aiConsent) return;
   const store = useWizard.getState();
   const answer = await store.requestUserInput({
-    prompt: "Wizard will make AI-authored changes to this repository.",
+    prompt: "Wizard will make AI-authored changes to this repository, and will propose shell commands to set it up. You approve each command before it runs.",
     promptType: "enterToContinue",
     options: []
   });
@@ -2103,7 +2157,7 @@ async function ensureApplication() {
 }
 
 // src/workflows/default.ts
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 
 // src/actions/listIndices.ts
 import { z as z5 } from "zod";
@@ -2363,22 +2417,48 @@ function writeFileTool(ctx) {
 
 // src/lib/tools/writeAlgoliaCredentials.ts
 import { tool as tool6 } from "ai";
-import z12 from "zod";
+import z13 from "zod";
 import { mkdir as mkdir4, readFile as readFile4, writeFile as writeFile4 } from "node:fs/promises";
 import { dirname as dirname5 } from "node:path";
 
 // src/lib/algoliaApiKey.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 
 // src/lib/keychain.ts
-import { getPassword, setPassword } from "cross-keychain";
+import { deletePassword, getPassword, setPassword } from "cross-keychain";
+import { z as z11 } from "zod";
 var SERVICE = "algolia-wizard";
-function account(kind, index, appId) {
+var ACCOUNT = "api-keys";
+var storedKeysSchema = z11.record(z11.string(), z11.string());
+function entryId(kind, index, appId) {
   return `${kind}:${appId}:${index}`;
 }
+async function loadKeys() {
+  const raw = await getPassword(SERVICE, ACCOUNT);
+  if (!raw) return {};
+  let payload;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+    payload = null;
+  }
+  const keys = storedKeysSchema.safeParse(payload);
+  if (!keys.success) {
+    logger.warn("the stored API keys are unreadable; treating them as empty");
+    return {};
+  }
+  return keys.data;
+}
+var queue = Promise.resolve();
+function serialized(op) {
+  const next = queue.then(op);
+  queue = next.catch(() => {
+  });
+  return next;
+}
 async function readStoredKey(kind, index, appId) {
   try {
-    return await getPassword(SERVICE, account(kind, index, appId));
+    return (await loadKeys())[entryId(kind, index, appId)] ?? null;
   } catch (err) {
     logger.warn(
       { err: err.message, kind, index, appId },
@@ -2387,19 +2467,40 @@ async function readStoredKey(kind, index, appId) {
     return null;
   }
 }
-async function storeKey(kind, index, appId, value) {
-  const name = account(kind, index, appId);
-  try {
-    await setPassword(SERVICE, name, value);
-    if (await getPassword(SERVICE, name) !== value) {
-      throw new Error("the keychain did not store the value");
+function storeKey(kind, index, appId, value) {
+  return serialized(async () => {
+    const id = entryId(kind, index, appId);
+    try {
+      const keys = await loadKeys();
+      await setPassword(
+        SERVICE,
+        ACCOUNT,
+        JSON.stringify({ ...keys, [id]: value })
+      );
+      if ((await loadKeys())[id] !== value) {
+        throw new Error("the keychain did not store the value");
+      }
+    } catch (err) {
+      logger.warn(
+        { err: err.message, kind, index, appId },
+        "could not store the API key in the keychain; the next run will create another"
+      );
     }
-  } catch (err) {
-    logger.warn(
-      { err: err.message, kind, index, appId },
-      "could not store the API key in the keychain; the next run will create another"
-    );
-  }
+  });
+}
+function deleteStoredKeys() {
+  return serialized(async () => {
+    try {
+      await deletePassword(SERVICE, ACCOUNT);
+    } catch (err) {
+      const message = err.message;
+      if (/not found/i.test(message)) return;
+      logger.warn(
+        { err: message },
+        "could not delete the API keys from the keychain"
+      );
+    }
+  });
 }
 
 // src/lib/algoliaApiKey.ts
@@ -2410,27 +2511,24 @@ var WRITE_ACLS = [
   "editSettings",
   "listIndexes"
 ];
-var createdKeySchema = z11.object({
-  key: z11.string().min(1).optional(),
-  value: z11.string().min(1).optional()
+var createdKeySchema = z12.object({
+  key: z12.string().min(1).optional(),
+  value: z12.string().min(1).optional()
 }).transform((o) => o.key ?? o.value);
 async function createKey(index, acls, description) {
   logger.info({ index, acls }, "creating an API key");
-  const stdout = await runAlgoliaCli(
-    [
-      "apikeys",
-      "create",
-      "--acl",
-      acls.join(","),
-      "--indices",
-      index,
-      "--description",
-      description,
-      "-o",
-      "json"
-    ],
-    { withoutAdminKey: true }
-  );
+  const stdout = await runAlgoliaCli([
+    "apikeys",
+    "create",
+    "--acl",
+    acls.join(","),
+    "--indices",
+    index,
+    "--description",
+    description,
+    "-o",
+    "json"
+  ]);
   let payload;
   try {
     payload = JSON.parse(stdout);
@@ -2441,9 +2539,18 @@ async function createKey(index, acls, description) {
   if (!created) throw new Error("apikeys create returned no key value");
   return created;
 }
+async function keyExists(key) {
+  try {
+    await runAlgoliaCli(["apikeys", "get", key, "-o", "json"], { redact: key });
+    return true;
+  } catch (err) {
+    return !/does not exist/i.test(err.message);
+  }
+}
 var resolved = /* @__PURE__ */ new Map();
-function forgetResolvedKeys() {
+async function forgetResolvedKeys() {
   resolved.clear();
+  await deleteStoredKeys();
 }
 function resolveKey(kind, index, appId, acls, description) {
   const cacheKey = `${kind}:${appId}:${index}`;
@@ -2461,8 +2568,14 @@ function resolveKey(kind, index, appId, acls, description) {
 async function provisionKey(kind, index, appId, acls, description) {
   const stored = await readStoredKey(kind, index, appId);
   if (stored) {
-    logger.info({ kind, index, appId }, "reusing the stored API key");
-    return { key: stored, source: "keychain" };
+    if (await keyExists(stored)) {
+      logger.info({ kind, index, appId }, "reusing the stored API key");
+      return { key: stored, source: "keychain" };
+    }
+    logger.info(
+      { kind, index, appId },
+      "the stored API key no longer exists; creating another"
+    );
   }
   const key = await createKey(index, acls, description);
   await storeKey(kind, index, appId, key);
@@ -2511,8 +2624,8 @@ function upsertEnv(content, name, value) {
 function writeCredentialsTool(ctx) {
   return tool6({
     description: `Write the active Algolia credentials (${APP_ID_VAR} and ${API_KEY_VAR}) and the target index name (${INDEX_NAME_VAR}) into the given env file. The credentials come from the selected Algolia application, with a write key scoped to the target index; you only pass the path to the env file (e.g. ".env"). Any name the file already defines is left untouched.`,
-    inputSchema: z12.object({
-      filePath: z12.string().describe(
+    inputSchema: z13.object({
+      filePath: z13.string().describe(
         'Path to the env file to write credentials into (e.g. ".env")'
       )
     }),
@@ -2572,15 +2685,23 @@ function writeCredentialsTool(ctx) {
 
 // src/lib/tools/searchFiles.ts
 import { tool as tool7 } from "ai";
-import z13 from "zod";
+import z14 from "zod";
 import { readdir as readdir2, readFile as readFile5 } from "node:fs/promises";
 import { join as join7 } from "node:path";
 var MAX_QUERY_LENGTH = 1e3;
+var SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  "build",
+  "vendor",
+  "venv",
+  "__pycache__",
+  "target"
+]);
 async function walkFiles(dir) {
-  const skip = /* @__PURE__ */ new Set(["node_modules", ".git", "dist"]);
   const out = [];
   for (const e of await readdir2(dir, { withFileTypes: true })) {
-    if (e.name.startsWith(".") || skip.has(e.name)) continue;
+    if (e.name.startsWith(".") || SKIP_DIRS.has(e.name)) continue;
     const full = join7(dir, e.name);
     if (e.isDirectory()) out.push(...await walkFiles(full));
     else if (e.isFile()) out.push(full);
@@ -2590,9 +2711,9 @@ async function walkFiles(dir) {
 function searchFilesTool(ctx) {
   return tool7({
     description: "Search file contents for a JavaScript regular expression (RegExp syntax, not grep/PCRE). Returns matching lines as file:line:text.",
-    inputSchema: z13.object({
-      query: z13.string().describe("JavaScript RegExp pattern to search for"),
-      path: z13.string().optional().describe("Directory to search in (default: cwd)")
+    inputSchema: z14.object({
+      query: z14.string().describe("JavaScript RegExp pattern to search for"),
+      path: z14.string().optional().describe("Directory to search in (default: cwd)")
     }),
     execute: async ({ query, path = "." }) => {
       logger.info({ query, path }, "called searchFiles tool");
@@ -2634,92 +2755,188 @@ function searchFilesTool(ctx) {
   });
 }
 
-// src/lib/tools/verifyImplementation.ts
+// src/lib/tools/runShell.ts
 import { tool as tool8 } from "ai";
-import z14 from "zod";
+import z15 from "zod";
+import { relative as relative2 } from "node:path";
 
-// src/lib/tools/utils/runCommand.ts
+// src/lib/tools/utils/runShell.ts
 import { spawn as spawn2 } from "node:child_process";
-function runCommand(command, args, cwd) {
+
+// src/lib/tools/context.ts
+var DEFAULT_TOOL_LIMITS = {
+  list: 10,
+  search: 10,
+  read: 20,
+  match: 100,
+  shell: 30
+};
+var DEFAULT_SHELL_TIMEOUT_MS = 10 * 60 * 1e3;
+async function refuseByDefault() {
+  return "reject";
+}
+function createShellContext(overrides = {}) {
+  return {
+    env: async () => ({}),
+    timeoutMs: DEFAULT_SHELL_TIMEOUT_MS,
+    executions: [],
+    approve: refuseByDefault,
+    ...overrides
+  };
+}
+function createToolContext(limits = DEFAULT_TOOL_LIMITS, cwd = process.cwd(), shell2 = createShellContext()) {
+  return {
+    root: cwd,
+    cwd,
+    limits: { ...limits },
+    counts: { list: 0, search: 0, read: 0, shell: 0 },
+    shell: shell2
+  };
+}
+
+// src/lib/tools/utils/runShell.ts
+var SIGKILL_DELAY_MS = 5e3;
+var HEAD_CHARS = 4e3;
+var TAIL_CHARS = 8e3;
+function truncateOutput(output) {
+  if (output.length <= HEAD_CHARS + TAIL_CHARS) return output;
+  const omitted = output.length - HEAD_CHARS - TAIL_CHARS;
+  return [
+    output.slice(0, HEAD_CHARS),
+    `
+\u2026 [${omitted} characters omitted] \u2026
+`,
+    output.slice(-TAIL_CHARS)
+  ].join("");
+}
+function runShell(command, opts) {
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_SHELL_TIMEOUT_MS;
+  const startedAt = Date.now();
   return new Promise((resolve4) => {
     let output = "";
-    const child = spawn2(command, args, {
-      cwd,
-      stdio: ["ignore", "pipe", "pipe"]
+    let timedOut = false;
+    let settled = false;
+    const child = spawn2(command, {
+      shell: true,
+      cwd: opts.cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      env: { ...process.env, ...opts.env }
     });
+    const finish = (exitCode) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      clearTimeout(killTimer);
+      resolve4({
+        exitCode,
+        output: truncateOutput(output.trim()),
+        timedOut,
+        durationMs: Date.now() - startedAt
+      });
+    };
+    let killTimer;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      output += `
+[timed out after ${timeoutMs}ms]`;
+      child.kill("SIGTERM");
+      killTimer = setTimeout(() => child.kill("SIGKILL"), SIGKILL_DELAY_MS);
+    }, timeoutMs);
     child.stdout?.on("data", (d) => output += d);
     child.stderr?.on("data", (d) => output += d);
-    child.on(
-      "error",
-      (err) => resolve4({ code: 1, output: `Failed to run ${command}: ${err.message}` })
-    );
-    child.on("close", (code) => resolve4({ code: code ?? 1, output }));
+    child.on("error", (err) => {
+      output += `Failed to run ${command}: ${err.message}`;
+      finish(1);
+    });
+    child.on("close", (code) => finish(code ?? 1));
   });
 }
 
-// src/lib/tools/utils/packageManager.ts
-import { readFile as readFile6 } from "node:fs/promises";
-import { existsSync } from "node:fs";
-import { join as join8 } from "node:path";
-var LOCKFILES = [
-  ["pnpm-lock.yaml", "pnpm"],
-  ["yarn.lock", "yarn"],
-  ["bun.lockb", "bun"],
-  ["bun.lock", "bun"],
-  ["package-lock.json", "npm"]
-];
-async function readPackageJson(cwd = process.cwd()) {
-  return JSON.parse(await readFile6(join8(cwd, "package.json"), "utf8"));
-}
-function packageManagerFrom(pkg) {
-  return pkg.packageManager?.split("@")[0] ?? "npm";
-}
-function packageManagerFromLockfile(cwd) {
-  return LOCKFILES.find(([file]) => existsSync(join8(cwd, file)))?.[1];
-}
-async function detectPackageManager(cwd) {
-  try {
-    const pkg = await readPackageJson(cwd);
-    if (pkg.packageManager) return packageManagerFrom(pkg);
-  } catch {
-  }
-  return packageManagerFromLockfile(cwd) ?? "npm";
-}
-
-// src/lib/tools/repoVerification.ts
-var VERIFICATION_SCRIPT_CANDIDATES = ["lint", "typecheck", "check"];
-async function runRepoVerificationCheck() {
-  let pkg;
-  try {
-    pkg = await readPackageJson();
-  } catch (err) {
-    const limitation = `Could not read package.json to detect verification conventions: ${err.message}`;
-    return { ok: false, checks: [], limitation };
-  }
-  const scripts = pkg.scripts ?? {};
-  const present = VERIFICATION_SCRIPT_CANDIDATES.filter((s) => s in scripts);
-  if (present.length === 0) {
-    const limitation = `No verification script found in package.json (looked for: ${VERIFICATION_SCRIPT_CANDIDATES.join(", ")}).`;
-    return { ok: false, checks: [], limitation };
-  }
-  const pm = await detectPackageManager(process.cwd());
-  const checks = [];
-  for (const script of present) {
-    const command = `${pm} run ${script}`;
-    const { code, output } = await runCommand(pm, ["run", script]);
-    checks.push({ command, exitCode: code, ok: code === 0, output: output.trim() });
-  }
-  return { ok: checks.every((c) => c.ok), checks };
+// src/lib/tools/runShell.ts
+function storeApproval(root) {
+  return async (req) => {
+    const rel = relative2(root, req.cwd);
+    const answer = await useWizard.getState().requestUserInput({
+      prompt: "Run this command?",
+      promptType: "commandApproval",
+      options: [],
+      command: {
+        ...req,
+        cwd: rel === "" || rel.startsWith("..") ? req.cwd : rel
+      }
+    });
+    return answer === "approve" ? "approve" : "reject";
+  };
 }
-
-// src/lib/tools/verifyImplementation.ts
-function verifyImplementationTool() {
+function runShellTool(ctx) {
   return tool8({
-    description: "Run the repo's mechanical verification check for generated implementation changes. Detects lint/typecheck/check from package.json and returns structured pass/fail evidence for the verifier to interpret.",
-    inputSchema: z14.object(),
-    execute: async () => {
-      logger.info("called verifyImplementation tool");
-      return runRepoVerificationCheck();
+    description: "Run a shell command in the project. Use this for anything the project needs done in its own ecosystem: installing dependencies, running a script you wrote, running the project's lint/typecheck/test commands. The user sees and approves every command before it runs, so write a clear `explanation`. If the user rejects a command, do not retry it \u2014 propose a different approach.",
+    inputSchema: z15.object({
+      command: z15.string().describe(
+        "The command to run, exactly as it would be typed in a shell. Pipes, && and redirects are allowed."
+      ),
+      cwd: z15.string().optional().describe(
+        "Directory to run in, relative to the project root. Defaults to the project root."
+      ),
+      explanation: z15.string().describe(
+        "One short line telling the user what this command does and why, including any side effect (e.g. writes records to Algolia). This is what they approve against."
+      )
+    }),
+    execute: async ({ command, cwd, explanation }) => {
+      if (++ctx.counts.shell > ctx.limits.shell) {
+        return `Refused: command limit (${ctx.limits.shell}) reached. Stop running commands and report what you have.`;
+      }
+      const resolved2 = resolveInRoot(ctx, cwd ?? ".");
+      if (!resolved2.ok) return resolved2.error;
+      logger.info({ command, cwd: resolved2.target }, "called runShell tool");
+      const decision = await ctx.shell.approve({
+        command,
+        cwd: resolved2.target,
+        explanation
+      });
+      if (decision === "reject") {
+        ctx.shell.executions.push({
+          command,
+          cwd: resolved2.target,
+          approved: false
+        });
+        logger.info({ command }, "runShell: user rejected the command");
+        return "The user rejected this command. Do not retry it. Propose a different command, or report the limitation via reportStatus.";
+      }
+      useWizard.getState().pushNotice({ messages: [`Running: ${command}`] });
+      const env = await ctx.shell.env().catch((err) => {
+        logger.warn({ err, command }, "runShell: could not resolve command env");
+        return {};
+      });
+      const run2 = await (ctx.shell.run ?? runShell)(command, {
+        cwd: resolved2.target,
+        env,
+        timeoutMs: ctx.shell.timeoutMs
+      });
+      logger.info(
+        {
+          command,
+          exitCode: run2.exitCode,
+          timedOut: run2.timedOut,
+          durationMs: run2.durationMs
+        },
+        "runShell finished"
+      );
+      await markInteraction();
+      ctx.shell.executions.push({
+        command,
+        cwd: resolved2.target,
+        approved: true,
+        exitCode: run2.exitCode,
+        output: run2.output,
+        timedOut: run2.timedOut,
+        durationMs: run2.durationMs
+      });
+      return {
+        exitCode: run2.exitCode,
+        timedOut: run2.timedOut,
+        output: run2.output
+      };
     }
   });
 }
@@ -2730,7 +2947,7 @@ import { createAnthropic } from "@ai-sdk/anthropic";
 import { nanoid as nanoid2 } from "nanoid";
 import { mkdir as mkdir5, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname6 } from "node:path";
-import z15 from "zod";
+import z16 from "zod";
 var DATA_DIR = ".algolia-wizard/data";
 var RECORD_MODEL = "claude-haiku-4-5";
 var MAX_RECORDS = 100;
@@ -2742,17 +2959,17 @@ var anthropic = createAnthropic({
 function generateRecordTool(ctx) {
   return tool9({
     description: "Generate realistic sample records for an entity and write them to a JSON file in the worktree. Provide the entity name and its attributes; this tool asks a model to invent varied, realistic values, each with a unique objectID, and returns the file path to read them from at runtime. Do not invent the record values or objectIDs yourself, and do not inline the returned records into the script \u2014 call this tool and read the file it writes.",
-    inputSchema: z15.object({
-      entityName: z15.string().describe("Name of the entity to generate records for."),
-      attributes: z15.array(z15.string()).describe("Attribute names each record must contain."),
-      count: z15.number().int().min(1).max(MAX_RECORDS).default(10).describe(`How many records to generate (max ${MAX_RECORDS}).`),
-      hint: z15.string().optional().describe("Optional context to steer realistic values.")
+    inputSchema: z16.object({
+      entityName: z16.string().describe("Name of the entity to generate records for."),
+      attributes: z16.array(z16.string()).describe("Attribute names each record must contain."),
+      count: z16.number().int().min(1).max(MAX_RECORDS).default(10).describe(`How many records to generate (max ${MAX_RECORDS}).`),
+      hint: z16.string().optional().describe("Optional context to steer realistic values.")
     }),
     execute: async ({ entityName, attributes, count, hint }) => {
       logger.info({ entityName, count }, "called generateRecord tool");
       try {
-        const value = z15.union([z15.string(), z15.number(), z15.boolean(), z15.null()]);
-        const recordSchema = z15.object(
+        const value = z16.union([z16.string(), z16.number(), z16.boolean(), z16.null()]);
+        const recordSchema = z16.object(
           Object.fromEntries(attributes.map((attr) => [attr, value]))
         );
         const generateBatch = async (batchCount) => {
@@ -2762,8 +2979,8 @@ function generateRecordTool(ctx) {
               const { output } = await generateText({
                 model: anthropic(RECORD_MODEL),
                 output: Output.object({
-                  schema: z15.object({
-                    records: z15.array(recordSchema).length(batchCount)
+                  schema: z16.object({
+                    records: z16.array(recordSchema).length(batchCount)
                   })
                 }),
                 prompt: [
@@ -2810,7 +3027,7 @@ function generateRecordTool(ctx) {
         return {
           filePath: relPath,
           count: records.length,
-          message: `Wrote ${records.length} records to ${relPath}. Read and parse this file in the script at runtime (e.g. JSON.parse(readFileSync(...)) in Node/Bun, json.load(open(...)) in Python) \u2014 do not inline the records as literals.`
+          message: `Wrote ${records.length} records to ${relPath}. Read and parse this file in the script at runtime using your language's standard JSON support \u2014 do not inline the records as literals.`
         };
       } catch (err) {
         return `Error generating records: ${err.message}`;
@@ -2821,12 +3038,12 @@ function generateRecordTool(ctx) {
 
 // src/lib/tools/notifyUser.ts
 import { tool as tool10 } from "ai";
-import z16 from "zod";
+import z17 from "zod";
 function notifyUserTool() {
   return tool10({
     description: `Give the user a brief, high-level update on what you are currently doing or about to do next. This is for the big picture (e.g. "Reading through your data models", "Writing the search UI") \u2014 not granular detail like individual tool calls, which are already logged separately. Call it when you start a new phase of work or your focus shifts, just not on every step, enough to keep the user engaged. Don't say things like "starting", just describe what you are doing. Don't mention tool calls themselves, just general direction of the work.`,
-    inputSchema: z16.object({
-      message: z16.string().describe(
+    inputSchema: z17.object({
+      message: z17.string().describe(
         "Short, plain-language description of what you are doing now."
       )
     }),
@@ -2838,22 +3055,6 @@ function notifyUserTool() {
   });
 }
 
-// src/lib/tools/context.ts
-var DEFAULT_TOOL_LIMITS = {
-  list: 10,
-  search: 10,
-  read: 20,
-  match: 100
-};
-function createToolContext(limits = DEFAULT_TOOL_LIMITS, cwd = process.cwd()) {
-  return {
-    root: cwd,
-    cwd,
-    limits,
-    counts: { list: 0, search: 0, read: 0 }
-  };
-}
-
 // src/lib/tools/index.ts
 function withLogging(name, def) {
   const execute = def.execute;
@@ -2885,10 +3086,7 @@ function createTools(ctx, { output, tools }) {
       writeCredentialsTool(ctx)
     ),
     searchFiles: withLogging("searchFiles", searchFilesTool(ctx)),
-    verifyImplementation: withLogging(
-      "verifyImplementation",
-      verifyImplementationTool()
-    ),
+    runShell: withLogging("runShell", runShellTool(ctx)),
     generateRecord: withLogging("generateRecord", generateRecordTool(ctx)),
     notifyUser: withLogging("notifyUser", notifyUserTool())
   };
@@ -2923,7 +3121,7 @@ async function runAgent(req) {
     baseURL: PROXY_BASE_URL,
     fetch: proxyFetch
   });
-  const toolContext = createToolContext();
+  const toolContext = req.toolContext ?? createToolContext();
   const readTools = ["readFile", "searchFiles", "listFiles"];
   const hasReadTools = !req.tools || req.tools.some((t) => readTools.includes(t));
   const instructions = [
@@ -2988,7 +3186,11 @@ async function runAgent(req) {
     "runAgent finished"
   );
   logger.info(
-    { counts: toolContext.counts, limits: toolContext.limits },
+    {
+      counts: toolContext.counts,
+      limits: toolContext.limits,
+      commandsRun: toolContext.shell.executions.length
+    },
     "tool usage"
   );
   const toolResults = await stream.toolResults;
@@ -3006,16 +3208,16 @@ async function runAgent(req) {
 }
 
 // src/actions/detectLanguage.ts
-import z19 from "zod";
-var detectLanguageSchema = z19.object({
-  languages: z19.array(z19.object({ name: z19.string(), version: z19.string() })),
-  frameworks: z19.array(z19.object({ name: z19.string(), version: z19.string() }))
+import z20 from "zod";
+var detectLanguageSchema = z20.object({
+  languages: z20.array(z20.object({ name: z20.string(), version: z20.string() })),
+  frameworks: z20.array(z20.object({ name: z20.string(), version: z20.string() }))
 });
 var detectLanguage = () => runAgent({
   instructions: [
     "Analyze the codebase and determine the programming languages and frameworks used",
-    "If a superset language is found, exclude the subset language. TS-over-JS.",
-    "If a meta-framework is used, exclude the framework. Next-over-React.",
+    "If a superset language is found, exclude the subset language (e.g. TypeScript over JavaScript).",
+    "If a meta-framework is used, exclude the framework it builds on (e.g. Next.js over React, Rails over Rack).",
     "Return the exact version",
     "Exclude things like CSS frameworks, build tools, or testing frameworks",
     'Use as few tools as possible, but do not guess. If you cant find the answer, say "unknown"',
@@ -3027,31 +3229,31 @@ var detectLanguage = () => runAgent({
 });
 
 // src/actions/analyzeCodebase.ts
-import z20 from "zod";
+import z21 from "zod";
 var READONLY_TOOLS = [
   "listFiles",
   "changeDirectory",
   "readFile",
   "searchFiles"
 ];
-var ingestionAnalysisSchema = z20.object({
-  ingestionAnalysis: z20.array(
-    z20.object({
-      name: z20.string(),
-      paths: z20.array(z20.string()),
+var ingestionAnalysisSchema = z21.object({
+  ingestionAnalysis: z21.array(
+    z21.object({
+      name: z21.string(),
+      paths: z21.array(z21.string()),
       // indexable fields the agent found for this entity
-      attributes: z20.array(z20.string())
+      attributes: z21.array(z21.string())
     })
   )
 });
-var searchImplementationAnalysisSchema = z20.object({
-  searchImplementationAnalysis: z20.string()
+var searchImplementationAnalysisSchema = z21.object({
+  searchImplementationAnalysis: z21.string()
 });
-var verificationSchema = z20.object({
-  verification: z20.array(z20.string())
+var verificationSchema = z21.object({
+  verification: z21.array(z21.string())
 });
 var confirmedEntitiesFieldSchema = ingestionAnalysisSchema.shape.ingestionAnalysis.optional();
-var analyzeCodebaseSchema = z20.object({
+var analyzeCodebaseSchema = z21.object({
   ingestionAnalysis: ingestionAnalysisSchema.shape.ingestionAnalysis.optional(),
   searchImplementationAnalysis: searchImplementationAnalysisSchema.shape.searchImplementationAnalysis.optional(),
   verification: verificationSchema.shape.verification.optional(),
@@ -3113,7 +3315,7 @@ async function runAnalysis(mode, extraInstructions = []) {
 // package.json
 var package_default = {
   name: "@algolia/wizard",
-  version: "0.9.0-rc.88.85",
+  version: "0.9.0-rc.93.108",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {
@@ -3232,8 +3434,8 @@ async function askList(ctx, prompt, { required = false } = {}) {
 }
 
 // src/actions/confirmLanguage.ts
-import z22 from "zod";
-var confirmLanguageSchema = z22.object({
+import z23 from "zod";
+var confirmLanguageSchema = z23.object({
   languages: detectLanguageSchema.shape.languages
 });
 async function confirmLanguage(ctx) {
@@ -3254,17 +3456,19 @@ async function confirmLanguage(ctx) {
 }
 
 // src/actions/confirmFramework.ts
-import z23 from "zod";
-var confirmFrameworkSchema = z23.object({
+import z24 from "zod";
+var confirmFrameworkSchema = z24.object({
   frameworks: detectLanguageSchema.shape.frameworks
 });
 var CURATED_FRAMEWORKS = [
   "Next.js",
   "React",
   "Vue",
-  "Angular",
-  "Svelte",
-  "Vanilla JS"
+  "Vanilla JS",
+  "Django",
+  "Laravel",
+  "Rails",
+  "Symfony"
 ];
 var OTHER_OPTION = "Other";
 var normalize = (s) => s.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -3277,12 +3481,15 @@ var FRAMEWORK_ALIASES = {
   vuejs: "vue",
   angular: "angular",
   angularjs: "angular",
-  svelte: "svelte",
-  sveltekit: "svelte",
   vanillajs: "vanillajs",
   vanilla: "vanillajs",
   javascript: "vanillajs",
-  js: "vanillajs"
+  js: "vanillajs",
+  django: "django",
+  laravel: "laravel",
+  rails: "rails",
+  rubyonrails: "rails",
+  symfony: "symfony"
 };
 var isSameFramework = (a, b) => {
   const x = FRAMEWORK_ALIASES[normalize(a)] ?? normalize(a);
@@ -3383,8 +3590,8 @@ async function promptUser(ctx, params) {
 }
 
 // src/actions/confirmEntities.ts
-import z24 from "zod";
-var confirmEntitiesSchema = z24.object({
+import z25 from "zod";
+var confirmEntitiesSchema = z25.object({
   // Final detection — the focused re-run may supersede project-scan's.
   ingestionAnalysis: ingestionAnalysisSchema.shape.ingestionAnalysis.optional(),
   confirmedEntities: confirmedEntitiesFieldSchema
@@ -3454,15 +3661,15 @@ async function confirmEntities(ctx) {
 }
 
 // src/actions/review.ts
-import { z as z25 } from "zod";
-var reviewSchema = z25.object({
+import { z as z26 } from "zod";
+var reviewSchema = z26.object({
   // Broad, high-level takeaways grouped by theme (e.g. ingestion, search UI),
   // not one entry per workflow step — a step's raw output can be a long,
   // multi-paragraph blob (see implement.ts's summaries.join), and mirroring
   // that 1:1 is what made the old per-step summary an unreadable wall of text.
-  summaryPoints: z25.array(z25.string()),
-  reviewPrompt: z25.string(),
-  nextSteps: z25.array(z25.string())
+  summaryPoints: z26.array(z26.string()),
+  reviewPrompt: z26.string(),
+  nextSteps: z26.array(z26.string())
 });
 function formatCompletedSteps(steps) {
   if (!steps.length) return "(no prior steps completed)";
@@ -3513,19 +3720,12 @@ ${formatCompletedSteps(ctx.completedSteps)}`,
 };
 
 // src/actions/implement.ts
-import z26 from "zod";
+import z27 from "zod";
 
 // src/lib/worktree.ts
-import { execFile, spawn as spawn3 } from "node:child_process";
-import { copyFile, mkdir as mkdir6, readdir as readdir3, readFile as readFile7, stat as stat2, writeFile as writeFile6 } from "node:fs/promises";
-import {
-  basename as basename2,
-  dirname as dirname7,
-  isAbsolute as isAbsolute2,
-  join as join9,
-  relative as relative2,
-  resolve as resolve3
-} from "node:path";
+import { execFile } from "node:child_process";
+import { copyFile, mkdir as mkdir6, readdir as readdir3, readFile as readFile6, stat as stat2, writeFile as writeFile6 } from "node:fs/promises";
+import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute2, join as join8, resolve as resolve3 } from "node:path";
 var MAX_BUFFER = 32 * 1024 * 1024;
 var MAX_WIZARD_WORKTREES = 3;
 var WIZARD_BRANCH_PREFIX = "wizard/implement-";
@@ -3556,7 +3756,7 @@ async function isWorkingTreeDirty(repoRoot) {
   return out.trim().length > 0;
 }
 async function pruneOldWorktrees(repoRoot) {
-  const dir = join9(stateDir(repoRoot), "worktrees");
+  const dir = join8(stateDir(repoRoot), "worktrees");
   const stale = (await readdir3(dir).catch(() => [])).filter((name) => /^wizard-implement-\d+$/.test(name)).sort().reverse().slice(MAX_WIZARD_WORKTREES - 1);
   for (const slug of stale) {
     const branch = slug.replace("wizard-implement-", WIZARD_BRANCH_PREFIX);
@@ -3567,7 +3767,7 @@ async function pruneOldWorktrees(repoRoot) {
         "worktree",
         "remove",
         "--force",
-        join9(dir, slug)
+        join8(dir, slug)
       ]);
       await git(["-C", repoRoot, "branch", "-D", branch]);
     } catch (err) {
@@ -3581,113 +3781,13 @@ async function pruneOldWorktrees(repoRoot) {
 async function createWorktree(repoRoot) {
   const branch = `${WIZARD_BRANCH_PREFIX}${Date.now()}`;
   const dirSlug = branch.replace(/\//g, "-");
-  const path = join9(stateDir(repoRoot), "worktrees", dirSlug);
+  const path = join8(stateDir(repoRoot), "worktrees", dirSlug);
   await git(["-C", repoRoot, "worktree", "prune"]);
   await pruneOldWorktrees(repoRoot);
   await mkdir6(dirname7(path), { recursive: true });
   await git(["-C", repoRoot, "worktree", "add", "-b", branch, path, "HEAD"]);
   return { path, branch };
 }
-async function installWorktreeDeps(worktreePath) {
-  try {
-    await readPackageJson(worktreePath);
-  } catch {
-    return { ok: true, output: "no package.json; skipped install" };
-  }
-  const pm = await detectPackageManager(worktreePath);
-  return new Promise((resolve4) => {
-    let output = "";
-    const child = spawn3(pm, ["install"], {
-      cwd: worktreePath,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    child.stdout?.on("data", (d) => output += d);
-    child.stderr?.on("data", (d) => output += d);
-    child.on(
-      "error",
-      (err) => resolve4({
-        ok: false,
-        output: `Failed to run ${pm} install: ${err.message}`
-      })
-    );
-    child.on(
-      "close",
-      (code) => resolve4({ ok: code === 0, output: output.trim() })
-    );
-  });
-}
-var INGEST_RUNTIMES = ["node", "python", "python3", "bun"];
-function validateIngestEntrypoint(worktreePath, entrypoint) {
-  if (!entrypoint || entrypoint.startsWith("-")) {
-    return {
-      ok: false,
-      reason: `entrypoint "${entrypoint}" is not a plain file path`
-    };
-  }
-  const target = resolve3(worktreePath, entrypoint);
-  const rel = relative2(worktreePath, target);
-  if (rel.startsWith("..") || isAbsolute2(rel)) {
-    return {
-      ok: false,
-      reason: `entrypoint "${entrypoint}" resolves outside the worktree`
-    };
-  }
-  return { ok: true, target };
-}
-async function runIngestScript(worktreePath, runtime, entrypoint, env = {}) {
-  if (!INGEST_RUNTIMES.includes(runtime)) {
-    return {
-      ran: false,
-      ok: false,
-      output: "",
-      reason: `runtime "${runtime}" is not an allowed interpreter (${INGEST_RUNTIMES.join(", ")})`
-    };
-  }
-  const validated = validateIngestEntrypoint(worktreePath, entrypoint);
-  if (!validated.ok) {
-    return { ran: false, ok: false, output: "", reason: validated.reason };
-  }
-  try {
-    if (!(await stat2(validated.target)).isFile()) {
-      return {
-        ran: false,
-        ok: false,
-        output: "",
-        reason: `entrypoint "${entrypoint}" is not a file`
-      };
-    }
-  } catch {
-    return {
-      ran: false,
-      ok: false,
-      output: "",
-      reason: `entrypoint "${entrypoint}" does not exist`
-    };
-  }
-  return new Promise((resolveRun) => {
-    let output = "";
-    const child = spawn3(runtime, [entrypoint], {
-      cwd: worktreePath,
-      shell: false,
-      stdio: ["ignore", "pipe", "pipe"],
-      env: { ...process.env, ...env }
-    });
-    child.stdout?.on("data", (d) => output += d);
-    child.stderr?.on("data", (d) => output += d);
-    child.on(
-      "error",
-      (err) => resolveRun({
-        ran: true,
-        ok: false,
-        output: `Failed to run ${runtime} ${entrypoint}: ${err.message}`
-      })
-    );
-    child.on(
-      "close",
-      (code) => resolveRun({ ran: true, ok: code === 0, output: output.trim() })
-    );
-  });
-}
 async function copyUploadIntoWorktree(repoRoot, worktreePath, ingestDir, sourcePath) {
   const trimmed = sourcePath.trim();
   if (!trimmed) {
@@ -3701,8 +3801,8 @@ async function copyUploadIntoWorktree(repoRoot, worktreePath, ingestDir, sourceP
   } catch {
     return { ok: false, reason: `"${sourcePath}" does not exist` };
   }
-  const relPath = join9(ingestDir, basename2(source));
-  const dest = join9(worktreePath, relPath);
+  const relPath = join8(ingestDir, basename2(source));
+  const dest = join8(worktreePath, relPath);
   try {
     await mkdir6(dirname7(dest), { recursive: true });
     await copyFile(source, dest);
@@ -3720,7 +3820,7 @@ function hasEnvVar(content, name) {
 async function readEnvVar(worktreePath, name) {
   let content;
   try {
-    content = await readFile7(join9(worktreePath, ".env"), "utf8");
+    content = await readFile6(join8(worktreePath, ".env"), "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
     return void 0;
@@ -3735,10 +3835,10 @@ async function readEnvVar(worktreePath, name) {
   return value;
 }
 async function writeSearchEnvValues(worktreePath, vars) {
-  const target = join9(worktreePath, ".env");
+  const target = join8(worktreePath, ".env");
   let existing = "";
   try {
-    existing = await readFile7(target, "utf8");
+    existing = await readFile6(target, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
   }
@@ -3807,15 +3907,15 @@ async function confirmDirtyWorkingTree(ctx, repoRoot) {
 }
 
 // src/lib/algoliaDocs.ts
-import { readFileSync, readdirSync, existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname8, join as join10 } from "node:path";
+import { readFileSync, readdirSync, existsSync } from "node:fs";
+import { dirname as dirname8, join as join9 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-var DOCS_SUBPATH = join10("docs", "algolia-sdk");
+var DOCS_SUBPATH = join9("docs", "algolia-sdk");
 function findDocsDir() {
   let dir = dirname8(fileURLToPath2(import.meta.url));
   for (; ; ) {
-    const candidate = join10(dir, DOCS_SUBPATH);
-    if (existsSync2(candidate)) return candidate;
+    const candidate = join9(dir, DOCS_SUBPATH);
+    if (existsSync(candidate)) return candidate;
     const parent = dirname8(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -3837,7 +3937,7 @@ function loadAlgoliaDoc(language) {
     );
     return "";
   }
-  return readFileSync(join10(docsDir, files[0]), "utf8").trim();
+  return readFileSync(join9(docsDir, files[0]), "utf8").trim();
 }
 function getNamedDoc(name, language) {
   const docsDir = findDocsDir();
@@ -3845,14 +3945,15 @@ function getNamedDoc(name, language) {
     logger.warn("docs/algolia-sdk not found");
     return "";
   }
-  const file = join10(docsDir, `${name}-${language}.md`);
-  if (!existsSync2(file)) {
+  const file = join9(docsDir, `${name}-${language}.md`);
+  if (!existsSync(file)) {
     logger.warn({ name, language }, "named SDK reference not found");
     return "";
   }
   return readFileSync(file, "utf8").trim();
 }
 function getFrameworkSpecificDoc(frameworks) {
+  if (frameworks.length === 0) return "";
   const fw = frameworks.map((f) => f.toLowerCase());
   if (fw.includes("vue") || fw.includes("nuxt")) {
     return loadAlgoliaDoc("vue");
@@ -3860,9 +3961,6 @@ function getFrameworkSpecificDoc(frameworks) {
   if (fw.includes("react") || fw.includes("next.js")) {
     return loadAlgoliaDoc("react");
   }
-  if (fw.includes("angular")) {
-    return loadAlgoliaDoc("angular");
-  }
   return loadAlgoliaDoc("js");
 }
 
@@ -3872,62 +3970,63 @@ function shellQuote(value) {
 }
 
 // src/actions/implement.ts
-var implementSchema = z26.object({
-  filesChanged: z26.array(z26.string()),
-  summary: z26.string(),
-  worktreePath: z26.string().optional(),
-  ingestCommand: z26.string().optional(),
-  ingestScriptRan: z26.boolean().optional(),
-  ingestRecordCount: z26.number().optional(),
-  ingestDurationMs: z26.number().optional(),
-  ingestionSource: z26.enum(["local", "fileUpload", "generated"]),
-  searchEnvVars: z26.array(
-    z26.object({
-      name: z26.string(),
-      value: z26.string()
+var implementSchema = z27.object({
+  filesChanged: z27.array(z27.string()),
+  summary: z27.string(),
+  worktreePath: z27.string().optional(),
+  ingestCommand: z27.string().optional(),
+  ingestScriptRan: z27.boolean().optional(),
+  ingestRecordCount: z27.number().optional(),
+  ingestDurationMs: z27.number().optional(),
+  ingestionSource: z27.enum(["local", "fileUpload", "generated"]),
+  searchEnvVars: z27.array(
+    z27.object({
+      name: z27.string(),
+      value: z27.string()
     })
   ).optional()
 });
-var implementationOutputSchema = z26.object({
-  summary: z26.string(),
-  // Ingestion only: a structured pair the wizard turns into an argv, never a
-  // free-form command string. `runtime` is allowlisted and `entrypoint` is
-  // validated worktree-relative, so the agent cannot inject extra commands.
-  runtime: z26.enum(INGEST_RUNTIMES).optional(),
-  entrypoint: z26.string().optional()
+var implementationOutputSchema = z27.object({
+  summary: z27.string(),
+  ingestCommand: z27.string().optional()
 });
-var verificationOutputSchema = z26.object({
-  summary: z26.string(),
-  sufficient: z26.boolean(),
-  additionalInstructions: z26.string().optional()
+var verificationOutputSchema = z27.object({
+  summary: z27.string(),
+  sufficient: z27.boolean(),
+  additionalInstructions: z27.string().optional()
 });
 var MAX_IMPLEMENT_VERIFICATION_ATTEMPTS = 3;
 var DEFAULT_IMPLEMENT_USE_CASES = ["ingestion", "search"];
 var INGEST_DIR = ".algolia-wizard";
-function detectUiFramework(language) {
-  const names = language.frameworks.map((f) => f.name.toLowerCase());
-  if (names.some((n) => n.includes("vue") || n.includes("nuxt"))) return "Vue";
-  if (names.some((n) => n.includes("react") || n.includes("next")))
-    return "React";
-  if (names.some((n) => n.includes("angular"))) return "Angular";
-  return "JavaScript";
-}
-function frameworksForDoc(framework) {
-  switch (framework) {
-    case "React":
-      return ["react"];
-    case "Vue":
-      return ["vue"];
-    case "Angular":
-      return ["angular"];
-    case "JavaScript":
-      return [];
-  }
+var JS_LANGUAGES = ["javascript", "typescript", "jsx", "tsx", "node"];
+function lower(entries) {
+  return entries.map((entry) => entry.name.toLowerCase());
 }
-function publicEnvPrefix(language) {
-  const frameworkNames = language.frameworks.map(
-    (framework) => framework.name.toLowerCase()
+function isJsProject(language) {
+  return lower(language.languages).some(
+    (name) => JS_LANGUAGES.some((js) => name.includes(js))
   );
+}
+var UI_FRAMEWORKS = [
+  { match: ["vue", "nuxt"], target: "Vue", doc: "vue" },
+  { match: ["react", "next"], target: "React", doc: "react" },
+  { match: ["angular"], target: "Angular" }
+];
+function matchUiFramework(language) {
+  const names = lower(language.frameworks);
+  return UI_FRAMEWORKS.find(
+    (ui) => ui.match.some((needle) => names.some((name) => name.includes(needle)))
+  );
+}
+function searchUiTarget(language) {
+  return matchUiFramework(language)?.target ?? language.frameworks[0]?.name ?? (isJsProject(language) ? "JavaScript" : "this project");
+}
+function frameworksForDoc(language) {
+  if (!isJsProject(language)) return [];
+  return [matchUiFramework(language)?.doc ?? "js"];
+}
+function publicEnvPrefix(language) {
+  const frameworkNames = lower(language.frameworks);
   if (frameworkNames.some((name) => name.includes("next"))) {
     return "NEXT_PUBLIC_";
   }
@@ -3940,7 +4039,7 @@ function publicEnvPrefix(language) {
   if (frameworkNames.some((name) => name.includes("vite"))) {
     return "VITE_";
   }
-  return "PUBLIC_";
+  return isJsProject(language) ? "PUBLIC_" : "";
 }
 var APP_ID_VAR_SUFFIX = "ALGOLIA_APP_ID";
 var SEARCH_KEY_VAR_SUFFIX = "ALGOLIA_SEARCH_API_KEY";
@@ -3979,7 +4078,10 @@ function baseInstructions(input) {
     // index-scoped keys then reject with a 403.
     `Target Algolia index, to be used exactly as written \u2014 never renamed, re-cased, prefixed, or suffixed: "${input.targetIndex}"`,
     `Project languages and frameworks: ${JSON.stringify(input.language)}`,
-    "Make minimal, idiomatic changes; do not touch unrelated code."
+    "Make minimal, idiomatic changes; do not touch unrelated code.",
+    `Commands run through a shell on ${process.platform}. Write commands that work there.`,
+    "Use the project's own tooling for every command \u2014 its package manager, task runner, and test/lint commands. Do not assume a JavaScript toolchain.",
+    "runShell needs the developer to approve each command, so give every call a clear `explanation` naming what it does and any side effect. If a command is rejected, do not retry it \u2014 take a different approach or report the limitation."
   ];
 }
 function sourceSpecificInstructions(input) {
@@ -3999,12 +4101,21 @@ function sourceSpecificInstructions(input) {
     generated: [
       "No real data source exists; use sample records for each confirmed entity.",
       "Call the generateRecord tool once per entity (entityName, attributes, count 20-50); it invents the values and unique objectIDs and writes them to a JSON file in the worktree, returning the file path. Do not write records or objectIDs yourself.",
-      "In the script, read and parse each returned file path at runtime (e.g. JSON.parse(readFileSync(...)) in Node/Bun, json.load(open(...)) in Python) instead of inlining the records as literals.",
+      "In the script, read and parse each returned file path at runtime using your language's standard JSON support, instead of inlining the records as literals.",
       "Add a prominent TODO where the developer swaps the generated records (and the JSON file under `.algolia-wizard/data/`) for their real record source."
     ]
   };
   return byLine[input.ingestionSource];
 }
+function algoliaClientDoc(input) {
+  const doc = getNamedDoc("save-records", "js");
+  if (!doc) return [];
+  if (isJsProject(input.language)) return [doc];
+  return [
+    "The reference below is written in JavaScript. Use it for the method names, arguments, and record shape, then translate to this project's language and its official Algolia client:",
+    doc
+  ];
+}
 function ingestionInstructions(input) {
   return [
     ...input.confirmed && input.confirmed.length ? [
@@ -4012,25 +4123,30 @@ function ingestionInstructions(input) {
       `Ingest only these confirmed entities (name, source paths, attributes): ${JSON.stringify(input.confirmed)}.`,
       `Ingesting writes to Algolia, so the script needs a write API key and App ID \u2014 read them from the ${API_KEY_VAR} and ${APP_ID_VAR} environment variables rather than hardcoding them. The wizard sets these when it runs the script.`,
       `Read the index name from the ${INDEX_NAME_VAR} environment variable, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or entity name \u2014 the write key only works for that exact index. Exit with an error if ${INDEX_NAME_VAR} is unset.`,
-      "Use the appropriate Algolia package in the ingestion script. Do not use the raw HTTP API.",
+      "Write the script in the project's primary language, using Algolia's official client for that language. Do not use the raw HTTP API.",
       "After a successful ingest, the script must print exactly one line to stdout in the form `ALGOLIA_WIZARD_RECORD_COUNT=<n>`, where <n> is the total number of records pushed to Algolia. Print it last, on its own line, with no surrounding text.",
-      getNamedDoc("save-records", "js"),
-      'Add algoliasearch to package.json "dependencies" with a valid version range; the wizard installs the worktree deps after you finish.',
+      ...algoliaClientDoc(input),
+      "Install the Algolia client with the project's own package manager via runShell, declaring it in whatever manifest the project uses (e.g. package.json, requirements.txt, Gemfile, go.mod, composer.json) so the dependency is not just installed ad hoc.",
+      'Then run the script yourself via runShell, and report the command you ran as "ingestCommand" so the developer can re-run it. Its explanation must say that running it writes records to Algolia.',
       "The summary should be extremely concise.",
-      `Return how to run the script as two fields, not a command string: "runtime" (one of ${INGEST_RUNTIMES.join(", ")}) and "entrypoint" (the script path relative to the worktree root, e.g. "${input.ingestDir}/ingest.mjs"). The wizard runs \`<runtime> <entrypoint>\` directly, so the entrypoint must be a plain path with no flags or arguments. Write a script one of those interpreters can run as-is.`,
       ...sourceSpecificInstructions(input)
     ] : []
   ];
 }
 function searchInstructions(input) {
-  const doc = getFrameworkSpecificDoc(frameworksForDoc(input.uiFramework));
+  const doc = getFrameworkSpecificDoc(frameworksForDoc(input.language));
   return [
     "Implement an in-app Algolia search experience.",
-    `Build the search UI for ${input.uiFramework}.`,
-    "Follow the Algolia JS SDK reference below for client setup and InstantSearch wiring; prefer it over prior knowledge:",
-    doc,
-    `Add the search UI at ${input.searchLocation ? `"${input.searchLocation}"` : "the best shared, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working SearchBox and Hits against the target index.`,
+    `Build the search UI for ${input.searchUiTarget}.`,
+    ...doc ? [
+      "Follow the Algolia SDK reference below for client setup and search UI wiring; prefer it over prior knowledge:",
+      doc
+    ] : [
+      "No bundled Algolia SDK reference exists for this stack, so rely on the project's own conventions and Algolia's official client for its language. Do not invent APIs \u2014 keep to the documented search endpoint and its parameters."
+    ],
+    `Add the search UI at ${input.searchLocation ? `"${input.searchLocation}"` : "the best shared, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working search input and results list against the target index.`,
     `Read the index name from the ${searchIndexVar(input.language)} env var, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or component name.`,
+    "Read the App ID, the search-only API key, and the index name from env vars; never hardcode them. A search-only key is safe to expose client-side.",
     // The key is provisioned only after verification passes, so the agent never
     // sees one. It must also leave .env alone: the wizard reads that file to
     // decide whether a key already exists, and an agent-invented value there
@@ -4039,9 +4155,8 @@ function searchInstructions(input) {
     // Not the agent's to rename: the wizard writes these exact names into
     // ".env" right after this step, so a renamed prefix would leave the code
     // reading a var the wizard never wrote.
-    `Use exactly these public env var names in the code: ${input.searchEnvVars.map(({ name }) => name).join(", ")}.`,
-    "Read the App ID, the search-only API key, and the index name from public env vars; never hardcode them. A search-only key is safe to expose client-side.",
-    'Add any Algolia/InstantSearch packages you import to package.json "dependencies" with a valid version range; the wizard installs them in the worktree after you finish.',
+    `Use exactly these env var names in the code: ${input.searchEnvVars.map(({ name }) => name).join(", ")}.`,
+    "Install any Algolia packages you import with the project's own package manager via runShell, and declare them in the project's dependency manifest.",
     "The summary should be extremely concise; do not mention env var setup or manual testing steps \u2014 the wizard writes the resolved credentials to .env and reports that separately."
   ];
 }
@@ -4049,11 +4164,12 @@ function verificationInstructions(input) {
   return [
     "Verify the Algolia implementation changes in the current worktree.",
     `Verification tools found in the codebase: ${JSON.stringify(input.findings.verification ?? [])}.`,
-    "Call verifyImplementation at least once; it runs every repo-defined lint/typecheck/check script and returns per-check results plus an aggregate ok.",
-    "For issues caused by the implementation, make minimal fixes with writeFile and re-run verifyImplementation.",
-    "Do not make speculative fixes when verifyImplementation cannot run, no checks exist, or failures are unrelated to these changes \u2014 note the limitation in your summary.",
+    "Run the project's own checks (lint, type check, tests) via runShell, using the commands the project actually defines \u2014 its task runner, manifest scripts, or Makefile. Run every check that applies, not just the first.",
+    "This worktree starts with no installed dependencies. If a check fails because packages or modules are missing, install the dependencies via runShell and re-run it rather than changing the code.",
+    "For issues caused by the implementation, make minimal fixes with writeFile and re-run the checks.",
+    "Do not make speculative fixes when no checks exist, a check cannot run, or failures are unrelated to these changes \u2014 note the limitation in your summary.",
     "Do not add new Algolia functionality here; only validate and make minimal correctness fixes.",
-    `Do not modify "${input.ingestDir}/" unless verifyImplementation reports an actionable issue in its files.`,
+    `Do not modify "${input.ingestDir}/" unless a check reports an actionable issue in its files.`,
     "Always call reportStatus with status=success once verification has run, even when sufficient=false.",
     "Set sufficient=true only when the implementation is complete and checks pass (or fail for a clearly unrelated reason).",
     "Set sufficient=false when the implementation is incomplete or has implementation-caused failures; include concrete additionalInstructions for the next pass."
@@ -4074,14 +4190,15 @@ var IMPLEMENT_CONFIG = {
   }
 };
 var useCaseToolMap = {
-  ingestion: [...FS_READ_TOOLS, "writeFile", "writeCredentials", "notifyUser"],
-  search: [...FS_READ_TOOLS, "writeFile", "notifyUser"],
-  verification: [
+  ingestion: [
     ...FS_READ_TOOLS,
     "writeFile",
-    "verifyImplementation",
+    "writeCredentials",
+    "runShell",
     "notifyUser"
-  ]
+  ],
+  search: [...FS_READ_TOOLS, "writeFile", "runShell", "notifyUser"],
+  verification: [...FS_READ_TOOLS, "writeFile", "runShell", "notifyUser"]
 };
 function toolsForUseCase(useCase, ingestionSource) {
   const tools = useCaseToolMap[useCase];
@@ -4104,15 +4221,30 @@ function formatSummary(useCase, summary) {
   const label = useCase === "ingestion" ? "Ingestion" : useCase === "search" ? "Search" : "Verification";
   return `${label}: ${summary}`;
 }
-function buildIngestCommand(worktree, runtime, entrypoint) {
-  return `cd ${shellQuote(worktree)} && ${runtime} ${shellQuote(entrypoint)}`;
-}
 function parseIngestRecordCount(output) {
   const match = output.match(/ALGOLIA_WIZARD_RECORD_COUNT=(\d+)/);
   if (!match) return void 0;
   const count = Number(match[1]);
   return Number.isFinite(count) ? count : void 0;
 }
+function ingestOutcome(executions, ingestCommand) {
+  const newestFirst = [...executions].reverse();
+  const withCount = newestFirst.filter(
+    (e) => parseIngestRecordCount(e.output ?? "") != null
+  );
+  const succeeded = newestFirst.filter((e) => e.approved && e.exitCode === 0);
+  return {
+    run: succeeded.find((e) => e.command === ingestCommand) ?? succeeded.find((e) => withCount.includes(e)),
+    recordCount: parseIngestRecordCount(withCount[0]?.output ?? "")
+  };
+}
+function makeToolContext(worktree, env = async () => ({})) {
+  return createToolContext(
+    DEFAULT_TOOL_LIMITS,
+    worktree,
+    createShellContext({ env, approve: storeApproval(worktree) })
+  );
+}
 function verificationRetryInstructions(verification) {
   return [
     `Implementation insufficient. Address these findings before reporting completion: ${verification.additionalInstructions ?? verification.summary}`
@@ -4191,9 +4323,13 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
   const confirmed2 = normalized.confirmedEntities;
   const searchLocation = normalized.searchImplementationAnalysis;
   let appId;
+  let ingestAppId;
   if (useCases.includes("search")) {
     appId = (await requireApplication()).id;
   }
+  if (useCases.includes("ingestion")) {
+    ingestAppId = appId ?? (await requireApplication()).id;
+  }
   const worktree = existingWorktreePath ?? (await createWorktree(repoRoot)).path;
   try {
     process.chdir(worktree);
@@ -4230,7 +4366,7 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
       ingestDir: INGEST_DIR,
       ingestionSource,
       uploadFilePath,
-      uiFramework: detectUiFramework(language)
+      searchUiTarget: searchUiTarget(language)
     };
     const summaries = [];
     if (uploadWarning) summaries.push(uploadWarning);
@@ -4253,41 +4389,31 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
     }
     let finalSearchEnvVars = input.searchEnvVars;
     let agentRuns = 0;
-    let ingestRuntime;
-    let ingestEntrypoint;
+    let ingestCommand;
     let ingestScriptRan = false;
     let ingestRecordCount;
     let ingestDurationMs;
-    let installFailed = false;
     let ingestOutcomeMessage;
+    const ingestKeyAppId = ingestAppId;
+    const ingestionTools = ingestKeyAppId ? makeToolContext(worktree, async () => ({
+      [APP_ID_VAR]: ingestKeyAppId,
+      [API_KEY_VAR]: (await resolveWriteKey(targetIndex, ingestKeyAppId)).key,
+      [INDEX_NAME_VAR]: targetIndex
+    })) : void 0;
+    const searchTools = makeToolContext(worktree);
     async function runImplementationUseCase(currentUseCase, extraInstructions = []) {
       if (agentRuns > 0) ctx.recordStepExecution();
       agentRuns += 1;
-      const result = await runAgent({
+      return runAgent({
         instructions: buildAgentInstructions(
           currentUseCase,
           input,
           extraInstructions
         ),
         tools: toolsForUseCase(currentUseCase, input.ingestionSource),
-        outputSchema: implementationOutputSchema
+        outputSchema: implementationOutputSchema,
+        toolContext: currentUseCase === "ingestion" ? ingestionTools ?? searchTools : searchTools
       });
-      ctx.notify({
-        messages: [`Installing dependencies for ${currentUseCase}\u2026`]
-      });
-      const installLogId = ctx.logStart("installWorktreeDeps", {
-        useCase: currentUseCase
-      });
-      const install = await installWorktreeDeps(worktree);
-      ctx.logEnd(installLogId, install.ok ? "success" : "error");
-      if (!install.ok) {
-        installFailed = true;
-        logger.warn(
-          { useCase: currentUseCase, output: install.output },
-          "implement: dependency install in worktree failed; generated commands may not run until deps are installed"
-        );
-      }
-      return result;
     }
     async function runVerificationUseCase() {
       if (agentRuns > 0) ctx.recordStepExecution();
@@ -4295,111 +4421,55 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
       return runAgent({
         instructions: buildAgentInstructions("verification", input),
         tools: toolsForUseCase("verification"),
-        outputSchema: verificationOutputSchema
+        outputSchema: verificationOutputSchema,
+        toolContext: searchTools
       });
     }
     if (useCases.includes("ingestion")) {
-      const { summary, runtime, entrypoint } = await runImplementationUseCase("ingestion");
-      summaries.push(formatSummary("ingestion", summary));
-      ingestRuntime = runtime;
-      ingestEntrypoint = entrypoint;
-      if (ingestRuntime && ingestEntrypoint && !installFailed) {
-        ctx.clearNotices();
-        const runNow = await ctx.requestUserInput({
-          prompt: `Run the ingestion script now? This writes records to the "${targetIndex}" index.`,
-          promptType: "acceptReject",
-          options: ["Yes", "No"],
-          messages: []
-        }) === true;
-        if (runNow) {
-          const ingestApp = await requireApplication();
-          const writeKey = (await resolveWriteKey(targetIndex, ingestApp.id)).key;
-          ctx.notify({ messages: [`Writing records to "${targetIndex}"\u2026`] });
-          const scriptLogId = ctx.logStart("runIngestScript", {
-            runtime: ingestRuntime,
-            entrypoint: ingestEntrypoint
+      const result = await runImplementationUseCase("ingestion");
+      summaries.push(formatSummary("ingestion", result.summary));
+      ingestCommand = result.ingestCommand;
+      const executions = (ingestionTools ?? searchTools).shell.executions;
+      const { run: ingestRun, recordCount } = ingestOutcome(
+        executions,
+        ingestCommand
+      );
+      ingestScriptRan = ingestRun != null;
+      ingestRecordCount = recordCount;
+      ingestDurationMs = ingestRun?.durationMs;
+      if (ingestScriptRan) {
+        ingestOutcomeMessage = `\u2705 Ingestion succeeded${ingestRecordCount != null ? ` \u2014 ${ingestRecordCount} record(s) indexed.` : "."}`;
+        if (ingestRecordCount != null) {
+          track("AI Wizard Ingest Successful", {
+            entity_name: confirmed2?.map((e) => e.name).join(", ") || "unknown",
+            record_count: ingestRecordCount,
+            duration_ms: ingestDurationMs ?? 0
           });
-          const startedAt = Date.now();
-          const run2 = await runIngestScript(
-            worktree,
-            ingestRuntime,
-            ingestEntrypoint,
-            {
-              [APP_ID_VAR]: ingestApp.id,
-              [API_KEY_VAR]: writeKey,
-              [INDEX_NAME_VAR]: targetIndex
-            }
-          );
-          ctx.logEnd(scriptLogId, run2.ok ? "success" : "error");
-          ingestScriptRan = run2.ran && run2.ok;
-          if (ingestScriptRan) {
-            ingestDurationMs = Date.now() - startedAt;
-            ingestRecordCount = parseIngestRecordCount(run2.output);
-            if (ingestRecordCount != null) {
-              track("AI Wizard Ingest Successful", {
-                entity_name: confirmed2?.map((e) => e.name).join(", ") || "unknown",
-                record_count: ingestRecordCount,
-                duration_ms: ingestDurationMs
-              });
-            }
-          }
-          let summaryLine;
-          let outcomeMessage;
-          if (!run2.ran) {
-            summaryLine = `\u26A0\uFE0F Skipped running the ingestion script: ${run2.reason}`;
-            outcomeMessage = `\u26A0\uFE0F The ingestion script did not run: ${run2.reason}`;
-            logger.warn(
-              {
-                runtime: ingestRuntime,
-                entrypoint: ingestEntrypoint,
-                reason: run2.reason
-              },
-              "implement: refused to auto-run ingestion script"
-            );
-            track("Error", {
-              step: "Push Data",
-              error: `ingestion script skipped: ${run2.reason}`,
-              product_area: "AI Wizard"
-            });
-          } else if (run2.ok) {
-            const status = "Ingestion run: succeeded.";
-            summaryLine = run2.output ? `${status}
-${run2.output}` : status;
-            outcomeMessage = `\u2705 Ingestion succeeded${ingestRecordCount != null ? ` \u2014 ${ingestRecordCount} record(s) indexed.` : "."}`;
-          } else {
-            const status = "\u26A0\uFE0F Ingestion run failed:";
-            summaryLine = run2.output ? `${status}
-${run2.output}` : status;
-            outcomeMessage = `\u274C Ingestion failed.${run2.output ? ` ${run2.output}` : ""}`;
-            logger.warn(
-              {
-                runtime: ingestRuntime,
-                entrypoint: ingestEntrypoint,
-                output: run2.output
-              },
-              "implement: ingestion script run failed"
-            );
-            track("Error", {
-              step: "Push Data",
-              error: run2.output || "ingestion script exited non-zero",
-              product_area: "AI Wizard"
-            });
-          }
-          summaries.push(summaryLine);
-          ingestOutcomeMessage = outcomeMessage;
         }
+      } else {
+        const rejected = executions.some((e) => !e.approved);
+        const reason = rejected ? "you declined to run it" : "no successful run was recorded";
+        ingestOutcomeMessage = `\u26A0\uFE0F Records were not indexed \u2014 ${reason}.${ingestCommand ? " Run the command below when you are ready." : ""}`;
+        summaries.push(`\u26A0\uFE0F The ingestion script did not run: ${reason}.`);
+        logger.warn(
+          { ingestCommand, rejected, commandsRun: executions.length },
+          "implement: ingestion script did not complete successfully"
+        );
+        track("Error", {
+          step: "Push Data",
+          error: `ingestion did not run: ${reason}`,
+          product_area: "AI Wizard"
+        });
       }
       const commandMessages = [`Open the worktree: cd ${shellQuote(worktree)}`];
-      if (ingestRuntime && ingestEntrypoint) {
-        commandMessages.push(
-          `Ingestion command: ${buildIngestCommand(worktree, ingestRuntime, ingestEntrypoint)}`
-        );
+      if (ingestCommand) {
+        commandMessages.push(`Ingestion command: ${ingestCommand}`);
       }
       await ctx.requestUserInput({
         prompt: "",
         promptType: "enterToContinue",
         options: [],
-        messages: ingestOutcomeMessage ? [ingestOutcomeMessage, ...commandMessages] : commandMessages
+        messages: [ingestOutcomeMessage, ...commandMessages]
       });
     }
     if (useCases.includes("search")) {
@@ -4516,22 +4586,13 @@ ${run2.output}` : status;
         "implement: agent reported success but no files changed in the worktree"
       );
     }
-    if (installFailed) {
-      summaries.push(
-        '\u26A0\uFE0F Dependency install in the worktree failed. Run your package manager install in the worktree before the command below, or it will fail with "Cannot find module".'
-      );
-    }
     return {
       ingestionSource,
       filesChanged,
       summary: summaries.join("\n\n"),
       worktreePath: worktree,
-      ...useCases.includes("ingestion") && ingestRuntime && ingestEntrypoint ? {
-        ingestCommand: buildIngestCommand(
-          worktree,
-          ingestRuntime,
-          ingestEntrypoint
-        ),
+      ...useCases.includes("ingestion") && ingestCommand ? {
+        ingestCommand,
         ingestScriptRan,
         ...ingestRecordCount != null ? { ingestRecordCount } : {},
         ...ingestDurationMs != null ? { ingestDurationMs } : {}
@@ -4579,8 +4640,8 @@ var defaultWorkflow = {
     defineStep({
       id: "select-index",
       title: "Set up index",
-      outputSchema: z27.object({
-        selection: z27.string()
+      outputSchema: z28.object({
+        selection: z28.string()
       }),
       run: (ctx) => selectIndexStep(ctx)
     }),
@@ -4822,7 +4883,10 @@ Options:
   --no-telemetry   Send no telemetry or analytics for this run.
   --reset-on-run   Wipe this project's wizard state (run state, AI consent,
                    worktrees) before starting, so the run behaves like a
-                   first-ever run. Algolia credentials are not touched.
+                   first-ever run. Also drops every API key the wizard has
+                   stored in your keychain, for this project and any other, so
+                   later runs create new ones. Your Algolia login is not
+                   touched.
   -h, --help       Print this message.`;
 function parseCliArgs(argv) {
   const positionals = [];
@@ -4859,11 +4923,11 @@ function parseCliArgs(argv) {
 
 // src/lib/resetState.ts
 import { readdir as readdir4, rm as rm2 } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { join as join10 } from "node:path";
 var KEEP = ["wizard.log"];
 async function resetProjectState() {
   const dir = stateDir();
-  forgetResolvedKeys();
+  await forgetResolvedKeys();
   let entries;
   try {
     entries = await readdir4(dir);
@@ -4873,14 +4937,14 @@ async function resetProjectState() {
   const targets = entries.filter((name) => !KEEP.includes(name));
   await Promise.all(
     targets.map(
-      (name) => rm2(join11(dir, name), { recursive: true, force: true })
+      (name) => rm2(join10(dir, name), { recursive: true, force: true })
     )
   );
   return { dir, removed: targets };
 }
 
 // src/main.tsx
-import { jsx as jsx14 } from "react/jsx-runtime";
+import { jsx as jsx15 } from "react/jsx-runtime";
 async function startup() {
   setProjectRoot(process.cwd());
   let args;
@@ -4930,7 +4994,7 @@ ${formatStepList(workflow)}`);
 }
 async function run(workflow) {
   const store = useWizard.getState();
-  const instance = render(/* @__PURE__ */ jsx14(App, {}), { incrementalRendering: true });
+  const instance = render(/* @__PURE__ */ jsx15(App, {}), { incrementalRendering: true });
   await store.waitForStart();
   let user = await getUser();
   if (!user) {