Overview
This skill makes environment isolation an application-owned contract. It does not assume one provider topology: separate applications, index namespaces, or a combination may be selected from security, data, cost, and operational requirements.
Prerequisites
- A named repository, environment, and Algolia application or index in scope
- The local lockfile and installed client types as implementation authority
- A safe read-only query or explicitly disposable test target
- Current first-party documentation for any provider behavior that affects the change
Tool Discipline
Use Read, Glob, and Grep to inspect local code, configuration names, tests, and dependency versions. Use WebFetch only for current official Algolia documentation. Use Write or Edit only after identifying the target files, constraints, and verification plan.
Current Contract
- Map every runtime environment to an explicit application ID, index namespace, credential owner, and data classification.
- Prevent preview or branch input from selecting an arbitrary production index.
- Promote versioned settings and transforms through review rather than copying unknown live state.
- Define lifecycle and cleanup for ephemeral indices before creating them.
Authentication
Use separate custom keys and secret scopes for each environment. Browser builds receive only the search credential for their resolved environment.
Instructions
- Inventory applications, indices, replicas, keys, deployment environments, data sources, and retention rules.
- Choose isolation boundaries based on blast radius, data policy, feature parity, and verified current commercial terms.
- Implement an allowlisted environment resolver with no production fallback for unknown values.
- Define reproducible record, settings, synonym, and rule promotion artifacts.
- Test cross-environment denial, preview naming, cleanup, and production-selection safeguards.
- Document owners, rotation, promotion, rollback, retention, and orphan-index review.
Approval Boundaries
Do not create applications, copy production data, share keys, or delete preview indices until topology and data-policy owners approve.
Output
Return the environment matrix, selected topology and tradeoffs, configuration resolver, key scopes, promotion flow, isolation tests, and lifecycle controls.
Error Handling
| Condition | Response |
|---|---|
| Unknown environment | Fail closed instead of selecting production. |
| Preview requests production data | Reject unless an explicit approved sanitized source exists. |
| Settings drift | Rebuild from versioned artifacts and review the diff. |
| Orphan cleanup uncertain | Report candidates without deleting them. |
Examples
Use this compact input and expected handoff to calibrate scope and evidence quality.
Input:
env=preview-482; app=nonprod; index=preview_482_products; data=synthetic
Expected handoff:
resolver=allowlisted; prod-fallback=none; cleanup-after=reviewed-policy