feat: distribute CLI via npm

[tkrugg]

Summary

• Adds @algolia/cli to npm so users can install/run the CLI without Homebrew or a direct binary download
• Uses the platform-specific optional packages pattern (same as esbuild, bun, turbo): one coordinator package with 6 platform packages as optionalDependencies
• Publish runs automatically after GoReleaser on every v* tag; npm version is offset by +4 (Go v1.x → npm 5.x) to supersede the old abandoned @algolia/cli v4 package

Usage after release

# global install
npm install -g @algolia/cli
algolia --version

# one-off
npx @algolia/cli --help

What's included

File	Purpose
npm/algolia/	Coordinator package (@algolia/cli) with Node.js shim
npm/algolia-{darwin,linux,win32}-{x64,arm64}/	Per-platform binary packages
scripts/npm-publish.sh	Copies GoReleaser dist binaries and publishes all 7 packages
.github/workflows/releases.yml	Adds Node.js setup + publish step after GoReleaser
.gitignore	Scopes the algolia ignore rule to repo root so npm/algolia/ is tracked

Pre-requisites (already done)

• NPM_TOKEN secret added to repo GitHub Actions secrets

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{TIP This summary will be updated as you push new changes.}

[sarahdayan]

You can do without NPM_TOKEN and instead use OIDC, which is the recommended way of publishing to npm since they sunsetted classic tokens.

This way, we will never need to rotate tokens.

[tkrugg]

You can do without NPM_TOKEN and instead use OIDC, which is the recommended way of publishing to npm since they sunsetted classic tokens.

This way, we will never need to rotate tokens.

Thanks! I didn't know about OIDC ☺️
reading the docs it looks like I need to publish the 6 packages manually first before I can claim them on NPM (currently packages don't exist, I wanted this PR to create them)
is that correct?

I see an issue confirming this it seems: npm/cli#8544

[Copilot]

Pull request overview

Adds an npm distribution channel for the Algolia CLI using a coordinator package (@algolia/cli) plus platform-specific optional dependency packages, and wires publishing into the tag-based release workflow.

Changes:

• Introduces npm packages under npm/ (coordinator + 6 platform packages) and a Node.js shim to execute the packaged Go binary.
• Adds scripts/npm-publish.sh to version/copy binaries from GoReleaser dist/ and publish all npm packages.
• Updates the release GitHub Actions workflow to set up Node.js and publish to npm after GoReleaser; adjusts .gitignore to allow tracking npm/algolia/.

Reviewed changes

Copilot reviewed 16 out of 18 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
scripts/npm-publish.sh	New publish script to version/copy GoReleaser artifacts into npm packages and publish them
npm/algolia/README.md	Coordinator package README and usage/docs
npm/algolia/package.json	Defines @algolia/cli coordinator with optionalDependencies and algolia bin shim
npm/algolia/bin/run.js	Node shim that selects and executes the correct platform binary
npm/algolia-darwin-x64/package.json	macOS x64 binary package metadata
npm/algolia-darwin-x64/index.js	Exports bin path for macOS x64 package
npm/algolia-darwin-arm64/package.json	macOS arm64 binary package metadata
npm/algolia-darwin-arm64/index.js	Exports bin path for macOS arm64 package
npm/algolia-linux-x64/package.json	Linux x64 binary package metadata
npm/algolia-linux-x64/index.js	Exports bin path for Linux x64 package
npm/algolia-linux-arm64/package.json	Linux arm64 binary package metadata
npm/algolia-linux-arm64/index.js	Exports bin path for Linux arm64 package
npm/algolia-win32-x64/package.json	Windows x64 binary package metadata
npm/algolia-win32-x64/index.js	Exports bin path for Windows x64 package
npm/algolia-win32-arm64/package.json	Windows arm64 binary package metadata
npm/algolia-win32-arm64/index.js	Exports bin path for Windows arm64 package
.gitignore	Scopes /algolia ignore rule so npm/algolia/ is not ignored
.github/workflows/releases.yml	Adds Node setup + npm publish step after GoReleaser

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sarahdayan]

Thanks! I didn't know about OIDC ☺️ reading the docs it looks like I need to publish the 6 packages manually first before I can claim them on NPM (currently packages don't exist, I wanted this PR to create them) is that correct?

I see an issue confirming this it seems: npm/cli#8544

Indeed! I never used OIDC directly for first-time publish, I only migrated existing ones from token to OIDC.

So I think this is fine now and you can set up OIDC in a followup PR.

[Copilot]

Pull request overview

Copilot reviewed 17 out of 19 changed files in this pull request and generated 2 comments.