@algolia/wizard 0.9.0 → 0.11.0

package/dist/main.js

@@ -4,7 +4,7 @@
 import { render } from "ink";
 
 // src/ui/App.tsx
-import { Box as Box14, Text as Text14, useApp, useInput as useInput6, useWindowSize as useWindowSize7 } from "ink";
+import { Box as Box15, Text as Text15, useApp, useInput as useInput6, useWindowSize as useWindowSize8 } from "ink";
 
 // src/core/store.ts
 import { create } from "zustand";
@@ -12,32 +12,90 @@ import { nanoid } from "nanoid";
 
 // src/lib/algoliaCli.ts
 import { spawn } from "node:child_process";
-import { createRequire } from "node:module";
-var require2 = createRequire(import.meta.url);
-function algoliaCliEntry() {
-  return require2.resolve("@algolia/cli/bin/run.js");
+import { z } from "zod";
+function npxArgs(args) {
+  return ["--yes", "@algolia/cli@latest", ...args];
 }
-function runAlgoliaCli(args) {
+var shell = process.platform === "win32";
+function mask(text, secret) {
+  return secret ? text.replaceAll(secret, "***") : text;
+}
+function lineSplitter(emit) {
+  let buffer = "";
+  return {
+    push(chunk) {
+      buffer += chunk;
+      const lines = buffer.split("\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) emit(line.replace(/\r$/, ""));
+    },
+    flush() {
+      if (buffer) emit(buffer.replace(/\r$/, ""));
+      buffer = "";
+    }
+  };
+}
+var wizardSink = (stream, line) => {
+  if (!line.trim()) return;
+  useWizard.getState().pushCliOutput(stream, line);
+};
+var stderrSink = (stream, line) => {
+  if (stream === "stdout") return;
+  wizardSink(stream, line);
+};
+function runAlgoliaCli(args, { onOutput, redact } = {}) {
+  const store = useWizard.getState();
+  const command = mask(args.join(" "), redact);
+  const logId = store.logStart("tool", `algolia ${command}`);
   return new Promise((resolve4, reject) => {
-    const child = spawn(process.execPath, [algoliaCliEntry(), ...args]);
+    const child = spawn("npx", npxArgs(args), { shell });
     let stdout = "";
     let stderr = "";
-    child.stdout.on("data", (chunk) => stdout += chunk);
-    child.stderr.on("data", (chunk) => stderr += chunk);
+    const splitters = {
+      stdout: lineSplitter((line) => onOutput?.("stdout", line)),
+      stderr: lineSplitter((line) => onOutput?.("stderr", line))
+    };
+    child.stdout.on("data", (chunk) => {
+      const text = String(chunk);
+      stdout += text;
+      splitters.stdout.push(text);
+    });
+    child.stderr.on("data", (chunk) => {
+      const text = String(chunk);
+      stderr += text;
+      splitters.stderr.push(text);
+    });
     child.on("error", reject);
     child.on("close", (code) => {
+      splitters.stdout.flush();
+      splitters.stderr.flush();
       if (code === 0) {
         resolve4(stdout);
       } else {
-        const detail = stderr.trim() || stdout.trim();
+        const failed = stderr.trim();
+        let detail = "";
+        if (failed) {
+          detail = `: ${mask(failed, redact)}`;
+        } else if (stdout.trim()) {
+          detail = " (no stderr; stdout withheld \u2014 it may contain credentials)";
+        }
         reject(
           new Error(
-            `Algolia CLI \`${args.join(" ")}\` failed (exit ${code})${detail ? `: ${detail}` : ""}`
+            `Algolia CLI \`${command}\` failed (exit ${code})${detail}`
           )
         );
       }
     });
-  });
+  }).then(
+    (out) => {
+      useWizard.getState().logEnd(logId, "success");
+      return out;
+    },
+    (err) => {
+      useWizard.getState().logEnd(logId, "error");
+      throw err;
+    }
+  );
 }
 async function getUser() {
   let raw;
@@ -52,19 +110,23 @@ async function getUser() {
     return null;
   }
 }
-function runAuthLogin() {
-  return new Promise((resolve4, reject) => {
-    const child = spawn(
-      process.execPath,
-      [algoliaCliEntry(), "auth", "login", "--default"],
-      { stdio: "inherit" }
-    );
-    child.on("error", reject);
-    child.on("close", (code) => {
-      if (code === 0) resolve4();
-      else reject(new Error(`Algolia authentication failed (exit ${code}).`));
-    });
+var loginResultSchema = z.object({
+  success: z.boolean(),
+  email: z.string().optional()
+});
+async function runAuthLogin() {
+  const raw = await runAlgoliaCli(["auth", "login", "--non-interactive"], {
+    onOutput: stderrSink
   });
+  let parsed;
+  try {
+    parsed = loginResultSchema.safeParse(JSON.parse(raw));
+  } catch {
+    parsed = void 0;
+  }
+  if (parsed?.success && !parsed.data.success) {
+    throw new Error("Algolia sign-in did not report success.");
+  }
 }
 
 // src/lib/auth.ts
@@ -100,10 +162,14 @@ import { join, resolve } from "node:path";
 function rootDir() {
   return process.env.WIZARD_HOME ?? join(homedir(), ".algolia");
 }
-function projectSlug(cwd = process.cwd()) {
+var pinnedRoot;
+function setProjectRoot(cwd) {
+  pinnedRoot = resolve(cwd);
+}
+function projectSlug(cwd = pinnedRoot ?? process.cwd()) {
   return resolve(cwd).replace(/[/\\:]+/g, "-").replace(/^-+/, "") || "root";
 }
-function stateDir(cwd = process.cwd()) {
+function stateDir(cwd = pinnedRoot ?? process.cwd()) {
   return join(rootDir(), projectSlug(cwd));
 }
 
@@ -171,6 +237,7 @@ function describeInputValue(value) {
   return Array.isArray(value) ? value.join(", ") : value;
 }
 var NOTICE_INTERVAL_MS = 2e3;
+var CLI_OUTPUT_LIMIT = 200;
 var useWizard = create((set, get) => ({
   phase: "idle",
   homeScreen: "home",
@@ -182,22 +249,21 @@ var useWizard = create((set, get) => ({
   notices: [],
   _noticeQueue: [],
   _noticeTimer: null,
+  cliOutput: [],
+  targetIndex: null,
   logs: [],
   error: null,
   inputReq: null,
   _resolve: null,
-  // Advances past the welcome screen. Only meaningful from 'idle' — once the
-  // workflow is running there's nothing left to confirm.
-  // Reset `homeScreen` so preflight shows Welcome, not the Learn more sub-view.
+  // `endAuth` lands on 'preflight', not 'idle': sign-in happens after the
+  // welcome screen, so going back would gate the run a second time.
+  beginAuth: () => set({ phase: "authenticating", cliOutput: [] }),
+  endAuth: () => set((s) => s.phase === "authenticating" ? { phase: "preflight" } : {}),
   confirmStart: () => set(
     (s) => s.phase === "idle" ? { phase: "preflight", homeScreen: "home" } : {}
   ),
-  // Welcome sub-view navigation; leaves `phase` untouched so the workflow stays paused.
   openLearnMore: () => set({ homeScreen: "learnMore" }),
   backToHome: () => set({ homeScreen: "home" }),
-  // Resolves once the phase leaves 'idle', whether that happens before or
-  // after this is called (the welcome screen's enter handler is what
-  // drives the transition via `confirmStart`).
   waitForStart: () => new Promise((resolve4) => {
     if (get().phase !== "idle") {
       resolve4();
@@ -220,15 +286,19 @@ var useWizard = create((set, get) => ({
   syncSteps: (steps, currentStepIndex) => set({ steps, currentStepIndex }),
   setActiveStep: (index) => {
     get()._clearNoticeQueue();
-    set({ phase: "running", currentStepIndex: index, output: "", notices: [] });
+    set({
+      phase: "running",
+      currentStepIndex: index,
+      output: "",
+      notices: [],
+      cliOutput: []
+    });
   },
   setUser: (user) => set({ user }),
   appendToken: (text) => set((s) => ({ output: s.output + text })),
   clearOutput: () => set({ output: "" }),
-  // Renders the first notice of a burst immediately, then holds later
-  // arrivals in `_noticeQueue` and drains one per `NOTICE_INTERVAL_MS` —
-  // the timer stays armed through an empty drain so the cooldown always
-  // covers the time since the last render, even across bursts.
+  // The timer stays armed through an empty drain, so the spacing covers the
+  // time since the last render even across bursts.
   pushNotice: (notice) => {
     const { notices, _noticeQueue, _noticeTimer } = get();
     if (_noticeTimer === null) {
@@ -261,6 +331,13 @@ var useWizard = create((set, get) => ({
     get()._clearNoticeQueue();
     set({ notices: [] });
   },
+  pushCliOutput: (stream, text) => set((s) => ({
+    cliOutput: [...s.cliOutput, { id: nanoid(), stream, text }].slice(
+      -CLI_OUTPUT_LIMIT
+    )
+  })),
+  clearCliOutput: () => set({ cliOutput: [] }),
+  setTargetIndex: (index) => set({ targetIndex: index }),
   logStart: (kind, name, input) => {
     const id = nanoid();
     set((s) => ({
@@ -283,9 +360,6 @@ var useWizard = create((set, get) => ({
       _resolve: resolve4
     });
   }),
-  // Logs what the user picked — not the prompt text that was shown, which
-  // may repeat or duplicate on-screen content and isn't the useful signal
-  // here.
   submitInput: async (value) => {
     await markInteraction();
     get()._resolve?.(value);
@@ -305,6 +379,8 @@ var useWizard = create((set, get) => ({
       currentStepIndex: 0,
       output: "",
       notices: [],
+      cliOutput: [],
+      targetIndex: null,
       logs: [],
       error: null,
       inputReq: null,
@@ -313,16 +389,100 @@ var useWizard = create((set, get) => ({
   }
 }));
 
+// src/ui/CliOutput.tsx
+import { Box, Text, useWindowSize } from "ink";
+
+// src/ui/theme.ts
+var MARKER = {
+  pending: "\u25CB",
+  running: "\u25D0",
+  done: "\u2713",
+  error: "\u2716"
+};
+var BRAND = "#003DFF";
+var SECONDARY = "#5468FF";
+var DANGER = "#F86E7E";
+var COLORS = {
+  brand: BRAND,
+  primary: "#E6EDF3",
+  secondary: SECONDARY,
+  strong: "#FFFFFF",
+  muted: "#8B949E",
+  dim: "#484F58",
+  highlight: { bg: "#12331C", fg: "#4ADE80" },
+  badge: "#E3B341",
+  danger: DANGER,
+  success: "#4ADE80",
+  bg: {
+    main: "#0B0E14",
+    sidebar: "#14171E"
+  },
+  border: "#30363D",
+  accent: "#76A0FF",
+  status: {
+    pending: "gray",
+    running: "#76A0FF",
+    done: "#4ADE80",
+    error: DANGER
+  }
+};
+
+// src/ui/CliOutput.tsx
+import { jsxs } from "react/jsx-runtime";
+var CLI_MARKER = "\u203A";
+var RESERVED_ROWS = 16;
+var MAX_ROWS = 12;
+var PANEL_TEXT_WIDTH = 45;
+var URL_PATTERN = /https?:\/\//;
+function rowCost(text) {
+  return URL_PATTERN.test(text) ? Math.max(1, Math.ceil(text.length / PANEL_TEXT_WIDTH)) : 1;
+}
+function CliOutput() {
+  const cliOutput = useWizard((s) => s.cliOutput);
+  const { rows } = useWindowSize();
+  if (!cliOutput.length) return null;
+  const rowBudget = Math.min(Math.max(rows - RESERVED_ROWS, 3), MAX_ROWS);
+  const visible = [];
+  let usedRows = 0;
+  for (let i = cliOutput.length - 1; i >= 0; i--) {
+    const cost = rowCost(cliOutput[i].text);
+    if (usedRows + cost > rowBudget && visible.length > 0) break;
+    visible.unshift(cliOutput[i]);
+    usedRows += cost;
+  }
+  const hidden = cliOutput.length - visible.length;
+  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [
+    hidden > 0 && /* @__PURE__ */ jsxs(Text, { color: COLORS.dim, children: [
+      "\u2191 ",
+      hidden,
+      " earlier line(s)"
+    ] }),
+    visible.map((line) => /* @__PURE__ */ jsxs(
+      Text,
+      {
+        color: line.stream === "stderr" ? COLORS.muted : COLORS.dim,
+        wrap: URL_PATTERN.test(line.text) ? "wrap" : "truncate",
+        children: [
+          CLI_MARKER,
+          " ",
+          line.text
+        ]
+      },
+      line.id
+    ))
+  ] });
+}
+
 // src/ui/Notices.tsx
-import { Box as Box2, Text as Text2, useWindowSize as useWindowSize2 } from "ink";
+import { Box as Box3, Text as Text3, useWindowSize as useWindowSize3 } from "ink";
 import { useEffect as useEffect2, useState as useState2 } from "react";
 
 // src/ui/Table.tsx
-import { Box, Text, measureElement, useWindowSize } from "ink";
+import { Box as Box2, Text as Text2, measureElement, useWindowSize as useWindowSize2 } from "ink";
 import { useEffect, useRef, useState } from "react";
 import { jsx } from "react/jsx-runtime";
 function Table({ columns, rows }) {
-  const { columns: termCols } = useWindowSize();
+  const { columns: termCols } = useWindowSize2();
   const ref = useRef(null);
   const [width, setWidth] = useState(0);
   useEffect(() => {
@@ -330,7 +490,7 @@ function Table({ columns, rows }) {
   }, [termCols, columns, rows]);
   if (rows.length === 0) return null;
   const lines = formatTable(columns, rows, width || void 0);
-  return /* @__PURE__ */ jsx(Box, { flexDirection: "column", ref, children: lines.map((line, i) => /* @__PURE__ */ jsx(Text, { wrap: "truncate", children: line }, `tbl-${i}`)) });
+  return /* @__PURE__ */ jsx(Box2, { flexDirection: "column", ref, children: lines.map((line, i) => /* @__PURE__ */ jsx(Text2, { wrap: "truncate", children: line }, `tbl-${i}`)) });
 }
 function formatTable(columns, rows, width) {
   const natural = columns.map(
@@ -370,48 +530,13 @@ function resize(widths, budget) {
 }
 var truncate = (s, width) => s.length <= width ? s : width <= 1 ? s.slice(0, width) : `${s.slice(0, width - 1)}\u2026`;
 
-// src/ui/theme.ts
-var MARKER = {
-  pending: "\u25CB",
-  running: "\u25D0",
-  done: "\u2713",
-  error: "\u2716"
-};
-var BRAND = "#003DFF";
-var SECONDARY = "#5468FF";
-var DANGER = "#F86E7E";
-var COLORS = {
-  brand: BRAND,
-  primary: "#E6EDF3",
-  secondary: SECONDARY,
-  strong: "#FFFFFF",
-  muted: "#8B949E",
-  dim: "#484F58",
-  highlight: { bg: "#12331C", fg: "#4ADE80" },
-  badge: "#E3B341",
-  danger: DANGER,
-  success: "#4ADE80",
-  bg: {
-    main: "#0B0E14",
-    sidebar: "#14171E"
-  },
-  border: "#30363D",
-  accent: "#76A0FF",
-  status: {
-    pending: "gray",
-    running: "#76A0FF",
-    done: "#4ADE80",
-    error: DANGER
-  }
-};
-
 // src/ui/Notices.tsx
-import { jsx as jsx2, jsxs } from "react/jsx-runtime";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 var AGENT_MARKER = "\u2726";
-var RESERVED_ROWS = 14;
-var PANEL_TEXT_WIDTH = 45;
+var RESERVED_ROWS2 = 14;
+var PANEL_TEXT_WIDTH2 = 45;
 function messageLineCount(text) {
-  return Math.max(1, Math.ceil(text.length / PANEL_TEXT_WIDTH));
+  return Math.max(1, Math.ceil(text.length / PANEL_TEXT_WIDTH2));
 }
 function noticeLineCount(notice) {
   const messageLines = (notice.messages ?? []).reduce((sum, m) => {
@@ -422,7 +547,7 @@ function noticeLineCount(notice) {
   return messageLines + tableLines;
 }
 function fitVisibleNotices(notices, windowRows) {
-  const budget = Math.max(windowRows - RESERVED_ROWS, 3);
+  const budget = Math.max(windowRows - RESERVED_ROWS2, 3);
   let used = 0;
   let count = 0;
   for (let i = notices.length - 1; i >= 0; i--) {
@@ -455,7 +580,7 @@ function parseHex(hex) {
 }
 function Notices() {
   const notices = useWizard((s) => s.notices);
-  const { rows: windowRows } = useWindowSize2();
+  const { rows: windowRows } = useWindowSize3();
   const visible = fitVisibleNotices(notices, windowRows);
   const [pulseStep, setPulseStep] = useState2(0);
   useEffect2(() => {
@@ -472,14 +597,14 @@ function Notices() {
   }, []);
   if (!visible.length) return null;
   const pulseColor = PULSE_COLORS[pulseStep];
-  return /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", gap: 1, marginBottom: 1, children: visible.map((notice, i) => {
+  return /* @__PURE__ */ jsx2(Box3, { flexDirection: "column", gap: 1, marginBottom: 1, children: visible.map((notice, i) => {
     const isLatest = i === visible.length - 1;
-    return /* @__PURE__ */ jsxs(Box2, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", children: [
       notice.messages?.map((m, j) => {
         const line = typeof m === "string" ? { text: m } : m;
         const prefix = j === 0 ? `${AGENT_MARKER} ` : "  ";
-        return /* @__PURE__ */ jsxs(
-          Text2,
+        return /* @__PURE__ */ jsxs2(
+          Text3,
           {
             color: isLatest && !line.color ? pulseColor : line.color ?? COLORS.dim,
             bold: line.bold,
@@ -497,41 +622,41 @@ function Notices() {
 }
 
 // src/ui/PromptInput.tsx
-import { Box as Box6, Text as Text6, useInput as useInput2 } from "ink";
+import { Box as Box7, Text as Text7, useInput as useInput2 } from "ink";
 import TextInput from "ink-text-input";
 import { useState as useState5 } from "react";
 
 // src/ui/NextAction.tsx
-import { Box as Box3, Text as Text3 } from "ink";
-import { Fragment, jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
+import { Box as Box4, Text as Text4 } from "ink";
+import { Fragment, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 function NextAction({
   action,
   keyHint,
   hierarchy = "primary"
 }) {
-  return /* @__PURE__ */ jsxs2(Box3, { flexDirection: "row", gap: 1, children: [
-    hierarchy === "primary" && /* @__PURE__ */ jsx3(Text3, { color: COLORS.success, bold: true, children: `> ${action}` }),
-    hierarchy === "secondary" && /* @__PURE__ */ jsxs2(Fragment, { children: [
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.success, bold: true, children: `>` }),
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.primary, bold: true, children: action })
+  return /* @__PURE__ */ jsxs3(Box4, { flexDirection: "row", gap: 1, children: [
+    hierarchy === "primary" && /* @__PURE__ */ jsx3(Text4, { color: COLORS.success, bold: true, children: `> ${action}` }),
+    hierarchy === "secondary" && /* @__PURE__ */ jsxs3(Fragment, { children: [
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.success, bold: true, children: `>` }),
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.primary, bold: true, children: action })
     ] }),
-    /* @__PURE__ */ jsxs2(Box3, { children: [
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.muted, children: "press " }),
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.muted, children: `[` }),
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.primary, children: keyHint }),
-      /* @__PURE__ */ jsx3(Text3, { color: COLORS.muted, children: `]` })
+    /* @__PURE__ */ jsxs3(Box4, { children: [
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.muted, children: "press " }),
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.muted, children: `[` }),
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.primary, children: keyHint }),
+      /* @__PURE__ */ jsx3(Text4, { color: COLORS.muted, children: `]` })
     ] })
   ] });
 }
 
 // src/ui/SelectPrompt.tsx
-import { Box as Box5, Text as Text5, useInput, useWindowSize as useWindowSize4 } from "ink";
+import { Box as Box6, Text as Text6, useInput, useWindowSize as useWindowSize5 } from "ink";
 import { useLayoutEffect as useLayoutEffect2, useRef as useRef3, useState as useState4 } from "react";
 
 // src/ui/ScrollView.tsx
-import { Box as Box4, Text as Text4, measureElement as measureElement2, useWindowSize as useWindowSize3 } from "ink";
+import { Box as Box5, Text as Text5, measureElement as measureElement2, useWindowSize as useWindowSize4 } from "ink";
 import { useCallback, useLayoutEffect, useRef as useRef2, useState as useState3 } from "react";
-import { jsxs as jsxs3 } from "react/jsx-runtime";
+import { jsxs as jsxs4 } from "react/jsx-runtime";
 var INDICATOR_ROWS = 2;
 function fittedWidth(node, columns) {
   let left = 0;
@@ -546,7 +671,7 @@ function useScrollWindow({
   followBottom = false
 }) {
   const viewportRef = useRef2(null);
-  const { columns } = useWindowSize3();
+  const { columns } = useWindowSize4();
   const [size, setSize] = useState3(
     null
   );
@@ -601,14 +726,14 @@ function useScrollWindow({
   };
 }
 function ScrollView({ scroll, children }) {
-  return /* @__PURE__ */ jsxs3(Box4, { ref: scroll.viewportRef, flexDirection: "column", flexGrow: 1, children: [
-    scroll.hiddenAbove > 0 && /* @__PURE__ */ jsxs3(Text4, { color: COLORS.dim, children: [
+  return /* @__PURE__ */ jsxs4(Box5, { ref: scroll.viewportRef, flexDirection: "column", flexGrow: 1, children: [
+    scroll.hiddenAbove > 0 && /* @__PURE__ */ jsxs4(Text5, { color: COLORS.dim, children: [
       "\u2191 ",
       scroll.hiddenAbove,
       " more"
     ] }),
     children,
-    scroll.hiddenBelow > 0 && /* @__PURE__ */ jsxs3(Text4, { color: COLORS.dim, children: [
+    scroll.hiddenBelow > 0 && /* @__PURE__ */ jsxs4(Text5, { color: COLORS.dim, children: [
       "\u2193 ",
       scroll.hiddenBelow,
       " more"
@@ -617,7 +742,7 @@ function ScrollView({ scroll, children }) {
 }
 
 // src/ui/SelectPrompt.tsx
-import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx4, jsxs as jsxs5 } from "react/jsx-runtime";
 var CANCEL = "cancel";
 var ARROW_WIDTH = 4;
 var COLUMN_GAP = 2;
@@ -648,7 +773,7 @@ function SelectPrompt({
   if (multi) hints.push({ key: "[space]", label: "select" });
   hints.push({ key: "[enter]", label: "confirm" });
   const containerRef = useRef3(null);
-  const { columns } = useWindowSize4();
+  const { columns } = useWindowSize5();
   const [width, setWidth] = useState4(columns);
   useLayoutEffect2(() => {
     if (!containerRef.current) return;
@@ -702,14 +827,14 @@ function SelectPrompt({
       }
     }
   });
-  return /* @__PURE__ */ jsx4(Box5, { ref: containerRef, flexGrow: 1, children: /* @__PURE__ */ jsxs4(Box5, { flexDirection: "column", gap: 1, width, children: [
-    /* @__PURE__ */ jsxs4(Box5, { flexDirection: "column", gap: 1, flexShrink: 0, children: [
-      error && /* @__PURE__ */ jsx4(Text5, { color: COLORS.danger, children: error }),
-      messages?.map((m, i) => /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, children: m }, `msg-${i}`)),
+  return /* @__PURE__ */ jsx4(Box6, { ref: containerRef, flexGrow: 1, children: /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", gap: 1, width, children: [
+    /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", gap: 1, flexShrink: 0, children: [
+      error && /* @__PURE__ */ jsx4(Text6, { color: COLORS.danger, children: error }),
+      messages?.map((m, i) => /* @__PURE__ */ jsx4(Text6, { color: COLORS.muted, children: m }, `msg-${i}`)),
       table && /* @__PURE__ */ jsx4(Table, { columns: table.columns, rows: table.rows }),
-      /* @__PURE__ */ jsxs4(Box5, { flexDirection: "column", children: [
-        question && /* @__PURE__ */ jsx4(Text5, { color: COLORS.muted, children: question }),
-        helpText && /* @__PURE__ */ jsx4(Text5, { color: COLORS.dim, children: helpText })
+      /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", children: [
+        question && /* @__PURE__ */ jsx4(Text6, { color: COLORS.muted, children: question }),
+        helpText && /* @__PURE__ */ jsx4(Text6, { color: COLORS.dim, children: helpText })
       ] })
     ] }),
     /* @__PURE__ */ jsx4(ScrollView, { scroll, children: visible.map((option, visibleIndex) => {
@@ -719,39 +844,39 @@ function SelectPrompt({
       const bullet = multi && !isCancel ? checked.has(i) ? "\u25CF " : "\u25CB " : "";
       const sec = isCancel ? void 0 : secondary?.[i];
       const labelColor = highlighted ? COLORS.highlight.fg : void 0;
-      const label = /* @__PURE__ */ jsxs4(Text5, { color: labelColor, wrap: "truncate", children: [
+      const label = /* @__PURE__ */ jsxs5(Text6, { color: labelColor, wrap: "truncate", children: [
         highlighted ? "\u276F   " : "    ",
         bullet,
         option
       ] });
       const isText = sec?.kind === "text";
-      return /* @__PURE__ */ jsxs4(
-        Box5,
+      return /* @__PURE__ */ jsxs5(
+        Box6,
         {
           width: isText ? "100%" : barWidth,
           paddingX: 1,
           paddingY: 1,
           backgroundColor: highlighted ? COLORS.highlight.bg : void 0,
           children: [
-            /* @__PURE__ */ jsx4(Box5, { width: isText ? labelWidth : barLabelWidth, children: label }),
-            isText && textWidth > 0 && /* @__PURE__ */ jsx4(Box5, { width: textWidth, children: /* @__PURE__ */ jsx4(
-              Text5,
+            /* @__PURE__ */ jsx4(Box6, { width: isText ? labelWidth : barLabelWidth, children: label }),
+            isText && textWidth > 0 && /* @__PURE__ */ jsx4(Box6, { width: textWidth, children: /* @__PURE__ */ jsx4(
+              Text6,
               {
                 wrap: "truncate",
                 color: highlighted ? COLORS.primary : COLORS.muted,
                 children: sec.value
               }
             ) }),
-            sec?.kind === "badge" && /* @__PURE__ */ jsx4(Box5, { width: badgeWidth, justifyContent: "flex-end", children: /* @__PURE__ */ jsx4(Text5, { color: COLORS.badge, wrap: "truncate", children: sec.value }) })
+            sec?.kind === "badge" && /* @__PURE__ */ jsx4(Box6, { width: badgeWidth, justifyContent: "flex-end", children: /* @__PURE__ */ jsx4(Text6, { color: COLORS.badge, wrap: "truncate", children: sec.value }) })
           ]
         },
         `row-${i}`
       );
     }) }),
-    /* @__PURE__ */ jsx4(Box5, { flexShrink: 0, children: /* @__PURE__ */ jsx4(Text5, { children: hints.map(({ key, label }, i) => /* @__PURE__ */ jsxs4(Text5, { children: [
+    /* @__PURE__ */ jsx4(Box6, { flexShrink: 0, children: /* @__PURE__ */ jsx4(Text6, { children: hints.map(({ key, label }, i) => /* @__PURE__ */ jsxs5(Text6, { children: [
       i > 0 ? "   " : "",
-      /* @__PURE__ */ jsx4(Text5, { color: COLORS.primary, children: key }),
-      /* @__PURE__ */ jsxs4(Text5, { color: COLORS.dim, children: [
+      /* @__PURE__ */ jsx4(Text6, { color: COLORS.primary, children: key }),
+      /* @__PURE__ */ jsxs5(Text6, { color: COLORS.dim, children: [
         " ",
         label
       ] })
@@ -760,7 +885,7 @@ function SelectPrompt({
 }
 
 // src/ui/PromptInput.tsx
-import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+import { jsx as jsx5, jsxs as jsxs6 } from "react/jsx-runtime";
 var ACCEPT_REJECT_OPTIONS = ["Accept", "Reject"];
 function EnterToContinuePrompt({
   question,
@@ -771,10 +896,10 @@ function EnterToContinuePrompt({
     if (key.return) onDecide(true);
     else if (key.escape) onDecide(false);
   });
-  return /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", gap: 1, children: [
-    messages?.map((m, i) => /* @__PURE__ */ jsx5(Text6, { color: COLORS.muted, children: m }, `msg-${i}`)),
-    question && /* @__PURE__ */ jsx5(Text6, { color: COLORS.primary, children: question }),
-    /* @__PURE__ */ jsxs5(Box6, { gap: 1, flexDirection: "column", children: [
+  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", gap: 1, children: [
+    messages?.map((m, i) => /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: m }, `msg-${i}`)),
+    question && /* @__PURE__ */ jsx5(Text7, { color: COLORS.primary, children: question }),
+    /* @__PURE__ */ jsxs6(Box7, { gap: 1, flexDirection: "column", children: [
       /* @__PURE__ */ jsx5(NextAction, { action: "continue", keyHint: "enter" }),
       /* @__PURE__ */ jsx5(NextAction, { action: "decline", keyHint: "esc", hierarchy: "secondary" })
     ] })
@@ -784,11 +909,11 @@ function PromptInput() {
   const { phase, inputReq, submitInput } = useWizard();
   const [draft, setDraft] = useState5("");
   if (phase === "done" || phase === "error") {
-    return /* @__PURE__ */ jsx5(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text6, { color: "gray", dimColor: true, children: "Press Enter or Esc to exit" }) });
+    return /* @__PURE__ */ jsx5(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text7, { color: "gray", dimColor: true, children: "Press Enter or Esc to exit" }) });
   }
   if (phase !== "awaitingInput" || !inputReq) return null;
   if (inputReq.promptType === "multipleChoice") {
-    return /* @__PURE__ */ jsx5(Box6, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -805,7 +930,7 @@ function PromptInput() {
     ) });
   }
   if (inputReq.promptType === "multiSelect") {
-    return /* @__PURE__ */ jsx5(Box6, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
       SelectPrompt,
       {
         multi: true,
@@ -820,7 +945,7 @@ function PromptInput() {
     ) });
   }
   if (inputReq.promptType === "notice") {
-    return /* @__PURE__ */ jsx5(Box6, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -842,7 +967,7 @@ function PromptInput() {
   }
   if (inputReq.promptType === "acceptReject") {
     const labels = inputReq.options?.length ? inputReq.options : ACCEPT_REJECT_OPTIONS;
-    return /* @__PURE__ */ jsx5(Box6, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
+    return /* @__PURE__ */ jsx5(Box7, { flexGrow: 1, children: /* @__PURE__ */ jsx5(
       SelectPrompt,
       {
         question: inputReq.prompt,
@@ -853,11 +978,11 @@ function PromptInput() {
       }
     ) });
   }
-  return /* @__PURE__ */ jsxs5(Box6, { flexDirection: "column", children: [
-    inputReq.error && /* @__PURE__ */ jsx5(Text6, { color: COLORS.danger, children: inputReq.error }),
-    inputReq.messages?.map((m, i) => /* @__PURE__ */ jsx5(Text6, { color: COLORS.muted, children: m }, `msg-${i}`)),
-    /* @__PURE__ */ jsxs5(Box6, { children: [
-      /* @__PURE__ */ jsxs5(Text6, { color: COLORS.primary, children: [
+  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", children: [
+    inputReq.error && /* @__PURE__ */ jsx5(Text7, { color: COLORS.danger, children: inputReq.error }),
+    inputReq.messages?.map((m, i) => /* @__PURE__ */ jsx5(Text7, { color: COLORS.muted, children: m }, `msg-${i}`)),
+    /* @__PURE__ */ jsxs6(Box7, { children: [
+      /* @__PURE__ */ jsxs6(Text7, { color: COLORS.primary, children: [
         inputReq.prompt,
         " "
       ] }),
@@ -879,7 +1004,7 @@ function PromptInput() {
 // src/ui/Welcome.tsx
 import { dirname as dirname2, join as join3 } from "node:path";
 import { fileURLToPath } from "node:url";
-import { Box as Box7, Spacer, Text as Text7, useInput as useInput3, useWindowSize as useWindowSize5 } from "ink";
+import { Box as Box8, Spacer, Text as Text8, useInput as useInput3, useWindowSize as useWindowSize6 } from "ink";
 
 // src/ui/copy/welcome.ts
 var sidebarItems = [
@@ -907,27 +1032,27 @@ var sidebarItems = [
 
 // src/ui/Welcome.tsx
 import Image, { InkPictureProvider } from "ink-picture";
-import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs7 } from "react/jsx-runtime";
 var IMAGE_PATH = join3(dirname2(fileURLToPath(import.meta.url)), "algolia.png");
 function SidebarItem({
   title,
   description
 }) {
-  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs6(Box7, { gap: 1, children: [
-      /* @__PURE__ */ jsx6(Text7, { color: COLORS.success, children: "\u2192" }),
-      /* @__PURE__ */ jsx6(Text7, { color: COLORS.strong, bold: true, children: title })
+  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs7(Box8, { gap: 1, children: [
+      /* @__PURE__ */ jsx6(Text8, { color: COLORS.success, children: "\u2192" }),
+      /* @__PURE__ */ jsx6(Text8, { color: COLORS.strong, bold: true, children: title })
     ] }),
-    /* @__PURE__ */ jsxs6(Box7, { flexDirection: "row", gap: 2, children: [
+    /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 2, children: [
       /* @__PURE__ */ jsx6(Spacer, {}),
-      /* @__PURE__ */ jsx6(Text7, { color: COLORS.muted, children: description })
+      /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: description })
     ] })
   ] });
 }
 function Welcome() {
   const confirmStart = useWizard((s) => s.confirmStart);
   const openLearnMore = useWizard((s) => s.openLearnMore);
-  const { rows } = useWindowSize5();
+  const { rows } = useWindowSize6();
   useInput3((input, key) => {
     if (key.return) confirmStart();
     else if (input === "i") openLearnMore();
@@ -946,15 +1071,15 @@ function Welcome() {
   if (rows < 30) {
     layout = scales["small"];
   }
-  return /* @__PURE__ */ jsxs6(Box7, { flexDirection: "row", justifyContent: "space-between", width: "100%", children: [
+  return /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", justifyContent: "space-between", width: "100%", children: [
     /* @__PURE__ */ jsx6(
-      Box7,
+      Box8,
       {
         paddingY: layout.main.padding.y,
         paddingX: layout.main.padding.x,
         flexDirection: "column",
         justifyContent: "center",
-        children: /* @__PURE__ */ jsxs6(Box7, { flexDirection: "column", gap: 2, children: [
+        children: /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", gap: 2, children: [
           /* @__PURE__ */ jsx6(InkPictureProvider, { children: /* @__PURE__ */ jsx6(
             Image,
             {
@@ -966,16 +1091,16 @@ function Welcome() {
               protocol: "halfBlock"
             }
           ) }),
-          /* @__PURE__ */ jsx6(Text7, { color: COLORS.muted, children: "\u2726 From zero \u2192 working search in ~10 minutes" }),
-          /* @__PURE__ */ jsxs6(Box7, { gap: 1, flexDirection: "column", children: [
+          /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: "\u2726 From zero \u2192 working search in ~10 minutes" }),
+          /* @__PURE__ */ jsxs7(Box8, { gap: 1, flexDirection: "column", children: [
             /* @__PURE__ */ jsx6(NextAction, { action: "start wizard", keyHint: "enter" }),
             /* @__PURE__ */ jsx6(NextAction, { action: "learn more", keyHint: "i", hierarchy: "secondary" })
           ] })
         ] })
       }
     ),
-    /* @__PURE__ */ jsxs6(
-      Box7,
+    /* @__PURE__ */ jsxs7(
+      Box8,
       {
         backgroundColor: COLORS.bg.sidebar,
         width: 40,
@@ -985,7 +1110,7 @@ function Welcome() {
         flexDirection: "column",
         justifyContent: "center",
         children: [
-          /* @__PURE__ */ jsx6(Text7, { color: COLORS.muted, children: "WHAT THIS WIZARD WILL DO" }),
+          /* @__PURE__ */ jsx6(Text8, { color: COLORS.muted, children: "WHAT THIS WIZARD WILL DO" }),
           sidebarItems.map((i, idx) => /* @__PURE__ */ jsx6(SidebarItem, { title: i.title, description: i.description }, idx))
         ]
       }
@@ -995,7 +1120,7 @@ function Welcome() {
 
 // src/ui/LearnMore.tsx
 import { Fragment as Fragment2 } from "react";
-import { Box as Box8, Text as Text8, useInput as useInput4, useWindowSize as useWindowSize6 } from "ink";
+import { Box as Box9, Text as Text9, useInput as useInput4, useWindowSize as useWindowSize7 } from "ink";
 
 // src/ui/copy/learn-more.ts
 var accessIntro = "Everything runs locally on your machine. Nothing is written or sent without an explicit yes from you.";
@@ -1032,7 +1157,7 @@ var policyLinks = [
 ];
 
 // src/ui/LearnMore.tsx
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { jsx as jsx7, jsxs as jsxs8 } from "react/jsx-runtime";
 var TAG_COLORS = {
   READ: COLORS.success,
   WRITE: COLORS.badge,
@@ -1048,25 +1173,25 @@ function NeverLine({
 }) {
   const used = segments.reduce((n, s) => n + s.text.length, 0);
   const rightPad = Math.max(0, width - 2 - NEVER_BOX_PAD_X - used);
-  return /* @__PURE__ */ jsxs7(Text8, { children: [
-    /* @__PURE__ */ jsx7(Text8, { color: COLORS.danger, children: "\u2502" }),
+  return /* @__PURE__ */ jsxs8(Text9, { children: [
+    /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: "\u2502" }),
     " ".repeat(NEVER_BOX_PAD_X),
-    segments.map((s, i) => /* @__PURE__ */ jsx7(Text8, { color: s.color, bold: s.bold, children: s.text }, i)),
+    segments.map((s, i) => /* @__PURE__ */ jsx7(Text9, { color: s.color, bold: s.bold, children: s.text }, i)),
     " ".repeat(rightPad),
-    /* @__PURE__ */ jsx7(Text8, { color: COLORS.danger, children: "\u2502" })
+    /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: "\u2502" })
   ] });
 }
 function LearnMore() {
   const confirmStart = useWizard((s) => s.confirmStart);
   const backToHome = useWizard((s) => s.backToHome);
-  const { columns } = useWindowSize6();
+  const { columns } = useWindowSize7();
   const dividerWidth = Math.max(0, columns - PADDING_X * 2);
   useInput4((_input, key) => {
     if (key.escape) backToHome();
     else if (key.return) confirmStart();
   });
-  return /* @__PURE__ */ jsxs7(
-    Box8,
+  return /* @__PURE__ */ jsxs8(
+    Box9,
     {
       flexDirection: "column",
       paddingX: PADDING_X,
@@ -1074,20 +1199,20 @@ function LearnMore() {
       width: "100%",
       gap: 1,
       children: [
-        /* @__PURE__ */ jsx7(Text8, { color: COLORS.strong, bold: true, children: "What algolia wizard accesses" }),
-        /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: accessIntro }),
-        /* @__PURE__ */ jsx7(Box8, { flexDirection: "column", children: accessItems.map((item) => /* @__PURE__ */ jsxs7(Box8, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx7(Text8, { color: COLORS.border, children: "\u2500".repeat(dividerWidth) }),
-          /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 1, marginTop: 1, children: [
-            /* @__PURE__ */ jsx7(Box8, { width: TAG_COLUMN_WIDTH, flexShrink: 0, children: /* @__PURE__ */ jsx7(Text8, { color: TAG_COLORS[item.tag], bold: true, children: `[${item.tag}]` }) }),
-            /* @__PURE__ */ jsx7(Box8, { flexDirection: "column", children: /* @__PURE__ */ jsxs7(Text8, { children: [
-              /* @__PURE__ */ jsx7(Text8, { color: COLORS.strong, bold: true, children: item.title }),
-              /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: ` \u2014 ${item.description}` })
+        /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: "What algolia wizard accesses" }),
+        /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: accessIntro }),
+        /* @__PURE__ */ jsx7(Box9, { flexDirection: "column", children: accessItems.map((item) => /* @__PURE__ */ jsxs8(Box9, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.border, children: "\u2500".repeat(dividerWidth) }),
+          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, marginTop: 1, children: [
+            /* @__PURE__ */ jsx7(Box9, { width: TAG_COLUMN_WIDTH, flexShrink: 0, children: /* @__PURE__ */ jsx7(Text9, { color: TAG_COLORS[item.tag], bold: true, children: `[${item.tag}]` }) }),
+            /* @__PURE__ */ jsx7(Box9, { flexDirection: "column", children: /* @__PURE__ */ jsxs8(Text9, { children: [
+              /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: item.title }),
+              /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: ` \u2014 ${item.description}` })
             ] }) })
           ] })
         ] }, item.tag)) }),
-        /* @__PURE__ */ jsxs7(Box8, { marginTop: 1, flexDirection: "column", children: [
-          /* @__PURE__ */ jsx7(Text8, { color: COLORS.danger, children: `\u256D${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256E` }),
+        /* @__PURE__ */ jsxs8(Box9, { marginTop: 1, flexDirection: "column", children: [
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: `\u256D${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256E` }),
           /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
           /* @__PURE__ */ jsx7(
             NeverLine,
@@ -1096,7 +1221,7 @@ function LearnMore() {
               segments: [{ text: "I NEVER", color: COLORS.danger, bold: true }]
             }
           ),
-          neverItems.map((item) => /* @__PURE__ */ jsxs7(Fragment2, { children: [
+          neverItems.map((item) => /* @__PURE__ */ jsxs8(Fragment2, { children: [
             /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
             /* @__PURE__ */ jsx7(
               NeverLine,
@@ -1111,23 +1236,23 @@ function LearnMore() {
             )
           ] }, item)),
           /* @__PURE__ */ jsx7(NeverLine, { width: dividerWidth }),
-          /* @__PURE__ */ jsx7(Text8, { color: COLORS.danger, children: `\u2570${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256F` })
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.danger, children: `\u2570${"\u2500".repeat(Math.max(0, dividerWidth - 2))}\u256F` })
         ] }),
-        /* @__PURE__ */ jsx7(Box8, { marginTop: 1, flexDirection: "column", children: policyLinks.map((link) => /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 1, children: [
-          /* @__PURE__ */ jsx7(Text8, { color: COLORS.strong, bold: true, children: `${link.label}:` }),
-          /* @__PURE__ */ jsx7(Text8, { color: COLORS.accent, children: link.url })
+        /* @__PURE__ */ jsx7(Box9, { marginTop: 1, flexDirection: "column", children: policyLinks.map((link) => /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.strong, bold: true, children: `${link.label}:` }),
+          /* @__PURE__ */ jsx7(Text9, { color: COLORS.accent, children: link.url })
         ] }, link.label)) }),
-        /* @__PURE__ */ jsxs7(Box8, { marginTop: 1, flexDirection: "row", gap: 3, children: [
-          /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 1, children: [
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: "[" }),
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.primary, children: "esc" }),
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: "] back" })
+        /* @__PURE__ */ jsxs8(Box9, { marginTop: 1, flexDirection: "row", gap: 3, children: [
+          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "[" }),
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.primary, children: "esc" }),
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "] back" })
           ] }),
-          /* @__PURE__ */ jsxs7(Box8, { flexDirection: "row", gap: 1, children: [
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: "[" }),
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.primary, children: "enter" }),
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.muted, children: "]" }),
-            /* @__PURE__ */ jsx7(Text8, { color: COLORS.success, bold: true, children: "start wizard" })
+          /* @__PURE__ */ jsxs8(Box9, { flexDirection: "row", gap: 1, children: [
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "[" }),
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.primary, children: "enter" }),
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.muted, children: "]" }),
+            /* @__PURE__ */ jsx7(Text9, { color: COLORS.success, bold: true, children: "start wizard" })
           ] })
         ] })
       ]
@@ -1136,10 +1261,10 @@ function LearnMore() {
 }
 
 // src/ui/Sidebar.tsx
-import { Box as Box11, Text as Text11 } from "ink";
+import { Box as Box12, Text as Text12 } from "ink";
 
 // src/ui/Steps.tsx
-import { Box as Box9, Text as Text9 } from "ink";
+import { Box as Box10, Text as Text10 } from "ink";
 import Spinner from "ink-spinner";
 
 // src/core/persistence.ts
@@ -1168,11 +1293,11 @@ async function clearWorkflowState(workflowId) {
 }
 
 // src/ui/Steps.tsx
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs9 } from "react/jsx-runtime";
 function Steps() {
   const { steps } = useWizard();
   const visibleSteps = steps.filter(isStepVisible);
-  return /* @__PURE__ */ jsx8(Box9, { flexDirection: "column", gap: 1, children: visibleSteps.map((s) => /* @__PURE__ */ jsx8(Box9, { flexDirection: "column", children: /* @__PURE__ */ jsxs8(Text9, { color: COLORS.status[s.status], children: [
+  return /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", gap: 1, children: visibleSteps.map((s) => /* @__PURE__ */ jsx8(Box10, { flexDirection: "column", children: /* @__PURE__ */ jsxs9(Text10, { color: COLORS.status[s.status], children: [
     s.status === "running" ? /* @__PURE__ */ jsx8(Spinner, { type: "dots" }) : MARKER[s.status],
     " ",
     s.title
@@ -1182,7 +1307,7 @@ function CurrentStep() {
   const { steps } = useWizard();
   const currentStep = steps.filter(isStepVisible).find((s) => s.status === "running");
   if (!currentStep) return null;
-  return /* @__PURE__ */ jsxs8(Text9, { color: COLORS.status.running, children: [
+  return /* @__PURE__ */ jsxs9(Text10, { color: COLORS.status.running, children: [
     /* @__PURE__ */ jsx8(Spinner, { type: "dots" }),
     " ",
     ` ${currentStep.title}`
@@ -1190,19 +1315,19 @@ function CurrentStep() {
 }
 
 // src/ui/Progress.tsx
-import { Box as Box10, Text as Text10 } from "ink";
-import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box11, Text as Text11 } from "ink";
+import { jsx as jsx9, jsxs as jsxs10 } from "react/jsx-runtime";
 function Progress() {
   const { steps, currentStepIndex } = useWizard();
   const visibleSteps = steps.filter(isStepVisible);
   if (visibleSteps.length === 0) return null;
   const visibleCountThroughCurrent = steps.slice(0, currentStepIndex + 1).filter(isStepVisible).length;
   const activeStepNumber = Math.max(1, visibleCountThroughCurrent);
-  return /* @__PURE__ */ jsxs9(Box10, { flexDirection: "row", gap: 1, children: [
-    /* @__PURE__ */ jsx9(Text10, { color: COLORS.muted, children: "STEP" }),
-    /* @__PURE__ */ jsx9(Text10, { bold: true, children: activeStepNumber }),
-    /* @__PURE__ */ jsx9(Text10, { bold: true, children: "/" }),
-    /* @__PURE__ */ jsx9(Text10, { bold: true, children: visibleSteps.length })
+  return /* @__PURE__ */ jsxs10(Box11, { flexDirection: "row", gap: 1, children: [
+    /* @__PURE__ */ jsx9(Text11, { color: COLORS.muted, children: "STEP" }),
+    /* @__PURE__ */ jsx9(Text11, { bold: true, children: activeStepNumber }),
+    /* @__PURE__ */ jsx9(Text11, { bold: true, children: "/" }),
+    /* @__PURE__ */ jsx9(Text11, { bold: true, children: visibleSteps.length })
   ] });
 }
 
@@ -1213,10 +1338,10 @@ var sidebarCommands = [
 ];
 
 // src/ui/Sidebar.tsx
-import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx10, jsxs as jsxs11 } from "react/jsx-runtime";
 function Sidebar() {
-  return /* @__PURE__ */ jsxs10(
-    Box11,
+  return /* @__PURE__ */ jsxs11(
+    Box12,
     {
       backgroundColor: "#14171E",
       width: 30,
@@ -1225,16 +1350,16 @@ function Sidebar() {
       flexDirection: "column",
       justifyContent: "space-between",
       children: [
-        /* @__PURE__ */ jsxs10(Box11, { flexDirection: "column", gap: 1, children: [
-          /* @__PURE__ */ jsx10(Text11, { color: COLORS.muted, children: "PROGRESS" }),
+        /* @__PURE__ */ jsxs11(Box12, { flexDirection: "column", gap: 1, children: [
+          /* @__PURE__ */ jsx10(Text12, { color: COLORS.muted, children: "PROGRESS" }),
           /* @__PURE__ */ jsx10(Steps, {})
         ] }),
-        /* @__PURE__ */ jsxs10(Box11, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs11(Box12, { flexDirection: "column", gap: 1, children: [
           /* @__PURE__ */ jsx10(Progress, {}),
-          /* @__PURE__ */ jsx10(Box11, { flexDirection: "column", children: sidebarCommands.map((c) => {
-            return /* @__PURE__ */ jsxs10(Box11, { flexDirection: "row", gap: 1, children: [
-              /* @__PURE__ */ jsx10(Text11, { color: COLORS.primary, children: `[${c.keyHint}]` }),
-              /* @__PURE__ */ jsx10(Text11, { color: COLORS.muted, children: c.description })
+          /* @__PURE__ */ jsx10(Box12, { flexDirection: "column", children: sidebarCommands.map((c) => {
+            return /* @__PURE__ */ jsxs11(Box12, { flexDirection: "row", gap: 1, children: [
+              /* @__PURE__ */ jsx10(Text12, { color: COLORS.primary, children: `[${c.keyHint}]` }),
+              /* @__PURE__ */ jsx10(Text12, { color: COLORS.muted, children: c.description })
             ] });
           }) })
         ] })
@@ -1244,12 +1369,12 @@ function Sidebar() {
 }
 
 // src/ui/Ribbon.tsx
-import { Box as Box12, Text as Text12 } from "ink";
-import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Box as Box13, Text as Text13 } from "ink";
+import { jsx as jsx11, jsxs as jsxs12 } from "react/jsx-runtime";
 function Ribbon() {
   const firstCommand = sidebarCommands[0];
-  return /* @__PURE__ */ jsxs11(
-    Box12,
+  return /* @__PURE__ */ jsxs12(
+    Box13,
     {
       backgroundColor: "#14171E",
       flexDirection: "row",
@@ -1259,9 +1384,9 @@ function Ribbon() {
       children: [
         /* @__PURE__ */ jsx11(Progress, {}),
         /* @__PURE__ */ jsx11(CurrentStep, {}),
-        /* @__PURE__ */ jsxs11(Box12, { flexDirection: "row", gap: 1, children: [
-          /* @__PURE__ */ jsx11(Text12, { color: COLORS.primary, children: `[${firstCommand.keyHint}]` }),
-          /* @__PURE__ */ jsx11(Text12, { color: COLORS.muted, children: firstCommand.description })
+        /* @__PURE__ */ jsxs12(Box13, { flexDirection: "row", gap: 1, children: [
+          /* @__PURE__ */ jsx11(Text13, { color: COLORS.primary, children: `[${firstCommand.keyHint}]` }),
+          /* @__PURE__ */ jsx11(Text13, { color: COLORS.muted, children: firstCommand.description })
         ] })
       ]
     }
@@ -1272,8 +1397,8 @@ function Ribbon() {
 import { useState as useState6 } from "react";
 
 // src/ui/Logs.tsx
-import { Box as Box13, Text as Text13, useInput as useInput5 } from "ink";
-import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
+import { Box as Box14, Text as Text14, useInput as useInput5 } from "ink";
+import { jsx as jsx12, jsxs as jsxs13 } from "react/jsx-runtime";
 var KIND_COLOR = {
   tool: COLORS.primary,
   prompt: COLORS.badge
@@ -1309,8 +1434,8 @@ function Logs() {
     else if (key.downArrow) scroll.scrollBy(1);
   });
   const visible = logs.slice(scroll.offset, scroll.offset + scroll.capacity);
-  return /* @__PURE__ */ jsxs12(Box13, { flexDirection: "column", paddingX: 4, paddingY: 2, flexGrow: 1, children: [
-    logs.length === 0 && /* @__PURE__ */ jsx12(Text13, { color: COLORS.dim, children: "No logs yet." }),
+  return /* @__PURE__ */ jsxs13(Box14, { flexDirection: "column", paddingX: 4, paddingY: 2, flexGrow: 1, children: [
+    logs.length === 0 && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: "No logs yet." }),
     /* @__PURE__ */ jsx12(ScrollView, { scroll, children: visible.map((entry) => {
       const timestamp = `[${formatTimestamp(entry.startedAt)}]`;
       const durationText = entry.kind === "tool" && entry.durationMs !== void 0 ? `${entry.durationMs}ms` : "";
@@ -1321,14 +1446,14 @@ function Logs() {
       const name = truncate2(entry.name, budget);
       budget -= name.length;
       const preview = rawPreview ? truncate2(rawPreview, budget) : "";
-      return /* @__PURE__ */ jsxs12(Box13, { flexDirection: "row", gap: ROW_GAP, children: [
-        /* @__PURE__ */ jsx12(Text13, { color: COLORS.dim, children: timestamp }),
-        /* @__PURE__ */ jsx12(Text13, { color: logNameColor(entry), wrap: "truncate", children: name }),
-        preview && /* @__PURE__ */ jsx12(Text13, { color: COLORS.dim, wrap: "truncate", children: preview }),
-        durationText && /* @__PURE__ */ jsx12(Text13, { color: COLORS.dim, children: durationText })
+      return /* @__PURE__ */ jsxs13(Box14, { flexDirection: "row", gap: ROW_GAP, children: [
+        /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: timestamp }),
+        /* @__PURE__ */ jsx12(Text14, { color: logNameColor(entry), wrap: "truncate", children: name }),
+        preview && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, wrap: "truncate", children: preview }),
+        durationText && /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: durationText })
       ] }, entry.id);
     }) }),
-    /* @__PURE__ */ jsx12(Text13, { color: COLORS.dim, children: "\u2191/\u2193 scroll" })
+    /* @__PURE__ */ jsx12(Text14, { color: COLORS.dim, children: "\u2191/\u2193 scroll" })
   ] });
 }
 
@@ -1520,11 +1645,11 @@ function track(event, payload) {
 }
 
 // src/ui/App.tsx
-import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
+import { jsx as jsx13, jsxs as jsxs14 } from "react/jsx-runtime";
 function App() {
   const { phase, error, homeScreen, currentStepIndex, steps, inputReq } = useWizard();
   const { exit } = useApp();
-  const { columns, rows } = useWindowSize7();
+  const { columns, rows } = useWindowSize8();
   const [showLogs, setShowLogs] = useState6(false);
   const finished = phase === "done" || phase === "error";
   const currentStep = steps[currentStepIndex];
@@ -1537,7 +1662,7 @@ function App() {
     { isActive: finished }
   );
   useInput6((_input, key) => {
-    if (phase === "idle" || phase === "preflight") return;
+    if (phase === "idle" || phase === "authenticating") return;
     if (key.tab) {
       setShowLogs(!showLogs);
       track("AI Wizard Interaction", {
@@ -1547,49 +1672,45 @@ function App() {
       });
     }
   });
-  const escOwnedElsewhere = phase === "idle" || phase === "awaitingInput" && inputReq?.promptType === "enterToContinue";
+  const escOwnedElsewhere = phase === "idle" || phase === "authenticating" || phase === "awaitingInput" && inputReq?.promptType === "enterToContinue";
   useInput6((_input, key) => {
     if (escOwnedElsewhere) return;
     if (key.escape) {
       track("AI Wizard Interaction", {
         context: "global",
         key: "esc",
-        // No step is active until `startWorkflow` — report the phase instead.
         currentStep: currentStep?.id ?? phase
       });
       exit();
     }
   });
-  const mainWindowVisible = phase === "running" || phase === "awaitingInput" || phase === "error" || phase === "done";
+  const mainWindowVisible = phase === "authenticating" || phase === "preflight" || phase === "running" || phase === "awaitingInput" || phase === "error" || phase === "done";
   const flexDirection = columns > 90 ? "row" : "column";
   const showSidebar = flexDirection === "row";
-  return /* @__PURE__ */ jsxs13(
-    Box14,
-    {
-      backgroundColor: COLORS.bg.main,
-      flexDirection: "row",
-      width: columns,
-      minHeight: rows,
-      children: [
-        mainWindowVisible && // Ink sizes the root by width only, so without a cap the scrolling
-        // lists in here grow to their content instead of windowing (see
-        // `useScrollWindow`). The home screens below stay uncapped: they are
-        // long static copy that would be clipped rather than windowed.
-        /* @__PURE__ */ jsxs13(
-          Box14,
-          {
-            flexDirection,
-            width: "100%",
-            maxHeight: rows,
-            justifyContent: "space-between",
-            children: [
-              showLogs ? /* @__PURE__ */ jsx13(Logs, {}) : (
-                /* Fill the space the sidebar/ribbon leaves — width beside the
-                   sidebar, height above the ribbon. The height matters even
-                   stacked: it is what the prompt's scrolling list measures itself
-                   against (see SelectPrompt). */
-                /* @__PURE__ */ jsxs13(
-                  Box14,
+  const scrollsPastViewport = phase === "idle" && homeScreen === "learnMore";
+  return (
+    /* Clamped to exactly the viewport: a taller frame makes Ink clear and repaint
+       the whole screen, and the scrolling throws off its cursor arithmetic —
+       flicker and leftover rows. */
+    /* @__PURE__ */ jsxs14(
+      Box15,
+      {
+        backgroundColor: COLORS.bg.main,
+        flexDirection: "row",
+        width: columns,
+        height: scrollsPastViewport ? void 0 : rows,
+        overflow: scrollsPastViewport ? "visible" : "hidden",
+        children: [
+          mainWindowVisible && /* @__PURE__ */ jsxs14(
+            Box15,
+            {
+              flexDirection,
+              width: "100%",
+              maxHeight: rows,
+              justifyContent: "space-between",
+              children: [
+                showLogs ? /* @__PURE__ */ jsx13(Logs, {}) : /* @__PURE__ */ jsxs14(
+                  Box15,
                   {
                     flexDirection: "column",
                     paddingX: 4,
@@ -1597,24 +1718,29 @@ function App() {
                     width: showSidebar ? 70 : "100%",
                     flexGrow: 1,
                     children: [
+                      phase === "authenticating" && /* @__PURE__ */ jsxs14(Box15, { flexDirection: "column", marginBottom: 1, children: [
+                        /* @__PURE__ */ jsx13(Text15, { color: COLORS.strong, bold: true, children: "Signing in to Algolia" }),
+                        /* @__PURE__ */ jsx13(Text15, { color: COLORS.muted, children: "A browser window will open \u2014 complete sign-in there." })
+                      ] }),
+                      /* @__PURE__ */ jsx13(CliOutput, {}),
                       /* @__PURE__ */ jsx13(Notices, {}),
                       /* @__PURE__ */ jsx13(PromptInput, {}),
-                      phase === "running" && showSidebar && /* @__PURE__ */ jsx13(Box14, { marginTop: 1, children: /* @__PURE__ */ jsx13(CurrentStep, {}) }),
-                      phase === "error" && error && /* @__PURE__ */ jsx13(Box14, { marginTop: 1, children: /* @__PURE__ */ jsxs13(Text14, { color: COLORS.status.error, children: [
+                      phase === "running" && showSidebar && /* @__PURE__ */ jsx13(Box15, { marginTop: 1, children: /* @__PURE__ */ jsx13(CurrentStep, {}) }),
+                      phase === "error" && error && /* @__PURE__ */ jsx13(Box15, { marginTop: 1, children: /* @__PURE__ */ jsxs14(Text15, { color: COLORS.status.error, children: [
                         "\u2716 ",
                         error
                       ] }) })
                     ]
                   }
-                )
-              ),
-              showSidebar ? /* @__PURE__ */ jsx13(Sidebar, {}) : /* @__PURE__ */ jsx13(Ribbon, {})
-            ]
-          }
-        ),
-        (phase === "idle" || phase === "preflight") && (homeScreen === "learnMore" ? /* @__PURE__ */ jsx13(LearnMore, {}) : /* @__PURE__ */ jsx13(Welcome, {}))
-      ]
-    }
+                ),
+                showSidebar ? /* @__PURE__ */ jsx13(Sidebar, {}) : /* @__PURE__ */ jsx13(Ribbon, {})
+              ]
+            }
+          ),
+          phase === "idle" && (homeScreen === "learnMore" ? /* @__PURE__ */ jsx13(LearnMore, {}) : /* @__PURE__ */ jsx13(Welcome, {}))
+        ]
+      }
+    )
   );
 }
 
@@ -1625,17 +1751,17 @@ import "zod";
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join5 } from "node:path";
 var configFile = () => join5(stateDir(), "config.json");
-var DEFAULT_CONFIG = {
+var defaultConfig = () => ({
   version: 1,
   aiConsent: false,
   workflowsRun: []
-};
+});
 async function loadConfig() {
   try {
     const raw = await readFile2(configFile(), "utf8");
-    return { ...DEFAULT_CONFIG, ...JSON.parse(raw) };
+    return { ...defaultConfig(), ...JSON.parse(raw) };
   } catch {
-    return { ...DEFAULT_CONFIG };
+    return defaultConfig();
   }
 }
 async function saveConfig(config) {
@@ -1850,61 +1976,212 @@ async function runWorkflow(workflow, appId) {
   }
 }
 
-// src/lib/algoliaProfile.ts
-import { readFile as readFile3 } from "node:fs/promises";
-import { createRequire as createRequire2 } from "node:module";
-import { homedir as homedir2 } from "node:os";
-import { join as join6 } from "node:path";
-import { parse as parseToml } from "toml";
-var require3 = createRequire2(import.meta.url);
-function configPath() {
-  const base = process.env.XDG_CONFIG_HOME || join6(homedir2(), ".config");
-  return join6(base, "algolia", "config.toml");
-}
-function profilesFromConfig(tomlText) {
-  let parsed;
+// src/lib/algoliaApp.ts
+import { z as z4 } from "zod";
+var applicationSchema = z4.object({
+  id: z4.string().min(1),
+  name: z4.string().default(""),
+  plan: z4.string().optional()
+});
+var listSchema = z4.array(
+  z4.object({
+    id: z4.string().min(1),
+    name: z4.string().default(""),
+    plan_label: z4.string().optional()
+  }).transform(({ id, name, plan_label }) => ({ id, name, plan: plan_label }))
+);
+async function currentApplication() {
+  let raw;
   try {
-    parsed = parseToml(tomlText);
+    raw = await runAlgoliaCli(["application", "current", "-o", "json"]);
   } catch {
-    return [];
+    return null;
+  }
+  const parsed = applicationSchema.safeParse(parseJson(raw));
+  return parsed.success ? parsed.data : null;
+}
+async function requireApplication() {
+  const app = await currentApplication();
+  if (!app) {
+    throw new Error(
+      "No Algolia application is selected. Run `npx @algolia/cli@latest application select` and restart the wizard."
+    );
+  }
+  return app;
+}
+async function listApplications() {
+  const raw = await runAlgoliaCli(["application", "list", "-o", "json"]);
+  const parsed = listSchema.safeParse(parseJson(raw));
+  if (!parsed.success) {
+    throw new Error("Could not read the list of Algolia applications.");
+  }
+  return parsed.data;
+}
+async function selectApplication(id) {
+  const raw = await runAlgoliaCli(
+    ["application", "select", "--non-interactive", "--app-id", id],
+    { onOutput: stderrSink }
+  );
+  const parsed = applicationSchema.safeParse(parseJson(raw));
+  if (!parsed.success) {
+    throw new Error(
+      `Selected application ${id}, but the Algolia CLI returned an unreadable result.`
+    );
   }
-  const profiles = Object.entries(parsed).filter(
-    ([, t]) => typeof t.application_id === "string" && typeof t.api_key === "string"
-  ).map(([name, t]) => ({
-    name,
-    appId: t.application_id,
-    apiKey: t.api_key,
-    isDefault: t.default === true
-  }));
-  profiles.sort((a, b) => Number(b.isDefault) - Number(a.isDefault));
-  return profiles.map(({ name, appId, apiKey }) => ({ name, appId, apiKey }));
-}
-async function loadActiveProfile() {
-  let profiles;
+  return parsed.data;
+}
+function parseJson(text) {
   try {
-    profiles = profilesFromConfig(await readFile3(configPath(), "utf8"));
+    return JSON.parse(text);
   } catch {
-    profiles = [];
+    return void 0;
   }
-  const profile = profiles[0];
-  if (!profile) {
+}
+
+// src/lib/envAppId.ts
+import { readFile as readFile3 } from "node:fs/promises";
+import { join as join6 } from "node:path";
+var ENV_FILES = [".env", ".env.local"];
+var APP_ID_LINE = /^[ \t]*(?:export[ \t]+)?([A-Z0-9_]*ALGOLIA_APP(?:LICATION)?_ID)[ \t]*=[ \t]*(.*)$/gm;
+async function findEnvApplicationId(root = process.cwd()) {
+  for (const file of ENV_FILES) {
+    let content;
+    try {
+      content = await readFile3(join6(root, file), "utf8");
+    } catch (err) {
+      if (err.code !== "ENOENT") {
+        logger.warn(
+          { file, err },
+          "could not read env file for an application id"
+        );
+      }
+      continue;
+    }
+    for (const [, name, raw] of content.matchAll(APP_ID_LINE)) {
+      const id = readValue(raw);
+      if (id) {
+        logger.info({ file, name, app: id }, "found an application id in env");
+        return { id, name, file };
+      }
+    }
+  }
+  return null;
+}
+function readValue(raw) {
+  const trimmed = raw.trim();
+  const quoted = trimmed.match(/^(['"])(.*)\1/);
+  const value = quoted ? quoted[2].trim() : trimmed.replace(/\s+#.*$/, "").trim();
+  return value.length > 0 && !value.startsWith("<") ? value : null;
+}
+
+// src/lib/algoliaAppPicker.ts
+function secondaryFor(app) {
+  return app.plan ? { kind: "badge", value: app.plan } : void 0;
+}
+function labelFor(app) {
+  return app.name.trim() ? `${app.name} \u2014 ${app.id}` : app.id;
+}
+function selectAndReport(app) {
+  useWizard.getState().pushCliOutput(
+    "stdout",
+    `Selecting ${labelFor(app)} \u2014 provisioning its API key\u2026`
+  );
+  return selectApplication(app.id);
+}
+async function promptForApplication(leadIn = []) {
+  const store = useWizard.getState();
+  const apps = await listApplications();
+  if (apps.length === 0) {
     throw new Error(
-      "No Algolia profile is configured. Run `npx @algolia/cli auth login` to authenticate."
+      "This Algolia account has no applications. Create one in the Algolia dashboard, or with `npx @algolia/cli@latest application create`, then restart the wizard."
+    );
+  }
+  if (apps.length === 1) {
+    const only = apps[0];
+    logger.info(
+      { app: only.id },
+      "single application on the account; selecting it"
+    );
+    for (const line of leadIn) store.pushCliOutput("stdout", line);
+    return selectAndReport(only);
+  }
+  const messages = [
+    ...leadIn,
+    "Which Algolia application should the wizard work in?"
+  ];
+  for (; ; ) {
+    const choice = await store.requestUserInput({
+      prompt: "Select an application",
+      promptType: "multipleChoice",
+      options: apps.map(labelFor),
+      secondary: apps.map(secondaryFor),
+      messages
+    });
+    const chosen = apps.find((app) => labelFor(app) === choice);
+    if (!chosen) {
+      throw new Error("Application picker received an unexpected selection");
+    }
+    try {
+      return await selectAndReport(chosen);
+    } catch (err) {
+      logger.warn(
+        { app: chosen.id, err: err.message },
+        "application select failed; re-prompting"
+      );
+      messages.push(
+        `Could not select \u201C${labelFor(chosen)}\u201D. It may have been removed \u2014 pick another.`
+      );
+    }
+  }
+}
+async function confirmEnvApplication(env, current) {
+  const useEnv = `Use ${env.id} (from ${env.file})`;
+  const choice = await useWizard.getState().requestUserInput({
+    prompt: "Select an application",
+    promptType: "multipleChoice",
+    options: [
+      useEnv,
+      current ? `Use ${labelFor(current)} (already selected)` : "Pick a different application"
+    ],
+    messages: [
+      `${env.file} already sets ${env.name}=${env.id}.`,
+      "Which Algolia application should the wizard work in?"
+    ]
+  });
+  return choice === useEnv;
+}
+async function selectEnvApplication(env) {
+  try {
+    return await selectAndReport({ id: env.id, name: "" });
+  } catch (err) {
+    logger.warn(
+      { app: env.id, err: err.message },
+      "could not select the application named in env; falling back to the picker"
     );
+    return promptForApplication([
+      `Could not select ${env.id} from ${env.file} \u2014 it may have been removed, or this account may not have access to it.`
+    ]);
   }
-  return profile;
+}
+async function ensureApplication() {
+  const current = await currentApplication();
+  const env = await findEnvApplicationId();
+  if (env && env.id !== current?.id && await confirmEnvApplication(env, current)) {
+    return selectEnvApplication(env);
+  }
+  return current ?? await promptForApplication();
 }
 
 // src/workflows/default.ts
-import { z as z25 } from "zod";
+import { z as z28 } from "zod";
 
 // src/actions/listIndices.ts
-import { z as z3 } from "zod";
-var indicesListSchema = z3.object({
-  items: z3.array(
-    z3.object({
-      name: z3.string(),
-      entries: z3.number().default(0)
+import { z as z5 } from "zod";
+var indicesListSchema = z5.object({
+  items: z5.array(
+    z5.object({
+      name: z5.string(),
+      entries: z5.number().default(0)
     })
   )
 });
@@ -1975,7 +2252,7 @@ import "zod";
 
 // src/lib/tools/listFiles.ts
 import { tool } from "ai";
-import z4 from "zod";
+import z6 from "zod";
 import { readdir } from "node:fs/promises";
 
 // src/lib/tools/path.ts
@@ -2011,15 +2288,15 @@ async function hasSymlinkParent(ctx, target) {
 function listFilesTool(ctx) {
   return tool({
     description: "List files in the current working directory",
-    inputSchema: z4.object(),
+    inputSchema: z6.object(),
     execute: async () => {
       logger.info("called listFiles tool");
       if (++ctx.counts.list > ctx.limits.list) {
         return `Refused: list limit (${ctx.limits.list}) reached. Stop listing and proceed with the information you already have.`;
       }
-      const resolved = resolveInRoot(ctx, ".");
-      if (!resolved.ok) return resolved.error;
-      const entries = await readdir(resolved.target, { withFileTypes: true });
+      const resolved2 = resolveInRoot(ctx, ".");
+      if (!resolved2.ok) return resolved2.error;
+      const entries = await readdir(resolved2.target, { withFileTypes: true });
       return entries.map((e) => e.isDirectory() ? `${e.name}/` : e.name).join("\n");
     }
   });
@@ -2027,24 +2304,24 @@ function listFilesTool(ctx) {
 
 // src/lib/tools/changeDirectory.ts
 import { tool as tool2 } from "ai";
-import z5 from "zod";
+import z7 from "zod";
 import { stat } from "node:fs/promises";
 function changeDirectoryTool(ctx) {
   return tool2({
     description: "Change the current working directory. Subsequent file operations resolve relative to it. Returns the new working directory.",
-    inputSchema: z5.object({
-      path: z5.string().describe("Directory to change into")
+    inputSchema: z7.object({
+      path: z7.string().describe("Directory to change into")
     }),
     execute: async ({ path }) => {
       logger.info({ path }, "called changeDirectory tool");
-      const resolved = resolveInRoot(ctx, path);
-      if (!resolved.ok) return resolved.error;
+      const resolved2 = resolveInRoot(ctx, path);
+      if (!resolved2.ok) return resolved2.error;
       try {
-        const info = await stat(resolved.target);
+        const info = await stat(resolved2.target);
         if (!info.isDirectory()) {
           return `Error changing directory to ${path}: not a directory`;
         }
-        ctx.cwd = resolved.target;
+        ctx.cwd = resolved2.target;
         return `Changed working directory to ${ctx.cwd}`;
       } catch (err) {
         return `Error changing directory to ${path}: ${err.message}`;
@@ -2055,13 +2332,13 @@ function changeDirectoryTool(ctx) {
 
 // src/lib/tools/reportStatus.ts
 import { tool as tool3 } from "ai";
-import z6 from "zod";
+import z8 from "zod";
 function reportStatusTool(output) {
   return tool3({
     description: "Report the status of your execution. Return a reason in case of failure.",
-    inputSchema: z6.object({
-      status: z6.enum(["success", "fail"]),
-      reason: z6.string().optional(),
+    inputSchema: z8.object({
+      status: z8.enum(["success", "fail"]),
+      reason: z8.string().optional(),
       output
     }),
     execute: async ({ status, reason, output: output2 }) => {
@@ -2073,7 +2350,7 @@ function reportStatusTool(output) {
 
 // src/lib/tools/readFile.ts
 import { tool as tool4 } from "ai";
-import z7 from "zod";
+import z9 from "zod";
 import { readFile as readFile4 } from "node:fs/promises";
 
 // src/lib/tools/env.ts
@@ -2101,19 +2378,19 @@ function redactEnvValues(content) {
 function readFileTool(ctx) {
   return tool4({
     description: "Read the contents of a file at the given path",
-    inputSchema: z7.object({
-      filePath: z7.string().describe("Path to the file to read")
+    inputSchema: z9.object({
+      filePath: z9.string().describe("Path to the file to read")
     }),
     execute: async ({ filePath }) => {
       if (++ctx.counts.read > ctx.limits.read) {
         return `Refused: read limit (${ctx.limits.read}) reached. Stop reading and proceed with the information you already have.`;
       }
       logger.info({ filePath }, "called readFile tool");
-      const resolved = resolveInRoot(ctx, filePath);
-      if (!resolved.ok) return resolved.error;
+      const resolved2 = resolveInRoot(ctx, filePath);
+      if (!resolved2.ok) return resolved2.error;
       try {
-        const content = await readFile4(resolved.target, "utf8");
-        return isEnvFile(resolved.target) ? redactEnvValues(content) : content;
+        const content = await readFile4(resolved2.target, "utf8");
+        return isEnvFile(resolved2.target) ? redactEnvValues(content) : content;
       } catch (err) {
         return `Error reading ${filePath}: ${err.message}`;
       }
@@ -2123,29 +2400,29 @@ function readFileTool(ctx) {
 
 // src/lib/tools/writeFile.ts
 import { tool as tool5 } from "ai";
-import z8 from "zod";
+import z10 from "zod";
 import { mkdir as mkdir3, writeFile as writeFile3 } from "node:fs/promises";
 import { dirname as dirname4 } from "node:path";
 function writeFileTool(ctx) {
   return tool5({
     description: "Write content to a file at the given path, overwriting it. To set Algolia credentials in an env file, use writeCredentials instead of this tool.",
-    inputSchema: z8.object({
-      filePath: z8.string().describe("Path to the file to write"),
-      content: z8.string().describe("Content to write to the file")
+    inputSchema: z10.object({
+      filePath: z10.string().describe("Path to the file to write"),
+      content: z10.string().describe("Content to write to the file")
     }),
     execute: async ({ filePath, content }) => {
       logger.info({ filePath }, "called writeFile tool");
-      const resolved = resolveInRoot(ctx, filePath);
-      if (resolved.ok === false) return resolved.error;
-      if (isSecretEnvFile(resolved.target)) {
+      const resolved2 = resolveInRoot(ctx, filePath);
+      if (resolved2.ok === false) return resolved2.error;
+      if (isSecretEnvFile(resolved2.target)) {
         return `Refused: ${filePath} holds secrets. Use the writeCredentials tool to set Algolia environment variables, passing this file path.`;
       }
       try {
-        if (await hasSymlinkParent(ctx, resolved.target)) {
-          return `Refused: ${resolved.target} is outside the repo root (${ctx.root}).`;
+        if (await hasSymlinkParent(ctx, resolved2.target)) {
+          return `Refused: ${resolved2.target} is outside the repo root (${ctx.root}).`;
         }
-        await mkdir3(dirname4(resolved.target), { recursive: true });
-        await writeFile3(resolved.target, content, "utf8");
+        await mkdir3(dirname4(resolved2.target), { recursive: true });
+        await writeFile3(resolved2.target, content, "utf8");
         return `Wrote to ${filePath}`;
       } catch (err) {
         return `Error writing ${filePath}: ${err.message}`;
@@ -2156,11 +2433,194 @@ function writeFileTool(ctx) {
 
 // src/lib/tools/writeAlgoliaCredentials.ts
 import { tool as tool6 } from "ai";
-import z9 from "zod";
+import z13 from "zod";
 import { mkdir as mkdir4, readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
 import { dirname as dirname5 } from "node:path";
+
+// src/lib/algoliaApiKey.ts
+import { z as z12 } from "zod";
+
+// src/lib/keychain.ts
+import { deletePassword, getPassword, setPassword } from "cross-keychain";
+import { z as z11 } from "zod";
+var SERVICE = "algolia-wizard";
+var ACCOUNT = "api-keys";
+var storedKeysSchema = z11.record(z11.string(), z11.string());
+function entryId(kind, index, appId) {
+  return `${kind}:${appId}:${index}`;
+}
+async function loadKeys() {
+  const raw = await getPassword(SERVICE, ACCOUNT);
+  if (!raw) return {};
+  let payload;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+    payload = null;
+  }
+  const keys = storedKeysSchema.safeParse(payload);
+  if (!keys.success) {
+    logger.warn("the stored API keys are unreadable; treating them as empty");
+    return {};
+  }
+  return keys.data;
+}
+var queue = Promise.resolve();
+function serialized(op) {
+  const next = queue.then(op);
+  queue = next.catch(() => {
+  });
+  return next;
+}
+async function readStoredKey(kind, index, appId) {
+  try {
+    return (await loadKeys())[entryId(kind, index, appId)] ?? null;
+  } catch (err) {
+    logger.warn(
+      { err: err.message, kind, index, appId },
+      "could not read the API key from the keychain"
+    );
+    return null;
+  }
+}
+function storeKey(kind, index, appId, value) {
+  return serialized(async () => {
+    const id = entryId(kind, index, appId);
+    try {
+      const keys = await loadKeys();
+      await setPassword(
+        SERVICE,
+        ACCOUNT,
+        JSON.stringify({ ...keys, [id]: value })
+      );
+      if ((await loadKeys())[id] !== value) {
+        throw new Error("the keychain did not store the value");
+      }
+    } catch (err) {
+      logger.warn(
+        { err: err.message, kind, index, appId },
+        "could not store the API key in the keychain; the next run will create another"
+      );
+    }
+  });
+}
+function deleteStoredKeys() {
+  return serialized(async () => {
+    try {
+      await deletePassword(SERVICE, ACCOUNT);
+    } catch (err) {
+      const message = err.message;
+      if (/not found/i.test(message)) return;
+      logger.warn(
+        { err: message },
+        "could not delete the API keys from the keychain"
+      );
+    }
+  });
+}
+
+// src/lib/algoliaApiKey.ts
+var WRITE_ACLS = [
+  "addObject",
+  "deleteObject",
+  "settings",
+  "editSettings",
+  "listIndexes"
+];
+var createdKeySchema = z12.object({
+  key: z12.string().min(1).optional(),
+  value: z12.string().min(1).optional()
+}).transform((o) => o.key ?? o.value);
+async function createKey(index, acls, description) {
+  logger.info({ index, acls }, "creating an API key");
+  const stdout = await runAlgoliaCli([
+    "apikeys",
+    "create",
+    "--acl",
+    acls.join(","),
+    "--indices",
+    index,
+    "--description",
+    description,
+    "-o",
+    "json"
+  ]);
+  let payload;
+  try {
+    payload = JSON.parse(stdout);
+  } catch {
+    throw new Error("apikeys create returned output that is not valid JSON");
+  }
+  const created = createdKeySchema.parse(payload);
+  if (!created) throw new Error("apikeys create returned no key value");
+  return created;
+}
+async function keyExists(key) {
+  try {
+    await runAlgoliaCli(["apikeys", "get", key, "-o", "json"], { redact: key });
+    return true;
+  } catch (err) {
+    return !/does not exist/i.test(err.message);
+  }
+}
+var resolved = /* @__PURE__ */ new Map();
+async function forgetResolvedKeys() {
+  resolved.clear();
+  await deleteStoredKeys();
+}
+function resolveKey(kind, index, appId, acls, description) {
+  const cacheKey = `${kind}:${appId}:${index}`;
+  const cached = resolved.get(cacheKey);
+  if (cached) return cached;
+  const pending = provisionKey(kind, index, appId, acls, description).catch(
+    (err) => {
+      resolved.delete(cacheKey);
+      throw err;
+    }
+  );
+  resolved.set(cacheKey, pending);
+  return pending;
+}
+async function provisionKey(kind, index, appId, acls, description) {
+  const stored = await readStoredKey(kind, index, appId);
+  if (stored) {
+    if (await keyExists(stored)) {
+      logger.info({ kind, index, appId }, "reusing the stored API key");
+      return { key: stored, source: "keychain" };
+    }
+    logger.info(
+      { kind, index, appId },
+      "the stored API key no longer exists; creating another"
+    );
+  }
+  const key = await createKey(index, acls, description);
+  await storeKey(kind, index, appId, key);
+  return { key, source: "created" };
+}
+function resolveWriteKey(index, appId) {
+  return resolveKey(
+    "write",
+    index,
+    appId,
+    WRITE_ACLS,
+    `Algolia Wizard write key for ${index} index`
+  );
+}
+async function resolveSearchOnlyKey(index, appId, envKey) {
+  if (envKey) return { key: envKey, source: "env" };
+  return resolveKey(
+    "search",
+    index,
+    appId,
+    ["search"],
+    `Algolia Wizard search-only key for ${index} index`
+  );
+}
+
+// src/lib/tools/writeAlgoliaCredentials.ts
 var APP_ID_VAR = "ALGOLIA_APPLICATION_ID";
 var API_KEY_VAR = "ALGOLIA_WRITE_API_KEY";
+var INDEX_NAME_VAR = "ALGOLIA_INDEX_NAME";
 function appendEnv(content, entries) {
   const prefix = content.length > 0 && !content.endsWith("\n") ? "\n" : "";
   const lines = entries.map(([name, value]) => `${name}=${value}
@@ -2170,47 +2630,111 @@ function appendEnv(content, entries) {
 function hasEnv(content, name) {
   return new RegExp(`^(\\s*(?:export\\s+)?${name})\\s*=`, "m").test(content);
 }
+function readEnv(content, name) {
+  const found = content.match(
+    new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=\\s*(.*)$`, "m")
+  );
+  if (!found) return null;
+  const raw = found[1].trim();
+  const quoted = raw.match(/^(['"])(.*)\1/);
+  const value = quoted ? quoted[2] : raw.replace(/\s+#.*$/, "");
+  return value.length > 0 ? value : null;
+}
+function upsertEnv(content, name, value) {
+  if (!hasEnv(content, name)) return appendEnv(content, [[name, value]]);
+  return content.replace(
+    new RegExp(`^\\s*(?:export\\s+)?${name}\\s*=.*$`, "gm"),
+    () => `${name}=${value}`
+  );
+}
 function writeCredentialsTool(ctx) {
   return tool6({
-    description: `Write the active Algolia credentials (${APP_ID_VAR} and ${API_KEY_VAR}) into the given env file. The credentials are read from the local Algolia CLI profile; you only pass the path to the env file (e.g. ".env"). If the file already defines ${APP_ID_VAR} or ${API_KEY_VAR}, the write is skipped and existing values are left untouched.`,
-    inputSchema: z9.object({
-      filePath: z9.string().describe(
+    description: `Write the active Algolia credentials (${APP_ID_VAR} and ${API_KEY_VAR}) and the target index name (${INDEX_NAME_VAR}) into the given env file. The credentials come from the selected Algolia application, with a write key scoped to the target index; you only pass the path to the env file. ${INDEX_NAME_VAR} is always set to this run's target index, replacing any value already there. An ${APP_ID_VAR} or ${API_KEY_VAR} the file already gives a value is left untouched; a missing or blank one is filled in when it can be paired with the selected application.`,
+    inputSchema: z13.object({
+      filePath: z13.string().describe(
         'Path to the env file to write credentials into (e.g. ".env")'
       )
     }),
     execute: async ({ filePath }) => {
       logger.info({ filePath }, "called writeCredentials tool");
-      const resolved = resolveInRoot(ctx, filePath);
-      if (resolved.ok === false) return resolved.error;
-      let profile;
-      try {
-        profile = await loadActiveProfile();
-      } catch {
-        return "Error: no Algolia profile is configured, so credentials cannot be written. Ask the user to authenticate with the Algolia CLI first.";
+      const resolved2 = resolveInRoot(ctx, filePath);
+      if (resolved2.ok === false) return resolved2.error;
+      const targetIndex = useWizard.getState().targetIndex;
+      if (!targetIndex) {
+        return "Error: no target index is set for this run, so a scoped write key cannot be provisioned.";
       }
+      let existing = "";
+      let present;
       try {
-        if (await hasSymlinkParent(ctx, resolved.target)) {
-          return `Refused: ${resolved.target} is outside the repo root (${ctx.root}).`;
+        if (await hasSymlinkParent(ctx, resolved2.target)) {
+          return `Refused: ${resolved2.target} is outside the repo root (${ctx.root}).`;
         }
-        let existing = "";
         try {
-          existing = await readFile5(resolved.target, "utf8");
+          existing = await readFile5(resolved2.target, "utf8");
         } catch (err) {
           if (err.code !== "ENOENT") throw err;
         }
-        const present = [APP_ID_VAR, API_KEY_VAR].filter(
-          (name) => hasEnv(existing, name)
+        present = [APP_ID_VAR, API_KEY_VAR].filter(
+          (name) => readEnv(existing, name) !== null
+        );
+      } catch (err) {
+        return `Error writing credentials to ${filePath}: ${err.message}`;
+      }
+      const credentials = [];
+      const notes = [];
+      const fileAppId = readEnv(existing, APP_ID_VAR);
+      const fileKey = readEnv(existing, API_KEY_VAR);
+      const fileIndex = readEnv(existing, INDEX_NAME_VAR);
+      if (fileAppId === null || fileKey === null) {
+        try {
+          const selected = (await requireApplication()).id;
+          if (fileAppId === null) credentials.push([APP_ID_VAR, selected]);
+          if (fileKey === null) {
+            if (fileAppId !== null && fileAppId !== selected) {
+              notes.push(
+                `No ${API_KEY_VAR} was provisioned: ${filePath} names application ${fileAppId}, but ${selected} is selected. Tell the user to remove ${APP_ID_VAR} from ${filePath} and re-run so a matching pair can be written, or to fill in a ${API_KEY_VAR} for ${fileAppId} by hand.`
+              );
+            } else {
+              credentials.push([
+                API_KEY_VAR,
+                (await resolveWriteKey(targetIndex, selected)).key
+              ]);
+            }
+          } else {
+            notes.push(
+              `The existing ${API_KEY_VAR} must belong to application ${selected} or writes will fail.`
+            );
+          }
+        } catch (err) {
+          return `Error: could not resolve Algolia credentials (${err.message}). Ask the user to authenticate with the Algolia CLI first.`;
+        }
+      }
+      try {
+        const updated = [
+          ...credentials,
+          // Unconditional, unlike the credentials: the write key is scoped to
+          // the run's index, so a stale name left in the file earns a 403.
+          [INDEX_NAME_VAR, targetIndex]
+        ].reduce(
+          (content, [name, value]) => upsertEnv(content, name, value),
+          existing
         );
+        await mkdir4(dirname5(resolved2.target), { recursive: true });
+        await writeFile4(resolved2.target, updated, "utf8");
+        const sentences = [
+          `Wrote ${[...credentials.map(([name]) => name), INDEX_NAME_VAR].join(", ")} to ${filePath}.`
+        ];
+        if (fileIndex !== null && fileIndex !== targetIndex) {
+          sentences.push(
+            `That replaced the ${INDEX_NAME_VAR} already there ("${fileIndex}"), which this run does not target.`
+          );
+        }
         if (present.length > 0) {
-          return `Skipped: ${filePath} already defines ${present.join(" and ")}. Leaving existing credentials untouched.`;
+          sentences.push(
+            `Skipped ${present.join(" and ")}: already defined there.`
+          );
         }
-        const envWithCredentials = appendEnv(existing, [
-          [APP_ID_VAR, profile.appId],
-          [API_KEY_VAR, profile.apiKey]
-        ]);
-        await mkdir4(dirname5(resolved.target), { recursive: true });
-        await writeFile4(resolved.target, envWithCredentials, "utf8");
-        return `Wrote Algolia credentials to ${filePath}`;
+        return [...sentences, ...notes].join(" ");
       } catch (err) {
         return `Error writing credentials to ${filePath}: ${err.message}`;
       }
@@ -2220,7 +2744,7 @@ function writeCredentialsTool(ctx) {
 
 // src/lib/tools/searchFiles.ts
 import { tool as tool7 } from "ai";
-import z10 from "zod";
+import z14 from "zod";
 import { readdir as readdir2, readFile as readFile6 } from "node:fs/promises";
 import { join as join8 } from "node:path";
 var MAX_QUERY_LENGTH = 1e3;
@@ -2238,9 +2762,9 @@ async function walkFiles(dir) {
 function searchFilesTool(ctx) {
   return tool7({
     description: "Search file contents for a JavaScript regular expression (RegExp syntax, not grep/PCRE). Returns matching lines as file:line:text.",
-    inputSchema: z10.object({
-      query: z10.string().describe("JavaScript RegExp pattern to search for"),
-      path: z10.string().optional().describe("Directory to search in (default: cwd)")
+    inputSchema: z14.object({
+      query: z14.string().describe("JavaScript RegExp pattern to search for"),
+      path: z14.string().optional().describe("Directory to search in (default: cwd)")
     }),
     execute: async ({ query, path = "." }) => {
       logger.info({ query, path }, "called searchFiles tool");
@@ -2250,8 +2774,8 @@ function searchFilesTool(ctx) {
       if (query.length > MAX_QUERY_LENGTH) {
         return `Refused: query exceeds ${MAX_QUERY_LENGTH} characters. Use a shorter pattern.`;
       }
-      const resolved = resolveInRoot(ctx, path);
-      if (!resolved.ok) return resolved.error;
+      const resolved2 = resolveInRoot(ctx, path);
+      if (!resolved2.ok) return resolved2.error;
       let re;
       try {
         re = new RegExp(query);
@@ -2259,7 +2783,7 @@ function searchFilesTool(ctx) {
         return `Invalid regex: ${err.message}`;
       }
       const matches = [];
-      for (const file of await walkFiles(resolved.target)) {
+      for (const file of await walkFiles(resolved2.target)) {
         let content;
         try {
           content = await readFile6(file, "utf8");
@@ -2284,7 +2808,7 @@ function searchFilesTool(ctx) {
 
 // src/lib/tools/verifyImplementation.ts
 import { tool as tool8 } from "ai";
-import z11 from "zod";
+import z15 from "zod";
 
 // src/lib/tools/utils/runCommand.ts
 import { spawn as spawn2 } from "node:child_process";
@@ -2364,7 +2888,7 @@ async function runRepoVerificationCheck() {
 function verifyImplementationTool() {
   return tool8({
     description: "Run the repo's mechanical verification check for generated implementation changes. Detects lint/typecheck/check from package.json and returns structured pass/fail evidence for the verifier to interpret.",
-    inputSchema: z11.object(),
+    inputSchema: z15.object(),
     execute: async () => {
       logger.info("called verifyImplementation tool");
       return runRepoVerificationCheck();
@@ -2378,7 +2902,7 @@ import { createAnthropic } from "@ai-sdk/anthropic";
 import { nanoid as nanoid2 } from "nanoid";
 import { mkdir as mkdir5, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname6 } from "node:path";
-import z12 from "zod";
+import z16 from "zod";
 var DATA_DIR = ".algolia-wizard/data";
 var RECORD_MODEL = "claude-haiku-4-5";
 var MAX_RECORDS = 100;
@@ -2390,17 +2914,17 @@ var anthropic = createAnthropic({
 function generateRecordTool(ctx) {
   return tool9({
     description: "Generate realistic sample records for an entity and write them to a JSON file in the worktree. Provide the entity name and its attributes; this tool asks a model to invent varied, realistic values, each with a unique objectID, and returns the file path to read them from at runtime. Do not invent the record values or objectIDs yourself, and do not inline the returned records into the script \u2014 call this tool and read the file it writes.",
-    inputSchema: z12.object({
-      entityName: z12.string().describe("Name of the entity to generate records for."),
-      attributes: z12.array(z12.string()).describe("Attribute names each record must contain."),
-      count: z12.number().int().min(1).max(MAX_RECORDS).default(10).describe(`How many records to generate (max ${MAX_RECORDS}).`),
-      hint: z12.string().optional().describe("Optional context to steer realistic values.")
+    inputSchema: z16.object({
+      entityName: z16.string().describe("Name of the entity to generate records for."),
+      attributes: z16.array(z16.string()).describe("Attribute names each record must contain."),
+      count: z16.number().int().min(1).max(MAX_RECORDS).default(10).describe(`How many records to generate (max ${MAX_RECORDS}).`),
+      hint: z16.string().optional().describe("Optional context to steer realistic values.")
     }),
     execute: async ({ entityName, attributes, count, hint }) => {
       logger.info({ entityName, count }, "called generateRecord tool");
       try {
-        const value = z12.union([z12.string(), z12.number(), z12.boolean(), z12.null()]);
-        const recordSchema = z12.object(
+        const value = z16.union([z16.string(), z16.number(), z16.boolean(), z16.null()]);
+        const recordSchema = z16.object(
           Object.fromEntries(attributes.map((attr) => [attr, value]))
         );
         const generateBatch = async (batchCount) => {
@@ -2410,8 +2934,8 @@ function generateRecordTool(ctx) {
               const { output } = await generateText({
                 model: anthropic(RECORD_MODEL),
                 output: Output.object({
-                  schema: z12.object({
-                    records: z12.array(recordSchema).length(batchCount)
+                  schema: z16.object({
+                    records: z16.array(recordSchema).length(batchCount)
                   })
                 }),
                 prompt: [
@@ -2447,13 +2971,13 @@ function generateRecordTool(ctx) {
         }));
         const slug = entityName.toLowerCase().replace(/[^a-z0-9]+/g, "-");
         const relPath = `${DATA_DIR}/${slug}.json`;
-        const resolved = resolveInRoot(ctx, relPath);
-        if (resolved.ok === false) return resolved.error;
-        if (await hasSymlinkParent(ctx, resolved.target)) {
-          return `Refused: ${resolved.target} is outside the repo root (${ctx.root}).`;
+        const resolved2 = resolveInRoot(ctx, relPath);
+        if (resolved2.ok === false) return resolved2.error;
+        if (await hasSymlinkParent(ctx, resolved2.target)) {
+          return `Refused: ${resolved2.target} is outside the repo root (${ctx.root}).`;
         }
-        await mkdir5(dirname6(resolved.target), { recursive: true });
-        await writeFile5(resolved.target, JSON.stringify(records, null, 2), "utf8");
+        await mkdir5(dirname6(resolved2.target), { recursive: true });
+        await writeFile5(resolved2.target, JSON.stringify(records, null, 2), "utf8");
         logger.info({ entityName, count: records.length, relPath }, "generateRecord wrote records to disk");
         return {
           filePath: relPath,
@@ -2469,12 +2993,12 @@ function generateRecordTool(ctx) {
 
 // src/lib/tools/notifyUser.ts
 import { tool as tool10 } from "ai";
-import z13 from "zod";
+import z17 from "zod";
 function notifyUserTool() {
   return tool10({
     description: `Give the user a brief, high-level update on what you are currently doing or about to do next. This is for the big picture (e.g. "Reading through your data models", "Writing the search UI") \u2014 not granular detail like individual tool calls, which are already logged separately. Call it when you start a new phase of work or your focus shifts, just not on every step, enough to keep the user engaged. Don't say things like "starting", just describe what you are doing. Don't mention tool calls themselves, just general direction of the work.`,
-    inputSchema: z13.object({
-      message: z13.string().describe(
+    inputSchema: z17.object({
+      message: z17.string().describe(
         "Short, plain-language description of what you are doing now."
       )
     }),
@@ -2654,10 +3178,10 @@ async function runAgent(req) {
 }
 
 // src/actions/detectLanguage.ts
-import z16 from "zod";
-var detectLanguageSchema = z16.object({
-  languages: z16.array(z16.object({ name: z16.string(), version: z16.string() })),
-  frameworks: z16.array(z16.object({ name: z16.string(), version: z16.string() }))
+import z20 from "zod";
+var detectLanguageSchema = z20.object({
+  languages: z20.array(z20.object({ name: z20.string(), version: z20.string() })),
+  frameworks: z20.array(z20.object({ name: z20.string(), version: z20.string() }))
 });
 var detectLanguage = () => runAgent({
   instructions: [
@@ -2675,31 +3199,31 @@ var detectLanguage = () => runAgent({
 });
 
 // src/actions/analyzeCodebase.ts
-import z17 from "zod";
+import z21 from "zod";
 var READONLY_TOOLS = [
   "listFiles",
   "changeDirectory",
   "readFile",
   "searchFiles"
 ];
-var ingestionAnalysisSchema = z17.object({
-  ingestionAnalysis: z17.array(
-    z17.object({
-      name: z17.string(),
-      paths: z17.array(z17.string()),
+var ingestionAnalysisSchema = z21.object({
+  ingestionAnalysis: z21.array(
+    z21.object({
+      name: z21.string(),
+      paths: z21.array(z21.string()),
       // indexable fields the agent found for this entity
-      attributes: z17.array(z17.string())
+      attributes: z21.array(z21.string())
     })
   )
 });
-var searchImplementationAnalysisSchema = z17.object({
-  searchImplementationAnalysis: z17.string()
+var searchImplementationAnalysisSchema = z21.object({
+  searchImplementationAnalysis: z21.string()
 });
-var verificationSchema = z17.object({
-  verification: z17.array(z17.string())
+var verificationSchema = z21.object({
+  verification: z21.array(z21.string())
 });
 var confirmedEntitiesFieldSchema = ingestionAnalysisSchema.shape.ingestionAnalysis.optional();
-var analyzeCodebaseSchema = z17.object({
+var analyzeCodebaseSchema = z21.object({
   ingestionAnalysis: ingestionAnalysisSchema.shape.ingestionAnalysis.optional(),
   searchImplementationAnalysis: searchImplementationAnalysisSchema.shape.searchImplementationAnalysis.optional(),
   verification: verificationSchema.shape.verification.optional(),
@@ -2761,7 +3285,7 @@ async function runAnalysis(mode, extraInstructions = []) {
 // package.json
 var package_default = {
   name: "@algolia/wizard",
-  version: "0.9.0",
+  version: "0.11.0",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {
@@ -2809,10 +3333,10 @@ var package_default = {
   dependencies: {
     "@ai-sdk/anthropic": "^3.0.81",
     "@ai-sdk/openai-compatible": "^2.0.47",
-    "@algolia/cli": "^5.11.0",
     "@hono/node-server": "^2.0.10",
     "@segment/analytics-node": "^3.1.0",
     ai: "^6.0.190",
+    "cross-keychain": "^1.1.0",
     dotenv: "^17.4.2",
     hono: "^4.12.27",
     ink: "^7.0.5",
@@ -2823,7 +3347,6 @@ var package_default = {
     nanoid: "^5.1.15",
     pino: "^10.3.1",
     react: "^19.2.7",
-    toml: "^4.1.1",
     varlock: "^1.5.1",
     zod: "^4.4.3",
     zustand: "^5.0.14"
@@ -2881,8 +3404,8 @@ async function askList(ctx, prompt, { required = false } = {}) {
 }
 
 // src/actions/confirmLanguage.ts
-import z19 from "zod";
-var confirmLanguageSchema = z19.object({
+import z23 from "zod";
+var confirmLanguageSchema = z23.object({
   languages: detectLanguageSchema.shape.languages
 });
 async function confirmLanguage(ctx) {
@@ -2903,8 +3426,8 @@ async function confirmLanguage(ctx) {
 }
 
 // src/actions/confirmFramework.ts
-import z20 from "zod";
-var confirmFrameworkSchema = z20.object({
+import z24 from "zod";
+var confirmFrameworkSchema = z24.object({
   frameworks: detectLanguageSchema.shape.frameworks
 });
 var CURATED_FRAMEWORKS = [
@@ -3032,8 +3555,8 @@ async function promptUser(ctx, params) {
 }
 
 // src/actions/confirmEntities.ts
-import z21 from "zod";
-var confirmEntitiesSchema = z21.object({
+import z25 from "zod";
+var confirmEntitiesSchema = z25.object({
   // Final detection — the focused re-run may supersede project-scan's.
   ingestionAnalysis: ingestionAnalysisSchema.shape.ingestionAnalysis.optional(),
   confirmedEntities: confirmedEntitiesFieldSchema
@@ -3103,15 +3626,15 @@ async function confirmEntities(ctx) {
 }
 
 // src/actions/review.ts
-import { z as z22 } from "zod";
-var reviewSchema = z22.object({
+import { z as z26 } from "zod";
+var reviewSchema = z26.object({
   // Broad, high-level takeaways grouped by theme (e.g. ingestion, search UI),
   // not one entry per workflow step — a step's raw output can be a long,
   // multi-paragraph blob (see implement.ts's summaries.join), and mirroring
   // that 1:1 is what made the old per-step summary an unreadable wall of text.
-  summaryPoints: z22.array(z22.string()),
-  reviewPrompt: z22.string(),
-  nextSteps: z22.array(z22.string())
+  summaryPoints: z26.array(z26.string()),
+  reviewPrompt: z26.string(),
+  nextSteps: z26.array(z26.string())
 });
 function formatCompletedSteps(steps) {
   if (!steps.length) return "(no prior steps completed)";
@@ -3162,7 +3685,7 @@ ${formatCompletedSteps(ctx.completedSteps)}`,
 };
 
 // src/actions/implement.ts
-import z24 from "zod";
+import z27 from "zod";
 
 // src/lib/worktree.ts
 import { execFile, spawn as spawn3 } from "node:child_process";
@@ -3366,6 +3889,23 @@ async function copyUploadIntoWorktree(repoRoot, worktreePath, ingestDir, sourceP
 function hasEnvVar(content, name) {
   return new RegExp(`^(\\s*(?:export\\s+)?${name})\\s*=`, "m").test(content);
 }
+async function readEnvVar(worktreePath, name) {
+  let content;
+  try {
+    content = await readFile8(join10(worktreePath, ".env"), "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+    return void 0;
+  }
+  const match = new RegExp(
+    `^[ \\t]*(?:export[ \\t]+)?${name}[ \\t]*=[ \\t]*(.*)$`,
+    "m"
+  ).exec(content);
+  if (!match) return void 0;
+  const value = match[1].trim().replace(/^(['"])(.*)\1$/, "$2").trim();
+  if (!value || value.startsWith("<")) return void 0;
+  return value;
+}
 async function writeSearchEnvValues(worktreePath, vars) {
   const target = join10(worktreePath, ".env");
   let existing = "";
@@ -3438,54 +3978,6 @@ async function confirmDirtyWorkingTree(ctx, repoRoot) {
   }
 }
 
-// src/lib/algoliaApiKey.ts
-import { z as z23 } from "zod";
-var SAFE_ACLS = /* @__PURE__ */ new Set(["search", "browse", "listIndexes"]);
-var apiKeySchema = z23.object({
-  value: z23.string().min(1),
-  acl: z23.array(z23.string()).default([]),
-  indexes: z23.array(z23.string()).default([])
-});
-var apiKeyListSchema = z23.object({
-  items: z23.array(apiKeySchema).optional(),
-  keys: z23.array(apiKeySchema).optional()
-}).transform((o) => o.items ?? o.keys ?? []);
-var createdKeySchema = z23.object({
-  key: z23.string().min(1).optional(),
-  value: z23.string().min(1).optional()
-});
-function canReuse(key, index) {
-  return key.acl.includes("search") && key.acl.every((acl) => SAFE_ACLS.has(acl)) && (key.indexes.length === 0 || key.indexes.includes("*") || key.indexes.includes(index));
-}
-async function createSearchKey(index) {
-  const stdout = await runAlgoliaCli([
-    "apikeys",
-    "create",
-    "--indices",
-    index,
-    "--acl",
-    "search,browse",
-    "--description",
-    `wizard search-only key for ${index}`,
-    "-o",
-    "json"
-  ]);
-  const { key, value } = createdKeySchema.parse(JSON.parse(stdout));
-  const created = key ?? value;
-  if (!created) throw new Error("apikeys create returned no key value");
-  return created;
-}
-async function resolveSearchOnlyKey(index) {
-  const stdout = await runAlgoliaCli(["apikeys", "list", "-o", "json"]);
-  const existing = apiKeyListSchema.parse(JSON.parse(stdout)).find((key) => canReuse(key, index))?.value;
-  if (existing) {
-    logger.info({ index }, "reusing existing search-only API key");
-    return existing;
-  }
-  logger.info({ index }, "no reusable search-only key found; creating one");
-  return createSearchKey(index);
-}
-
 // src/lib/algoliaDocs.ts
 import { readFileSync, readdirSync, existsSync as existsSync2 } from "node:fs";
 import { dirname as dirname8, join as join11 } from "node:path";
@@ -3552,50 +4044,34 @@ function shellQuote(value) {
 }
 
 // src/actions/implement.ts
-var implementSchema = z24.object({
-  filesChanged: z24.array(z24.string()),
-  summary: z24.string(),
-  // Absolute path to the throwaway worktree holding the generated changes, so
-  // the user can open it (`cd <worktreePath>`) or inspect the diff
-  // (`git -C <worktreePath> status/diff`).
-  worktreePath: z24.string().optional(),
-  ingestCommand: z24.string().optional(),
-  // True when the user accepted the run-now prompt and the wizard executed the
-  // ingestion script; downstream steps use this to avoid telling the user to run
-  // a script that already ran.
-  ingestScriptRan: z24.boolean().optional(),
-  // Records ingested by the run-now execution, parsed from the script's
-  // machine-readable count line; absent when the script didn't run or emitted
-  // no parseable count.
-  ingestRecordCount: z24.number().optional(),
-  // Wall-clock duration of the run-now ingestion execution, in ms.
-  ingestDurationMs: z24.number().optional(),
-  ingestionSource: z24.enum(["local", "fileUpload", "generated"]),
-  // Suggested names/values, built from framework detection. The search agent is
-  // instructed to rename the prefix if it doesn't match the project's build
-  // tool, so the names it actually wrote can differ — treat these as hints, not
-  // ground truth (the agent's summary carries the final names).
-  searchEnvVars: z24.array(
-    z24.object({
-      name: z24.string(),
-      value: z24.string()
+var implementSchema = z27.object({
+  filesChanged: z27.array(z27.string()),
+  summary: z27.string(),
+  worktreePath: z27.string().optional(),
+  ingestCommand: z27.string().optional(),
+  ingestScriptRan: z27.boolean().optional(),
+  ingestRecordCount: z27.number().optional(),
+  ingestDurationMs: z27.number().optional(),
+  ingestionSource: z27.enum(["local", "fileUpload", "generated"]),
+  searchEnvVars: z27.array(
+    z27.object({
+      name: z27.string(),
+      value: z27.string()
     })
   ).optional()
 });
-var implementationOutputSchema = z24.object({
-  summary: z24.string(),
-  // Ingestion only: how to run the generated script, as a structured pair the
-  // wizard turns into an argv (`<runtime> <entrypoint>`) — never a free-form
-  // command string. `runtime` is constrained to an allowlisted interpreter and
-  // `entrypoint` is validated to a worktree-relative path before execution, so
-  // the agent cannot inject extra commands or swap the interpreter.
-  runtime: z24.enum(INGEST_RUNTIMES).optional(),
-  entrypoint: z24.string().optional()
+var implementationOutputSchema = z27.object({
+  summary: z27.string(),
+  // Ingestion only: a structured pair the wizard turns into an argv, never a
+  // free-form command string. `runtime` is allowlisted and `entrypoint` is
+  // validated worktree-relative, so the agent cannot inject extra commands.
+  runtime: z27.enum(INGEST_RUNTIMES).optional(),
+  entrypoint: z27.string().optional()
 });
-var verificationOutputSchema = z24.object({
-  summary: z24.string(),
-  sufficient: z24.boolean(),
-  additionalInstructions: z24.string().optional()
+var verificationOutputSchema = z27.object({
+  summary: z27.string(),
+  sufficient: z27.boolean(),
+  additionalInstructions: z27.string().optional()
 });
 var MAX_IMPLEMENT_VERIFICATION_ATTEMPTS = 3;
 var DEFAULT_IMPLEMENT_USE_CASES = ["ingestion", "search"];
@@ -3638,22 +4114,42 @@ function publicEnvPrefix(language) {
   }
   return "PUBLIC_";
 }
-function searchEnvVars(language, appId, searchKey) {
-  const prefix = publicEnvPrefix(language);
+var APP_ID_VAR_SUFFIX = "ALGOLIA_APP_ID";
+var SEARCH_KEY_VAR_SUFFIX = "ALGOLIA_SEARCH_API_KEY";
+var INDEX_VAR_SUFFIX = "ALGOLIA_INDEX_NAME";
+function appIdVar(language) {
+  return `${publicEnvPrefix(language)}${APP_ID_VAR_SUFFIX}`;
+}
+function searchKeyVar(language) {
+  return `${publicEnvPrefix(language)}${SEARCH_KEY_VAR_SUFFIX}`;
+}
+function searchIndexVar(language) {
+  return `${publicEnvPrefix(language)}${INDEX_VAR_SUFFIX}`;
+}
+function searchEnvVars(language, index, appId, searchKey) {
   return [
     {
-      name: `${prefix}ALGOLIA_APP_ID`,
+      name: appIdVar(language),
       value: appId ?? "<your-algolia-app-id>"
     },
     {
-      name: `${prefix}ALGOLIA_SEARCH_API_KEY`,
+      name: searchKeyVar(language),
       value: searchKey ?? "<your-algolia-search-only-api-key>"
+    },
+    // Wizard-supplied rather than written into the generated code, because an
+    // agent that retypes the name (appending the project name, re-casing it)
+    // leaves the UI querying an index that does not exist.
+    {
+      name: searchIndexVar(language),
+      value: index
     }
   ];
 }
 function baseInstructions(input) {
   return [
-    `Target Algolia index: ${input.targetIndex}`,
+    // Agents have renamed this (e.g. appending the project name), which the
+    // index-scoped keys then reject with a 403.
+    `Target Algolia index, to be used exactly as written \u2014 never renamed, re-cased, prefixed, or suffixed: "${input.targetIndex}"`,
     `Project languages and frameworks: ${JSON.stringify(input.language)}`,
     "Make minimal, idiomatic changes; do not touch unrelated code."
   ];
@@ -3667,9 +4163,6 @@ function sourceSpecificInstructions(input) {
       "Add env vars for any local source access (DB URL, API base, file paths) that is not a fixed repo path."
     ],
     fileUpload: [
-      // The wizard already copied the developer's file into the worktree at this
-      // exact path, so the agent must read it directly — never search for or
-      // substitute another file.
       `Records come from the developer's file, already copied into the worktree at "${input.uploadFilePath}". Read and parse that exact file.`,
       "Parse by extension: JSON = array of objects; CSV/TSV = header row maps to keys.",
       "Map parsed columns/fields to the confirmed entity attributes.",
@@ -3690,6 +4183,7 @@ function ingestionInstructions(input) {
       `Create an ingestion script under "${input.ingestDir}/" at the repo root.`,
       `Ingest only these confirmed entities (name, source paths, attributes): ${JSON.stringify(input.confirmed)}.`,
       `Ingesting writes to Algolia, so the script needs a write API key and App ID \u2014 read them from the ${API_KEY_VAR} and ${APP_ID_VAR} environment variables rather than hardcoding them. The wizard sets these when it runs the script.`,
+      `Read the index name from the ${INDEX_NAME_VAR} environment variable, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or entity name \u2014 the write key only works for that exact index. Exit with an error if ${INDEX_NAME_VAR} is unset.`,
       "Use the appropriate Algolia package in the ingestion script. Do not use the raw HTTP API.",
       "After a successful ingest, the script must print exactly one line to stdout in the form `ALGOLIA_WIZARD_RECORD_COUNT=<n>`, where <n> is the total number of records pushed to Algolia. Print it last, on its own line, with no surrounding text.",
       getNamedDoc("save-records", "js"),
@@ -3707,16 +4201,18 @@ function searchInstructions(input) {
     `Build the search UI for ${input.uiFramework}.`,
     "Follow the Algolia JS SDK reference below for client setup and InstantSearch wiring; prefer it over prior knowledge:",
     doc,
-    `Add the search UI at ${input.searchLocation ? `"${input.searchLocation}"` : "the best shared, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working SearchBox and Hits against the "${input.targetIndex}" index.`,
-    "Read the App ID and a search-only API key from public env vars; never hardcode them. A search-only key is safe to expose client-side.",
-    // appId always resolves (loadActiveProfile throws otherwise); only the
-    // search-only key is best-effort and can fall back to a placeholder.
-    `Values: App ID "${input.appId}", search-only key ${input.searchKey ? `"${input.searchKey}"` : "(placeholder for the developer to fill in)"}.`,
-    // Names are fixed, not the agent's to rename: the wizard writes the
-    // resolved app id / search-only key into ".env" under these exact names
-    // right after this step, so a renamed prefix here would leave the code
+    `Add the search UI at ${input.searchLocation ? `"${input.searchLocation}"` : "the best shared, always-rendered layout location (e.g. a header/nav component)"} so it is reachable across the app \u2014 at least a working SearchBox and Hits against the target index.`,
+    `Read the index name from the ${searchIndexVar(input.language)} env var, which the wizard sets to "${input.targetIndex}". Never hardcode an index name or derive one from the project, file, or component name.`,
+    // The key is provisioned only after verification passes, so the agent never
+    // sees one. It must also leave .env alone: the wizard reads that file to
+    // decide whether a key already exists, and an agent-invented value there
+    // would be reused as if it were real.
+    `Add Algolia App ID "${input.appId}"; leave the search-only key as a placeholder. Do not create or edit .env \u2014 the wizard writes the resolved key there itself.`,
+    // Not the agent's to rename: the wizard writes these exact names into
+    // ".env" right after this step, so a renamed prefix would leave the code
     // reading a var the wizard never wrote.
     `Use exactly these public env var names in the code: ${input.searchEnvVars.map(({ name }) => name).join(", ")}.`,
+    "Read the App ID, the search-only API key, and the index name from public env vars; never hardcode them. A search-only key is safe to expose client-side.",
     'Add any Algolia/InstantSearch packages you import to package.json "dependencies" with a valid version range; the wizard installs them in the worktree after you finish.',
     "The summary should be extremely concise; do not mention env var setup or manual testing steps \u2014 the wizard writes the resolved credentials to .env and reports that separately."
   ];
@@ -3858,6 +4354,7 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
     }
   }
   const targetIndex = selected?.selection;
+  useWizard.getState().setTargetIndex(targetIndex ?? null);
   await assertGitRepoWithHead(repoRoot);
   if (await isWorkingTreeDirty(repoRoot)) {
     await confirmDirtyWorkingTree(ctx, repoRoot);
@@ -3866,17 +4363,8 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
   const confirmed2 = normalized.confirmedEntities;
   const searchLocation = normalized.searchImplementationAnalysis;
   let appId;
-  let searchKey;
   if (useCases.includes("search")) {
-    appId = (await loadActiveProfile()).appId;
-    try {
-      searchKey = await resolveSearchOnlyKey(targetIndex);
-    } catch (err) {
-      logger.warn(
-        { err: err.message },
-        "implement: could not resolve a search-only API key; the agent will scaffold a placeholder"
-      );
-    }
+    appId = (await requireApplication()).id;
   }
   const worktree = existingWorktreePath ?? (await createWorktree(repoRoot)).path;
   try {
@@ -3908,17 +4396,32 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
       targetIndex,
       language,
       appId,
-      searchKey,
-      searchEnvVars: searchEnvVars(language, appId, searchKey),
+      searchEnvVars: searchEnvVars(language, targetIndex, appId),
       ingestDir: INGEST_DIR,
       ingestionSource,
       uploadFilePath,
-      // language.frameworks already prefers the confirm-framework step output,
-      // so the user's confirmed stack (not just raw detection) picks the flavor.
       uiFramework: detectUiFramework(language)
     };
     const summaries = [];
     if (uploadWarning) summaries.push(uploadWarning);
+    let envSearchKey;
+    let envAppIdMismatch = false;
+    if (useCases.includes("search") && appId) {
+      const envAppId = await readEnvVar(worktree, appIdVar(language));
+      if (envAppId === appId) {
+        envSearchKey = await readEnvVar(worktree, searchKeyVar(language));
+      } else if (envAppId) {
+        envAppIdMismatch = true;
+        summaries.push(
+          `\u26A0\uFE0F .env already sets ${appIdVar(language)}=${envAppId}, but the active Algolia application is ${appId}. The wizard left those values alone \u2014 update ${appIdVar(language)} and ${searchKeyVar(language)} by hand, or searches will fail.`
+        );
+        logger.warn(
+          { envAppId, appId },
+          "implement: .env holds credentials for a different Algolia application; not reusing its search key"
+        );
+      }
+    }
+    let finalSearchEnvVars = input.searchEnvVars;
     let agentRuns = 0;
     let ingestRuntime;
     let ingestEntrypoint;
@@ -3979,7 +4482,8 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
           messages: []
         }) === true;
         if (runNow) {
-          const profile = await loadActiveProfile();
+          const ingestApp = await requireApplication();
+          const writeKey = (await resolveWriteKey(targetIndex, ingestApp.id)).key;
           ctx.notify({ messages: [`Writing records to "${targetIndex}"\u2026`] });
           const scriptLogId = ctx.logStart("runIngestScript", {
             runtime: ingestRuntime,
@@ -3991,8 +4495,9 @@ async function implement(ctx, useCases = DEFAULT_IMPLEMENT_USE_CASES, existingWo
             ingestRuntime,
             ingestEntrypoint,
             {
-              [APP_ID_VAR]: profile.appId,
-              [API_KEY_VAR]: profile.apiKey
+              [APP_ID_VAR]: ingestApp.id,
+              [API_KEY_VAR]: writeKey,
+              [INDEX_NAME_VAR]: targetIndex
             }
           );
           ctx.logEnd(scriptLogId, run2.ok ? "success" : "error");
@@ -4061,8 +4566,6 @@ ${run2.output}` : status;
         );
       }
       await ctx.requestUserInput({
-        // No question being asked here, just an acknowledgement — the
-        // continue/decline hints below already say "continue".
         prompt: "",
         promptType: "enterToContinue",
         options: [],
@@ -4111,7 +4614,34 @@ ${run2.output}` : status;
         }
         extraInstructions = verificationRetryInstructions(verification);
       }
-      const resolvedSearchEnvVars = input.searchEnvVars.filter(
+      let searchKey;
+      let searchKeyError;
+      if (appId) {
+        try {
+          const resolved2 = await resolveSearchOnlyKey(
+            targetIndex,
+            appId,
+            envSearchKey
+          );
+          searchKey = resolved2.key;
+          summaries.push(
+            resolved2.source === "created" ? `Created a new search-only Algolia API key for the "${targetIndex}" index in app ${appId} \u2014 safe to expose in frontend code.` : `Reused the existing search-only Algolia API key for the "${targetIndex}" index in app ${appId}.`
+          );
+        } catch (err) {
+          searchKeyError = err.message;
+          logger.warn(
+            { err: searchKeyError },
+            "implement: could not provision a search-only API key; the .env value stays a placeholder"
+          );
+        }
+      }
+      finalSearchEnvVars = searchEnvVars(
+        language,
+        targetIndex,
+        appId,
+        searchKey
+      );
+      const resolvedSearchEnvVars = finalSearchEnvVars.filter(
         (v) => !v.value.startsWith("<")
       );
       if (resolvedSearchEnvVars.length > 0) {
@@ -4122,13 +4652,29 @@ ${run2.output}` : status;
         if (written.length > 0) {
           summaries.push(`Wrote ${written.join(", ")} to .env.`);
         }
+        const stale = [];
+        for (const v of resolvedSearchEnvVars) {
+          if (written.includes(v.name)) continue;
+          const current = await readEnvVar(worktree, v.name);
+          if (current && current !== v.value) stale.push(v);
+        }
+        if (stale.length > 0 && !envAppIdMismatch) {
+          summaries.push(
+            `\u26A0\uFE0F .env already assigns a different value to ${stale.map((v) => `${v.name} (should be ${v.value})`).join(", ")} \u2014 the wizard left it alone. Fix it by hand, or searches will fail.`
+          );
+          logger.warn(
+            { vars: stale.map((v) => v.name) },
+            "implement: .env holds different values for the resolved search credentials; not overwriting them"
+          );
+        }
       }
-      const unresolvedSearchEnvVars = input.searchEnvVars.filter(
+      const unresolvedSearchEnvVars = finalSearchEnvVars.filter(
         (v) => v.value.startsWith("<")
       );
       if (unresolvedSearchEnvVars.length > 0) {
         summaries.push(
-          `Could not resolve a value for ${unresolvedSearchEnvVars.map((v) => v.name).join(", ")} \u2014 fill it in manually in .env.`
+          `Could not resolve a value for ${unresolvedSearchEnvVars.map((v) => v.name).join(", ")} \u2014 fill it in manually in .env.` + // Without the reason the line is a dead end.
+          (searchKeyError ? ` Reason: ${searchKeyError}` : "")
         );
       }
     } else {
@@ -4160,7 +4706,7 @@ ${run2.output}` : status;
         ...ingestRecordCount != null ? { ingestRecordCount } : {},
         ...ingestDurationMs != null ? { ingestDurationMs } : {}
       } : {},
-      ...useCases.includes("search") ? { searchEnvVars: input.searchEnvVars } : {}
+      ...useCases.includes("search") ? { searchEnvVars: finalSearchEnvVars } : {}
     };
   } finally {
     process.chdir(repoRoot);
@@ -4203,8 +4749,8 @@ var defaultWorkflow = {
     defineStep({
       id: "select-index",
       title: "Set up index",
-      outputSchema: z25.object({
-        selection: z25.string()
+      outputSchema: z28.object({
+        selection: z28.string()
       }),
       run: (ctx) => selectIndexStep(ctx)
     }),
@@ -4446,7 +4992,11 @@ Options:
   --no-telemetry   Send no telemetry or analytics for this run.
   --reset-on-run   Wipe this project's wizard state (run state, AI consent,
                    worktrees) before starting, so the run behaves like a
-                   first-ever run. Algolia credentials are not touched.
+                   first-ever run. Also drops every API key the wizard has
+                   stored in your keychain (or, where the platform has none,
+                   the encrypted file it falls back to \u2014 see CONTRIBUTING.md),
+                   for this project and any other, so later runs create new
+                   ones. Your Algolia login is not touched.
   -h, --help       Print this message.`;
 function parseCliArgs(argv) {
   const positionals = [];
@@ -4487,6 +5037,7 @@ import { join as join12 } from "node:path";
 var KEEP = ["wizard.log"];
 async function resetProjectState() {
   const dir = stateDir();
+  await forgetResolvedKeys();
   let entries;
   try {
     entries = await readdir4(dir);
@@ -4495,7 +5046,9 @@ async function resetProjectState() {
   }
   const targets = entries.filter((name) => !KEEP.includes(name));
   await Promise.all(
-    targets.map((name) => rm2(join12(dir, name), { recursive: true, force: true }))
+    targets.map(
+      (name) => rm2(join12(dir, name), { recursive: true, force: true })
+    )
   );
   return { dir, removed: targets };
 }
@@ -4503,6 +5056,7 @@ async function resetProjectState() {
 // src/main.tsx
 import { jsx as jsx14 } from "react/jsx-runtime";
 async function startup() {
+  setProjectRoot(process.cwd());
   let args;
   try {
     args = parseCliArgs(process.argv.slice(2));
@@ -4550,31 +5104,38 @@ ${formatStepList(workflow)}`);
 }
 async function run(workflow) {
   const store = useWizard.getState();
-  let instance = render(/* @__PURE__ */ jsx14(App, {}), { incrementalRendering: true });
+  const instance = render(/* @__PURE__ */ jsx14(App, {}), { incrementalRendering: true });
+  await store.waitForStart();
   let user = await getUser();
   if (!user) {
-    await instance.waitUntilRenderFlush();
-    instance.cleanup();
+    store.beginAuth();
     try {
       await runAuthLogin();
     } catch (err) {
-      console.error(err instanceof Error ? err.message : String(err));
+      store.setError(err instanceof Error ? err.message : String(err));
+      await instance.waitUntilExit();
       process.exit(1);
     }
-    instance = render(/* @__PURE__ */ jsx14(App, {}), { incrementalRendering: true });
+    store.endAuth();
     user = await getUser();
     if (!user) {
       store.setError(
-        "Authentication completed but no Algolia user was returned. Try running `npx @algolia/cli auth login` directly."
+        "Authentication completed but no Algolia user was returned. Try running `npx @algolia/cli@latest auth login` directly."
       );
       await instance.waitUntilExit();
       process.exit(1);
     }
   }
   store.setUser(user);
-  const profile = await loadActiveProfile();
-  await store.waitForStart();
-  runWorkflow(workflow, profile?.appId);
+  let app;
+  try {
+    app = await ensureApplication();
+  } catch (err) {
+    store.setError(err instanceof Error ? err.message : String(err));
+    await instance.waitUntilExit();
+    process.exit(1);
+  }
+  runWorkflow(workflow, app.id);
 }
 var started = await startup();
 if (typeof started === "number") {