@kizenapps/cli 0.7.0 → 0.8.0

package/dist/electron/main.js

@@ -1,5 +1,5 @@
 // src/electron/main.ts
-import { app, BrowserWindow, session, nativeImage, Menu, ipcMain } from "electron";
+import { app, BrowserWindow, session, nativeImage, Menu, ipcMain, screen } from "electron";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 var args = process.argv.slice(2);
@@ -79,9 +79,10 @@ void app.whenReady().then(() => {
   if (process.platform === "darwin" && !icon.isEmpty()) {
     app.dock?.setIcon(icon);
   }
+  const { width, height } = screen.getPrimaryDisplay().workAreaSize;
   const win = new BrowserWindow({
-    width: 1920,
-    height: 1080,
+    width,
+    height,
     title: "Kizen App Builder",
     icon,
     webPreferences: {
@@ -186,11 +187,11 @@ void app.whenReady().then(() => {
       return;
     }
     const level = type === "warning" ? "warn" : ["log", "warn", "error", "info"].includes(type) ? type : "log";
-    void Promise.all(args2.map((arg) => serializeArgAsync(arg, sessionId))).then(
-      (serializedArgs) => {
-        win.webContents.send("console-message", { level, args: serializedArgs });
-      }
-    );
+    void Promise.all(
+      args2.map((arg) => serializeArgAsync(arg, sessionId))
+    ).then((serializedArgs) => {
+      win.webContents.send("console-message", { level, args: serializedArgs });
+    });
   });
   void win.loadURL(`http://localhost:${String(port)}`);
 });

package/dist/electron/main.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/electron/main.ts"],"sourcesContent":["import { app, BrowserWindow, session, nativeImage, Menu, ipcMain } from 'electron';\nimport { join, dirname } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst args = process.argv.slice(2);\nconst port = parseInt(args.find((a) => a.startsWith('--port='))?.slice(7) ?? '3121', 10);\nconst userDataDir = args.find((a) => a.startsWith('--user-data-dir='))?.slice(16);\n\nif (userDataDir) {\n  app.setPath('userData', userDataDir);\n}\n\napp.setName('Kizen App Builder');\n\nconst CSP_HEADERS = new Set([\n  'content-security-policy',\n  'content-security-policy-report-only',\n  'x-frame-options',\n]);\n\nconst KIZEN_DOMAINS = ['kizen.dev', 'kizen.com'];\n\nfunction isKizenUrl(url: string): boolean {\n  try {\n    const { hostname } = new URL(url);\n    return KIZEN_DOMAINS.some((d) => hostname === d || hostname.endsWith('.' + d));\n  } catch {\n    return false;\n  }\n}\n\nfunction setupSession(): void {\n  // Strip CSP headers and fix SameSite cookies on Kizen responses.\n  session.defaultSession.webRequest.onHeadersReceived((details, callback) => {\n    const headers: Record<string, string[]> = {};\n\n    for (const [key, value] of Object.entries(details.responseHeaders ?? {})) {\n      if (!CSP_HEADERS.has(key.toLowerCase())) {\n        headers[key] = value;\n      }\n    }\n\n    if (isKizenUrl(details.url) && headers['set-cookie']) {\n      headers['set-cookie'] = headers['set-cookie'].map((cookie) => {\n        if (!/SameSite=/i.test(cookie)) {\n          return cookie + '; SameSite=None; Secure';\n        }\n\n        return cookie.replace(/SameSite=\\w+/i, 'SameSite=None');\n      });\n    }\n\n    callback({ responseHeaders: headers });\n  });\n\n  // Periodically re-patch existing Kizen cookies that arrived without SameSite=None.\n  // Needed for cookies set before the interceptor was active or via JS document.cookie.\n  setInterval(() => {\n    void (async () => {\n      for (const domain of KIZEN_DOMAINS) {\n        try {\n          const cookies = await session.defaultSession.cookies.get({ domain });\n          for (const cookie of cookies) {\n            if (cookie.sameSite !== 'no_restriction') {\n              const raw = cookie.domain ?? domain;\n              const bare = raw.startsWith('.') ? raw.slice(1) : raw;\n              await session.defaultSession.cookies.set({\n                url: `https://${bare}`,\n                name: cookie.name,\n                value: cookie.value,\n                domain: raw,\n                path: cookie.path ?? '/',\n                secure: true,\n                ...(cookie.httpOnly !== undefined && { httpOnly: cookie.httpOnly }),\n                ...(cookie.expirationDate !== undefined && {\n                  expirationDate: cookie.expirationDate,\n                }),\n                sameSite: 'no_restriction',\n              });\n            }\n          }\n        } catch {\n          /* ignore */\n        }\n      }\n    })();\n  }, 2000);\n}\n\nvoid app.whenReady().then(() => {\n  Menu.setApplicationMenu(null);\n\n  setupSession();\n\n  const iconPath = join(dirname(fileURLToPath(import.meta.url)), 'icon.png');\n  const icon = nativeImage.createFromPath(iconPath);\n\n  if (process.platform === 'darwin' && !icon.isEmpty()) {\n    app.dock?.setIcon(icon);\n  }\n\n  const win = new BrowserWindow({\n    width: 1920,\n    height: 1080,\n    title: 'Kizen App Builder',\n    icon,\n    webPreferences: {\n      nodeIntegration: false,\n      contextIsolation: true,\n      sandbox: false,\n      preload: join(dirname(fileURLToPath(import.meta.url)), 'preload.cjs'),\n    },\n  });\n\n  ipcMain.on('open-devtools', () => {\n    win.webContents.openDevTools();\n  });\n\n  interface PropertyPreview {\n    name: string;\n    type: string;\n    value?: string;\n    subtype?: string;\n    valuePreview?: ObjectPreview;\n  }\n  interface ObjectPreview {\n    type: string;\n    subtype?: string;\n    overflow: boolean;\n    properties: PropertyPreview[];\n  }\n  interface RemoteObject {\n    type: string;\n    subtype?: string;\n    value?: unknown;\n    description?: string;\n    preview?: ObjectPreview;\n    objectId?: string;\n  }\n  interface ConsoleApiCalledParams {\n    type: string;\n    args: RemoteObject[];\n  }\n\n  function parseProp(prop: PropertyPreview): unknown {\n    if (prop.type === 'number') {\n      return Number(prop.value);\n    }\n    if (prop.type === 'boolean') {\n      return prop.value === 'true';\n    }\n    if (prop.type === 'undefined') {\n      return undefined;\n    }\n    if (prop.type === 'object' && prop.value === 'null') {\n      return null;\n    }\n    if (prop.type === 'object' && prop.valuePreview) {\n      const { valuePreview } = prop;\n      if (valuePreview.subtype === 'array') {\n        return valuePreview.properties\n          .filter((p) => /^\\d+$/.test(p.name))\n          .sort((a, b) => parseInt(a.name) - parseInt(b.name))\n          .map(parseProp);\n      }\n      const obj: Record<string, unknown> = {};\n      for (const p of valuePreview.properties) {\n        obj[p.name] = parseProp(p);\n      }\n      return obj;\n    }\n    return prop.value ?? `[${prop.type}]`;\n  }\n\n  function serializeArg(arg: RemoteObject): unknown {\n    if (arg.value !== undefined) {\n      return arg.value;\n    }\n    if (arg.preview) {\n      const { preview } = arg;\n      if (preview.subtype === 'array') {\n        return preview.properties\n          .filter((p) => /^\\d+$/.test(p.name))\n          .sort((a, b) => parseInt(a.name) - parseInt(b.name))\n          .map(parseProp);\n      }\n      const obj: Record<string, unknown> = {};\n      for (const prop of preview.properties) {\n        obj[prop.name] = parseProp(prop);\n      }\n      return obj;\n    }\n    return arg.description ?? `[${arg.type}]`;\n  }\n\n  const enableRuntime = (sessionId?: string): void => {\n    void win.webContents.debugger.sendCommand(\n      'Runtime.enable',\n      { generatePreview: true },\n      sessionId,\n    );\n  };\n\n  win.webContents.debugger.attach('1.3');\n  enableRuntime();\n  void win.webContents.debugger.sendCommand('Target.setAutoAttach', {\n    autoAttach: true,\n    waitForDebuggerOnStart: false,\n    flatten: true,\n  });\n\n  async function serializeArgAsync(arg: RemoteObject, sessionId?: string): Promise<unknown> {\n    if (arg.type === 'object' && arg.objectId) {\n      try {\n        const result: unknown = await win.webContents.debugger.sendCommand(\n          'Runtime.callFunctionOn',\n          {\n            objectId: arg.objectId,\n            functionDeclaration:\n              'function() { const seen = new WeakSet(); return JSON.stringify(this, function(k, v) { if (typeof v === \"object\" && v !== null) { if (seen.has(v)) return \"[Circular]\"; seen.add(v); } return v; }); }',\n            returnByValue: true,\n          },\n          sessionId,\n        );\n        const val = (result as { result: { value?: string } }).result.value;\n        if (typeof val === 'string') {\n          return JSON.parse(val);\n        }\n      } catch {\n        // fall through to preview-based serialization\n      }\n    }\n    return serializeArg(arg);\n  }\n\n  win.webContents.debugger.on('message', (_event, method, params, sessionId) => {\n    if (method === 'Target.attachedToTarget') {\n      const { sessionId: childSessionId } = params as { sessionId: string };\n      enableRuntime(childSessionId);\n      return;\n    }\n\n    if (method !== 'Runtime.consoleAPICalled') {\n      return;\n    }\n    const { type, args } = params as ConsoleApiCalledParams;\n    if (args[0]?.type === 'string' && String(args[0].value).includes('Electron Security Warning')) {\n      return;\n    }\n    const level =\n      type === 'warning' ? 'warn' : ['log', 'warn', 'error', 'info'].includes(type) ? type : 'log';\n    void Promise.all(args.map((arg) => serializeArgAsync(arg, sessionId as string | undefined))).then(\n      (serializedArgs) => {\n        win.webContents.send('console-message', { level, args: serializedArgs });\n      },\n    );\n  });\n\n  void win.loadURL(`http://localhost:${String(port)}`);\n});\n\napp.on('window-all-closed', () => {\n  app.quit();\n});\n"],"mappings":";AAAA,SAAS,KAAK,eAAe,SAAS,aAAa,MAAM,eAAe;AACxE,SAAS,MAAM,eAAe;AAC9B,SAAS,qBAAqB;AAE9B,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,OAAO,SAAS,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,QAAQ,EAAE;AACvF,IAAM,cAAc,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,kBAAkB,CAAC,GAAG,MAAM,EAAE;AAEhF,IAAI,aAAa;AACf,MAAI,QAAQ,YAAY,WAAW;AACrC;AAEA,IAAI,QAAQ,mBAAmB;AAE/B,IAAM,cAAc,oBAAI,IAAI;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,gBAAgB,CAAC,aAAa,WAAW;AAE/C,SAAS,WAAW,KAAsB;AACxC,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,IAAI,IAAI,GAAG;AAChC,WAAO,cAAc,KAAK,CAAC,MAAM,aAAa,KAAK,SAAS,SAAS,MAAM,CAAC,CAAC;AAAA,EAC/E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAqB;AAE5B,UAAQ,eAAe,WAAW,kBAAkB,CAAC,SAAS,aAAa;AACzE,UAAM,UAAoC,CAAC;AAE3C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,mBAAmB,CAAC,CAAC,GAAG;AACxE,UAAI,CAAC,YAAY,IAAI,IAAI,YAAY,CAAC,GAAG;AACvC,gBAAQ,GAAG,IAAI;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,WAAW,QAAQ,GAAG,KAAK,QAAQ,YAAY,GAAG;AACpD,cAAQ,YAAY,IAAI,QAAQ,YAAY,EAAE,IAAI,CAAC,WAAW;AAC5D,YAAI,CAAC,aAAa,KAAK,MAAM,GAAG;AAC9B,iBAAO,SAAS;AAAA,QAClB;AAEA,eAAO,OAAO,QAAQ,iBAAiB,eAAe;AAAA,MACxD,CAAC;AAAA,IACH;AAEA,aAAS,EAAE,iBAAiB,QAAQ,CAAC;AAAA,EACvC,CAAC;AAID,cAAY,MAAM;AAChB,UAAM,YAAY;AAChB,iBAAW,UAAU,eAAe;AAClC,YAAI;AACF,gBAAM,UAAU,MAAM,QAAQ,eAAe,QAAQ,IAAI,EAAE,OAAO,CAAC;AACnE,qBAAW,UAAU,SAAS;AAC5B,gBAAI,OAAO,aAAa,kBAAkB;AACxC,oBAAM,MAAM,OAAO,UAAU;AAC7B,oBAAM,OAAO,IAAI,WAAW,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI;AAClD,oBAAM,QAAQ,eAAe,QAAQ,IAAI;AAAA,gBACvC,KAAK,WAAW,IAAI;AAAA,gBACpB,MAAM,OAAO;AAAA,gBACb,OAAO,OAAO;AAAA,gBACd,QAAQ;AAAA,gBACR,MAAM,OAAO,QAAQ;AAAA,gBACrB,QAAQ;AAAA,gBACR,GAAI,OAAO,aAAa,UAAa,EAAE,UAAU,OAAO,SAAS;AAAA,gBACjE,GAAI,OAAO,mBAAmB,UAAa;AAAA,kBACzC,gBAAgB,OAAO;AAAA,gBACzB;AAAA,gBACA,UAAU;AAAA,cACZ,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,GAAG;AAAA,EACL,GAAG,GAAI;AACT;AAEA,KAAK,IAAI,UAAU,EAAE,KAAK,MAAM;AAC9B,OAAK,mBAAmB,IAAI;AAE5B,eAAa;AAEb,QAAM,WAAW,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,UAAU;AACzE,QAAM,OAAO,YAAY,eAAe,QAAQ;AAEhD,MAAI,QAAQ,aAAa,YAAY,CAAC,KAAK,QAAQ,GAAG;AACpD,QAAI,MAAM,QAAQ,IAAI;AAAA,EACxB;AAEA,QAAM,MAAM,IAAI,cAAc;AAAA,IAC5B,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,OAAO;AAAA,IACP;AAAA,IACA,gBAAgB;AAAA,MACd,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,SAAS,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,aAAa;AAAA,IACtE;AAAA,EACF,CAAC;AAED,UAAQ,GAAG,iBAAiB,MAAM;AAChC,QAAI,YAAY,aAAa;AAAA,EAC/B,CAAC;AA4BD,WAAS,UAAU,MAAgC;AACjD,QAAI,KAAK,SAAS,UAAU;AAC1B,aAAO,OAAO,KAAK,KAAK;AAAA,IAC1B;AACA,QAAI,KAAK,SAAS,WAAW;AAC3B,aAAO,KAAK,UAAU;AAAA,IACxB;AACA,QAAI,KAAK,SAAS,aAAa;AAC7B,aAAO;AAAA,IACT;AACA,QAAI,KAAK,SAAS,YAAY,KAAK,UAAU,QAAQ;AACnD,aAAO;AAAA,IACT;AACA,QAAI,KAAK,SAAS,YAAY,KAAK,cAAc;AAC/C,YAAM,EAAE,aAAa,IAAI;AACzB,UAAI,aAAa,YAAY,SAAS;AACpC,eAAO,aAAa,WACjB,OAAO,CAAC,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,EAClC,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,CAAC,EAClD,IAAI,SAAS;AAAA,MAClB;AACA,YAAM,MAA+B,CAAC;AACtC,iBAAW,KAAK,aAAa,YAAY;AACvC,YAAI,EAAE,IAAI,IAAI,UAAU,CAAC;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO,KAAK,SAAS,IAAI,KAAK,IAAI;AAAA,EACpC;AAEA,WAAS,aAAa,KAA4B;AAChD,QAAI,IAAI,UAAU,QAAW;AAC3B,aAAO,IAAI;AAAA,IACb;AACA,QAAI,IAAI,SAAS;AACf,YAAM,EAAE,QAAQ,IAAI;AACpB,UAAI,QAAQ,YAAY,SAAS;AAC/B,eAAO,QAAQ,WACZ,OAAO,CAAC,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,EAClC,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,CAAC,EAClD,IAAI,SAAS;AAAA,MAClB;AACA,YAAM,MAA+B,CAAC;AACtC,iBAAW,QAAQ,QAAQ,YAAY;AACrC,YAAI,KAAK,IAAI,IAAI,UAAU,IAAI;AAAA,MACjC;AACA,aAAO;AAAA,IACT;AACA,WAAO,IAAI,eAAe,IAAI,IAAI,IAAI;AAAA,EACxC;AAEA,QAAM,gBAAgB,CAAC,cAA6B;AAClD,SAAK,IAAI,YAAY,SAAS;AAAA,MAC5B;AAAA,MACA,EAAE,iBAAiB,KAAK;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,OAAO,KAAK;AACrC,gBAAc;AACd,OAAK,IAAI,YAAY,SAAS,YAAY,wBAAwB;AAAA,IAChE,YAAY;AAAA,IACZ,wBAAwB;AAAA,IACxB,SAAS;AAAA,EACX,CAAC;AAED,iBAAe,kBAAkB,KAAmB,WAAsC;AACxF,QAAI,IAAI,SAAS,YAAY,IAAI,UAAU;AACzC,UAAI;AACF,cAAM,SAAkB,MAAM,IAAI,YAAY,SAAS;AAAA,UACrD;AAAA,UACA;AAAA,YACE,UAAU,IAAI;AAAA,YACd,qBACE;AAAA,YACF,eAAe;AAAA,UACjB;AAAA,UACA;AAAA,QACF;AACA,cAAM,MAAO,OAA0C,OAAO;AAC9D,YAAI,OAAO,QAAQ,UAAU;AAC3B,iBAAO,KAAK,MAAM,GAAG;AAAA,QACvB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,aAAa,GAAG;AAAA,EACzB;AAEA,MAAI,YAAY,SAAS,GAAG,WAAW,CAAC,QAAQ,QAAQ,QAAQ,cAAc;AAC5E,QAAI,WAAW,2BAA2B;AACxC,YAAM,EAAE,WAAW,eAAe,IAAI;AACtC,oBAAc,cAAc;AAC5B;AAAA,IACF;AAEA,QAAI,WAAW,4BAA4B;AACzC;AAAA,IACF;AACA,UAAM,EAAE,MAAM,MAAAA,MAAK,IAAI;AACvB,QAAIA,MAAK,CAAC,GAAG,SAAS,YAAY,OAAOA,MAAK,CAAC,EAAE,KAAK,EAAE,SAAS,2BAA2B,GAAG;AAC7F;AAAA,IACF;AACA,UAAM,QACJ,SAAS,YAAY,SAAS,CAAC,OAAO,QAAQ,SAAS,MAAM,EAAE,SAAS,IAAI,IAAI,OAAO;AACzF,SAAK,QAAQ,IAAIA,MAAK,IAAI,CAAC,QAAQ,kBAAkB,KAAK,SAA+B,CAAC,CAAC,EAAE;AAAA,MAC3F,CAAC,mBAAmB;AAClB,YAAI,YAAY,KAAK,mBAAmB,EAAE,OAAO,MAAM,eAAe,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF,CAAC;AAED,OAAK,IAAI,QAAQ,oBAAoB,OAAO,IAAI,CAAC,EAAE;AACrD,CAAC;AAED,IAAI,GAAG,qBAAqB,MAAM;AAChC,MAAI,KAAK;AACX,CAAC;","names":["args"]}
+{"version":3,"sources":["../../src/electron/main.ts"],"sourcesContent":["import { app, BrowserWindow, session, nativeImage, Menu, ipcMain, screen } from 'electron';\nimport { join, dirname } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst args = process.argv.slice(2);\nconst port = parseInt(args.find((a) => a.startsWith('--port='))?.slice(7) ?? '3121', 10);\nconst userDataDir = args.find((a) => a.startsWith('--user-data-dir='))?.slice(16);\n\nif (userDataDir) {\n  app.setPath('userData', userDataDir);\n}\n\napp.setName('Kizen App Builder');\n\nconst CSP_HEADERS = new Set([\n  'content-security-policy',\n  'content-security-policy-report-only',\n  'x-frame-options',\n]);\n\nconst KIZEN_DOMAINS = ['kizen.dev', 'kizen.com'];\n\nfunction isKizenUrl(url: string): boolean {\n  try {\n    const { hostname } = new URL(url);\n    return KIZEN_DOMAINS.some((d) => hostname === d || hostname.endsWith('.' + d));\n  } catch {\n    return false;\n  }\n}\n\nfunction setupSession(): void {\n  // Strip CSP headers and fix SameSite cookies on Kizen responses.\n  session.defaultSession.webRequest.onHeadersReceived((details, callback) => {\n    const headers: Record<string, string[]> = {};\n\n    for (const [key, value] of Object.entries(details.responseHeaders ?? {})) {\n      if (!CSP_HEADERS.has(key.toLowerCase())) {\n        headers[key] = value;\n      }\n    }\n\n    if (isKizenUrl(details.url) && headers['set-cookie']) {\n      headers['set-cookie'] = headers['set-cookie'].map((cookie) => {\n        if (!/SameSite=/i.test(cookie)) {\n          return cookie + '; SameSite=None; Secure';\n        }\n\n        return cookie.replace(/SameSite=\\w+/i, 'SameSite=None');\n      });\n    }\n\n    callback({ responseHeaders: headers });\n  });\n\n  // Periodically re-patch existing Kizen cookies that arrived without SameSite=None.\n  // Needed for cookies set before the interceptor was active or via JS document.cookie.\n  setInterval(() => {\n    void (async () => {\n      for (const domain of KIZEN_DOMAINS) {\n        try {\n          const cookies = await session.defaultSession.cookies.get({ domain });\n          for (const cookie of cookies) {\n            if (cookie.sameSite !== 'no_restriction') {\n              const raw = cookie.domain ?? domain;\n              const bare = raw.startsWith('.') ? raw.slice(1) : raw;\n              await session.defaultSession.cookies.set({\n                url: `https://${bare}`,\n                name: cookie.name,\n                value: cookie.value,\n                domain: raw,\n                path: cookie.path ?? '/',\n                secure: true,\n                ...(cookie.httpOnly !== undefined && { httpOnly: cookie.httpOnly }),\n                ...(cookie.expirationDate !== undefined && {\n                  expirationDate: cookie.expirationDate,\n                }),\n                sameSite: 'no_restriction',\n              });\n            }\n          }\n        } catch {\n          /* ignore */\n        }\n      }\n    })();\n  }, 2000);\n}\n\nvoid app.whenReady().then(() => {\n  Menu.setApplicationMenu(null);\n\n  setupSession();\n\n  const iconPath = join(dirname(fileURLToPath(import.meta.url)), 'icon.png');\n  const icon = nativeImage.createFromPath(iconPath);\n\n  if (process.platform === 'darwin' && !icon.isEmpty()) {\n    app.dock?.setIcon(icon);\n  }\n\n  const { width, height } = screen.getPrimaryDisplay().workAreaSize;\n\n  const win = new BrowserWindow({\n    width,\n    height,\n    title: 'Kizen App Builder',\n    icon,\n    webPreferences: {\n      nodeIntegration: false,\n      contextIsolation: true,\n      sandbox: false,\n      preload: join(dirname(fileURLToPath(import.meta.url)), 'preload.cjs'),\n    },\n  });\n\n  ipcMain.on('open-devtools', () => {\n    win.webContents.openDevTools();\n  });\n\n  interface PropertyPreview {\n    name: string;\n    type: string;\n    value?: string;\n    subtype?: string;\n    valuePreview?: ObjectPreview;\n  }\n  interface ObjectPreview {\n    type: string;\n    subtype?: string;\n    overflow: boolean;\n    properties: PropertyPreview[];\n  }\n  interface RemoteObject {\n    type: string;\n    subtype?: string;\n    value?: unknown;\n    description?: string;\n    preview?: ObjectPreview;\n    objectId?: string;\n  }\n  interface ConsoleApiCalledParams {\n    type: string;\n    args: RemoteObject[];\n  }\n\n  function parseProp(prop: PropertyPreview): unknown {\n    if (prop.type === 'number') {\n      return Number(prop.value);\n    }\n    if (prop.type === 'boolean') {\n      return prop.value === 'true';\n    }\n    if (prop.type === 'undefined') {\n      return undefined;\n    }\n    if (prop.type === 'object' && prop.value === 'null') {\n      return null;\n    }\n    if (prop.type === 'object' && prop.valuePreview) {\n      const { valuePreview } = prop;\n      if (valuePreview.subtype === 'array') {\n        return valuePreview.properties\n          .filter((p) => /^\\d+$/.test(p.name))\n          .sort((a, b) => parseInt(a.name) - parseInt(b.name))\n          .map(parseProp);\n      }\n      const obj: Record<string, unknown> = {};\n      for (const p of valuePreview.properties) {\n        obj[p.name] = parseProp(p);\n      }\n      return obj;\n    }\n    return prop.value ?? `[${prop.type}]`;\n  }\n\n  function serializeArg(arg: RemoteObject): unknown {\n    if (arg.value !== undefined) {\n      return arg.value;\n    }\n    if (arg.preview) {\n      const { preview } = arg;\n      if (preview.subtype === 'array') {\n        return preview.properties\n          .filter((p) => /^\\d+$/.test(p.name))\n          .sort((a, b) => parseInt(a.name) - parseInt(b.name))\n          .map(parseProp);\n      }\n      const obj: Record<string, unknown> = {};\n      for (const prop of preview.properties) {\n        obj[prop.name] = parseProp(prop);\n      }\n      return obj;\n    }\n    return arg.description ?? `[${arg.type}]`;\n  }\n\n  const enableRuntime = (sessionId?: string): void => {\n    void win.webContents.debugger.sendCommand(\n      'Runtime.enable',\n      { generatePreview: true },\n      sessionId,\n    );\n  };\n\n  win.webContents.debugger.attach('1.3');\n  enableRuntime();\n  void win.webContents.debugger.sendCommand('Target.setAutoAttach', {\n    autoAttach: true,\n    waitForDebuggerOnStart: false,\n    flatten: true,\n  });\n\n  async function serializeArgAsync(arg: RemoteObject, sessionId?: string): Promise<unknown> {\n    if (arg.type === 'object' && arg.objectId) {\n      try {\n        const result: unknown = await win.webContents.debugger.sendCommand(\n          'Runtime.callFunctionOn',\n          {\n            objectId: arg.objectId,\n            functionDeclaration:\n              'function() { const seen = new WeakSet(); return JSON.stringify(this, function(k, v) { if (typeof v === \"object\" && v !== null) { if (seen.has(v)) return \"[Circular]\"; seen.add(v); } return v; }); }',\n            returnByValue: true,\n          },\n          sessionId,\n        );\n        const val = (result as { result: { value?: string } }).result.value;\n        if (typeof val === 'string') {\n          return JSON.parse(val);\n        }\n      } catch {\n        // fall through to preview-based serialization\n      }\n    }\n    return serializeArg(arg);\n  }\n\n  win.webContents.debugger.on('message', (_event, method, params, sessionId) => {\n    if (method === 'Target.attachedToTarget') {\n      const { sessionId: childSessionId } = params as { sessionId: string };\n      enableRuntime(childSessionId);\n      return;\n    }\n\n    if (method !== 'Runtime.consoleAPICalled') {\n      return;\n    }\n    const { type, args } = params as ConsoleApiCalledParams;\n    if (args[0]?.type === 'string' && String(args[0].value).includes('Electron Security Warning')) {\n      return;\n    }\n    const level =\n      type === 'warning' ? 'warn' : ['log', 'warn', 'error', 'info'].includes(type) ? type : 'log';\n    void Promise.all(\n      args.map((arg) => serializeArgAsync(arg, sessionId as string | undefined)),\n    ).then((serializedArgs) => {\n      win.webContents.send('console-message', { level, args: serializedArgs });\n    });\n  });\n\n  void win.loadURL(`http://localhost:${String(port)}`);\n});\n\napp.on('window-all-closed', () => {\n  app.quit();\n});\n"],"mappings":";AAAA,SAAS,KAAK,eAAe,SAAS,aAAa,MAAM,SAAS,cAAc;AAChF,SAAS,MAAM,eAAe;AAC9B,SAAS,qBAAqB;AAE9B,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,OAAO,SAAS,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,QAAQ,EAAE;AACvF,IAAM,cAAc,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,kBAAkB,CAAC,GAAG,MAAM,EAAE;AAEhF,IAAI,aAAa;AACf,MAAI,QAAQ,YAAY,WAAW;AACrC;AAEA,IAAI,QAAQ,mBAAmB;AAE/B,IAAM,cAAc,oBAAI,IAAI;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,gBAAgB,CAAC,aAAa,WAAW;AAE/C,SAAS,WAAW,KAAsB;AACxC,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,IAAI,IAAI,GAAG;AAChC,WAAO,cAAc,KAAK,CAAC,MAAM,aAAa,KAAK,SAAS,SAAS,MAAM,CAAC,CAAC;AAAA,EAC/E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAqB;AAE5B,UAAQ,eAAe,WAAW,kBAAkB,CAAC,SAAS,aAAa;AACzE,UAAM,UAAoC,CAAC;AAE3C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,mBAAmB,CAAC,CAAC,GAAG;AACxE,UAAI,CAAC,YAAY,IAAI,IAAI,YAAY,CAAC,GAAG;AACvC,gBAAQ,GAAG,IAAI;AAAA,MACjB;AAAA,IACF;AAEA,QAAI,WAAW,QAAQ,GAAG,KAAK,QAAQ,YAAY,GAAG;AACpD,cAAQ,YAAY,IAAI,QAAQ,YAAY,EAAE,IAAI,CAAC,WAAW;AAC5D,YAAI,CAAC,aAAa,KAAK,MAAM,GAAG;AAC9B,iBAAO,SAAS;AAAA,QAClB;AAEA,eAAO,OAAO,QAAQ,iBAAiB,eAAe;AAAA,MACxD,CAAC;AAAA,IACH;AAEA,aAAS,EAAE,iBAAiB,QAAQ,CAAC;AAAA,EACvC,CAAC;AAID,cAAY,MAAM;AAChB,UAAM,YAAY;AAChB,iBAAW,UAAU,eAAe;AAClC,YAAI;AACF,gBAAM,UAAU,MAAM,QAAQ,eAAe,QAAQ,IAAI,EAAE,OAAO,CAAC;AACnE,qBAAW,UAAU,SAAS;AAC5B,gBAAI,OAAO,aAAa,kBAAkB;AACxC,oBAAM,MAAM,OAAO,UAAU;AAC7B,oBAAM,OAAO,IAAI,WAAW,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI;AAClD,oBAAM,QAAQ,eAAe,QAAQ,IAAI;AAAA,gBACvC,KAAK,WAAW,IAAI;AAAA,gBACpB,MAAM,OAAO;AAAA,gBACb,OAAO,OAAO;AAAA,gBACd,QAAQ;AAAA,gBACR,MAAM,OAAO,QAAQ;AAAA,gBACrB,QAAQ;AAAA,gBACR,GAAI,OAAO,aAAa,UAAa,EAAE,UAAU,OAAO,SAAS;AAAA,gBACjE,GAAI,OAAO,mBAAmB,UAAa;AAAA,kBACzC,gBAAgB,OAAO;AAAA,gBACzB;AAAA,gBACA,UAAU;AAAA,cACZ,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,GAAG;AAAA,EACL,GAAG,GAAI;AACT;AAEA,KAAK,IAAI,UAAU,EAAE,KAAK,MAAM;AAC9B,OAAK,mBAAmB,IAAI;AAE5B,eAAa;AAEb,QAAM,WAAW,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,UAAU;AACzE,QAAM,OAAO,YAAY,eAAe,QAAQ;AAEhD,MAAI,QAAQ,aAAa,YAAY,CAAC,KAAK,QAAQ,GAAG;AACpD,QAAI,MAAM,QAAQ,IAAI;AAAA,EACxB;AAEA,QAAM,EAAE,OAAO,OAAO,IAAI,OAAO,kBAAkB,EAAE;AAErD,QAAM,MAAM,IAAI,cAAc;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,gBAAgB;AAAA,MACd,iBAAiB;AAAA,MACjB,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,SAAS,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,aAAa;AAAA,IACtE;AAAA,EACF,CAAC;AAED,UAAQ,GAAG,iBAAiB,MAAM;AAChC,QAAI,YAAY,aAAa;AAAA,EAC/B,CAAC;AA4BD,WAAS,UAAU,MAAgC;AACjD,QAAI,KAAK,SAAS,UAAU;AAC1B,aAAO,OAAO,KAAK,KAAK;AAAA,IAC1B;AACA,QAAI,KAAK,SAAS,WAAW;AAC3B,aAAO,KAAK,UAAU;AAAA,IACxB;AACA,QAAI,KAAK,SAAS,aAAa;AAC7B,aAAO;AAAA,IACT;AACA,QAAI,KAAK,SAAS,YAAY,KAAK,UAAU,QAAQ;AACnD,aAAO;AAAA,IACT;AACA,QAAI,KAAK,SAAS,YAAY,KAAK,cAAc;AAC/C,YAAM,EAAE,aAAa,IAAI;AACzB,UAAI,aAAa,YAAY,SAAS;AACpC,eAAO,aAAa,WACjB,OAAO,CAAC,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,EAClC,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,CAAC,EAClD,IAAI,SAAS;AAAA,MAClB;AACA,YAAM,MAA+B,CAAC;AACtC,iBAAW,KAAK,aAAa,YAAY;AACvC,YAAI,EAAE,IAAI,IAAI,UAAU,CAAC;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO,KAAK,SAAS,IAAI,KAAK,IAAI;AAAA,EACpC;AAEA,WAAS,aAAa,KAA4B;AAChD,QAAI,IAAI,UAAU,QAAW;AAC3B,aAAO,IAAI;AAAA,IACb;AACA,QAAI,IAAI,SAAS;AACf,YAAM,EAAE,QAAQ,IAAI;AACpB,UAAI,QAAQ,YAAY,SAAS;AAC/B,eAAO,QAAQ,WACZ,OAAO,CAAC,MAAM,QAAQ,KAAK,EAAE,IAAI,CAAC,EAClC,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,CAAC,EAClD,IAAI,SAAS;AAAA,MAClB;AACA,YAAM,MAA+B,CAAC;AACtC,iBAAW,QAAQ,QAAQ,YAAY;AACrC,YAAI,KAAK,IAAI,IAAI,UAAU,IAAI;AAAA,MACjC;AACA,aAAO;AAAA,IACT;AACA,WAAO,IAAI,eAAe,IAAI,IAAI,IAAI;AAAA,EACxC;AAEA,QAAM,gBAAgB,CAAC,cAA6B;AAClD,SAAK,IAAI,YAAY,SAAS;AAAA,MAC5B;AAAA,MACA,EAAE,iBAAiB,KAAK;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY,SAAS,OAAO,KAAK;AACrC,gBAAc;AACd,OAAK,IAAI,YAAY,SAAS,YAAY,wBAAwB;AAAA,IAChE,YAAY;AAAA,IACZ,wBAAwB;AAAA,IACxB,SAAS;AAAA,EACX,CAAC;AAED,iBAAe,kBAAkB,KAAmB,WAAsC;AACxF,QAAI,IAAI,SAAS,YAAY,IAAI,UAAU;AACzC,UAAI;AACF,cAAM,SAAkB,MAAM,IAAI,YAAY,SAAS;AAAA,UACrD;AAAA,UACA;AAAA,YACE,UAAU,IAAI;AAAA,YACd,qBACE;AAAA,YACF,eAAe;AAAA,UACjB;AAAA,UACA;AAAA,QACF;AACA,cAAM,MAAO,OAA0C,OAAO;AAC9D,YAAI,OAAO,QAAQ,UAAU;AAC3B,iBAAO,KAAK,MAAM,GAAG;AAAA,QACvB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO,aAAa,GAAG;AAAA,EACzB;AAEA,MAAI,YAAY,SAAS,GAAG,WAAW,CAAC,QAAQ,QAAQ,QAAQ,cAAc;AAC5E,QAAI,WAAW,2BAA2B;AACxC,YAAM,EAAE,WAAW,eAAe,IAAI;AACtC,oBAAc,cAAc;AAC5B;AAAA,IACF;AAEA,QAAI,WAAW,4BAA4B;AACzC;AAAA,IACF;AACA,UAAM,EAAE,MAAM,MAAAA,MAAK,IAAI;AACvB,QAAIA,MAAK,CAAC,GAAG,SAAS,YAAY,OAAOA,MAAK,CAAC,EAAE,KAAK,EAAE,SAAS,2BAA2B,GAAG;AAC7F;AAAA,IACF;AACA,UAAM,QACJ,SAAS,YAAY,SAAS,CAAC,OAAO,QAAQ,SAAS,MAAM,EAAE,SAAS,IAAI,IAAI,OAAO;AACzF,SAAK,QAAQ;AAAA,MACXA,MAAK,IAAI,CAAC,QAAQ,kBAAkB,KAAK,SAA+B,CAAC;AAAA,IAC3E,EAAE,KAAK,CAAC,mBAAmB;AACzB,UAAI,YAAY,KAAK,mBAAmB,EAAE,OAAO,MAAM,eAAe,CAAC;AAAA,IACzE,CAAC;AAAA,EACH,CAAC;AAED,OAAK,IAAI,QAAQ,oBAAoB,OAAO,IAAI,CAAC,EAAE;AACrD,CAAC;AAED,IAAI,GAAG,qBAAqB,MAAM;AAChC,MAAI,KAAK;AACX,CAAC;","names":["args"]}

package/dist/index.js

@@ -269,33 +269,14 @@ function createProxyCache() {
   };
 }
 
-// src/lib/config.ts
-import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-import { join as join4 } from "path";
-async function loadConfig(outputDir) {
-  try {
-    const content = await readFile2(join4(outputDir, "config.json"), "utf-8");
-    return JSON.parse(content);
-  } catch {
-    return {};
-  }
-}
-async function saveConfig(outputDir, config) {
-  await mkdir2(outputDir, { recursive: true });
-  await writeFile2(join4(outputDir, "config.json"), JSON.stringify(config, null, 2), "utf-8");
-}
-
-// src/ui/CredentialSetupUI.tsx
-import { useCallback, useEffect as useEffect2, useState as useState2 } from "react";
-import { Box as Box3, Text as Text3, useInput } from "ink";
-
 // src/lib/credentials.ts
-import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir2, readFile as readFile2, readdir as readdir2, writeFile as writeFile2 } from "fs/promises";
 import { homedir } from "os";
-import { dirname, join as join5 } from "path";
+import { dirname, join as join4 } from "path";
 var ENVIRONMENTS = ["go", "fmo", "staging", "integration", "test1"];
-var GLOBAL_CREDENTIALS_DIR = join5(homedir(), ".kizenappbuilder");
-var GLOBAL_CREDENTIALS_PATH = join5(GLOBAL_CREDENTIALS_DIR, "credentials.json");
+var GLOBAL_CREDENTIALS_DIR = join4(homedir(), ".kizenappbuilder");
+var GLOBAL_CREDENTIALS_PATH = join4(GLOBAL_CREDENTIALS_DIR, "credentials.json");
+var DEFAULT_PROFILE_NAME = "credentials";
 function isValidEnvironment(value) {
   return ENVIRONMENTS.includes(value);
 }
@@ -313,7 +294,7 @@ function parseCredentials(raw) {
   };
 }
 async function loadCredentialsFromFile(filePath) {
-  const content = await readFile3(filePath, "utf-8");
+  const content = await readFile2(filePath, "utf-8");
   return parseCredentials(JSON.parse(content));
 }
 async function loadGlobalCredentials() {
@@ -324,11 +305,63 @@ async function loadGlobalCredentials() {
   }
 }
 async function saveGlobalCredentials(credentials) {
-  await mkdir3(dirname(GLOBAL_CREDENTIALS_PATH), { recursive: true });
-  await writeFile3(GLOBAL_CREDENTIALS_PATH, JSON.stringify(credentials, null, 2), "utf-8");
+  await mkdir2(dirname(GLOBAL_CREDENTIALS_PATH), { recursive: true });
+  await writeFile2(GLOBAL_CREDENTIALS_PATH, JSON.stringify(credentials, null, 2), "utf-8");
+}
+function getProfilePath(name) {
+  return join4(GLOBAL_CREDENTIALS_DIR, `${name}.json`);
+}
+async function listCredentialProfiles() {
+  const profiles = [
+    { name: DEFAULT_PROFILE_NAME, path: GLOBAL_CREDENTIALS_PATH, isDefault: true }
+  ];
+  try {
+    const entries = await readdir2(GLOBAL_CREDENTIALS_DIR);
+    for (const entry of entries) {
+      if (!entry.endsWith(".json")) continue;
+      const name = entry.slice(0, -5);
+      if (name === DEFAULT_PROFILE_NAME) continue;
+      profiles.push({ name, path: join4(GLOBAL_CREDENTIALS_DIR, entry), isDefault: false });
+    }
+  } catch {
+  }
+  return profiles;
+}
+async function saveCredentialProfile(name, credentials) {
+  if (name === DEFAULT_PROFILE_NAME) {
+    await saveGlobalCredentials(credentials);
+    return;
+  }
+  await mkdir2(GLOBAL_CREDENTIALS_DIR, { recursive: true });
+  await writeFile2(getProfilePath(name), JSON.stringify(credentials, null, 2), "utf-8");
+}
+async function loadCredentialProfile(name) {
+  try {
+    return await loadCredentialsFromFile(getProfilePath(name));
+  } catch {
+    return null;
+  }
+}
+
+// src/lib/config.ts
+import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
+import { join as join5 } from "path";
+async function loadConfig(outputDir) {
+  try {
+    const content = await readFile3(join5(outputDir, "config.json"), "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return {};
+  }
+}
+async function saveConfig(outputDir, config) {
+  await mkdir3(outputDir, { recursive: true });
+  await writeFile3(join5(outputDir, "config.json"), JSON.stringify(config, null, 2), "utf-8");
 }
 
 // src/ui/CredentialSetupUI.tsx
+import { useCallback, useEffect as useEffect2, useState as useState2 } from "react";
+import { Box as Box3, Text as Text3, useInput } from "ink";
 import { jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
 var FIELDS = ["apiKey", "userId", "businessId"];
 var FIELD_LABELS = {
@@ -339,32 +372,39 @@ var FIELD_LABELS = {
 var Hint = ({ text }) => /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: text });
 var CredentialSetupUI = ({
   initialMode,
+  showProfileManager,
   onComplete,
   onCancel
 }) => {
   const [phase, setPhase] = useState2(
-    initialMode === "global" ? { type: "loading" } : { type: "mode-select", cursor: 0 }
+    initialMode === "global" && !showProfileManager ? { type: "loading" } : initialMode === "global" && showProfileManager ? { type: "profile-loading" } : { type: "mode-select", cursor: 0 }
   );
   const [inputBuffer, setInputBuffer] = useState2("");
   const [error, setError] = useState2(null);
+  const [activeProfileName, setActiveProfileName] = useState2(void 0);
   const handleModeChosen = useCallback(
     async (mode) => {
       if (mode === "local") {
         onComplete({ mode: "local", credentials: null });
         return;
       }
-      setPhase({ type: "loading" });
-      const existing = await loadGlobalCredentials();
-      const envCursor2 = existing ? Math.max(0, ENVIRONMENTS.indexOf(existing.environment)) : 0;
-      setPhase({
-        type: "creds-entry",
-        field: 0,
-        values: existing ?? {},
-        envCursor: envCursor2
-      });
+      setPhase({ type: "profile-loading" });
     },
     [onComplete]
   );
+  const handleProfileChosen = useCallback(async (profile) => {
+    if (profile === null) {
+      setPhase({ type: "profile-loading" });
+      const profiles = await listCredentialProfiles();
+      setPhase({ type: "name-entry", nameBuffer: "", existingProfiles: profiles });
+      return;
+    }
+    setActiveProfileName(profile.isDefault ? void 0 : profile.name);
+    setPhase({ type: "loading" });
+    const existing = profile.isDefault ? await loadGlobalCredentials() : await loadCredentialProfile(profile.name);
+    const envCursor2 = existing ? Math.max(0, ENVIRONMENTS.indexOf(existing.environment)) : 0;
+    setPhase({ type: "creds-entry", field: 0, values: existing ?? {}, envCursor: envCursor2 });
+  }, []);
   const handleSave = useCallback(
     async (values2, envCursor2) => {
       const environment = ENVIRONMENTS[envCursor2] ?? "go";
@@ -376,20 +416,32 @@ var CredentialSetupUI = ({
       };
       setPhase({ type: "saving" });
       try {
-        await saveGlobalCredentials(credentials);
-        onComplete({ mode: "global", credentials });
+        const profileName = activeProfileName ?? DEFAULT_PROFILE_NAME;
+        await saveCredentialProfile(profileName, credentials);
+        onComplete({
+          mode: "global",
+          credentials,
+          ...activeProfileName !== void 0 && { profileName: activeProfileName }
+        });
       } catch (err) {
         setError(err instanceof Error ? err.message : String(err));
         setPhase({ type: "creds-entry", field: 0, values: values2, envCursor: envCursor2 });
       }
     },
-    [onComplete]
+    [onComplete, activeProfileName]
   );
   useInput((input, key) => {
     if (key.ctrl && input === "c") {
       process.exit(0);
     }
     if (key.escape) {
+      if (phase.type === "creds-entry" || phase.type === "name-entry") {
+        if (initialMode === "global" && showProfileManager) {
+          setPhase({ type: "profile-loading" });
+          void loadProfileList();
+          return;
+        }
+      }
       onCancel?.();
       return;
     }
@@ -404,6 +456,49 @@ var CredentialSetupUI = ({
       }
       return;
     }
+    if (phase.type === "profile-select") {
+      const { profiles, cursor } = phase;
+      const addNewIdx = profiles.length;
+      const totalItems = profiles.length + 1;
+      if (key.upArrow) {
+        setPhase({ ...phase, cursor: (cursor - 1 + totalItems) % totalItems });
+      } else if (key.downArrow) {
+        setPhase({ ...phase, cursor: (cursor + 1) % totalItems });
+      } else if (key.return) {
+        if (cursor === addNewIdx) {
+          setPhase({ type: "name-entry", nameBuffer: "", existingProfiles: profiles });
+        } else {
+          void handleProfileChosen(profiles[cursor] ?? profiles[0]);
+        }
+      }
+      return;
+    }
+    if (phase.type === "name-entry") {
+      const { nameBuffer, nameError: _nameError, existingProfiles } = phase;
+      if (key.backspace || key.delete) {
+        setPhase({ type: "name-entry", nameBuffer: nameBuffer.slice(0, -1), existingProfiles });
+      } else if (key.return) {
+        const trimmed = nameBuffer.trim();
+        if (!trimmed) {
+          setPhase({ ...phase, nameError: "Name cannot be empty" });
+          return;
+        }
+        if (trimmed === DEFAULT_PROFILE_NAME) {
+          setPhase({ ...phase, nameError: `"${DEFAULT_PROFILE_NAME}" is reserved` });
+          return;
+        }
+        if (existingProfiles.some((p) => p.name === trimmed)) {
+          setPhase({ ...phase, nameError: `Profile "${trimmed}" already exists` });
+          return;
+        }
+        setActiveProfileName(trimmed);
+        setPhase({ type: "creds-entry", field: 0, values: {}, envCursor: 0 });
+        setInputBuffer("");
+      } else if (input && !key.ctrl && !key.meta) {
+        setPhase({ type: "name-entry", nameBuffer: nameBuffer + input, existingProfiles });
+      }
+      return;
+    }
     if (phase.type === "creds-entry") {
       const { field, values: values2, envCursor: envCursor2 } = phase;
       const isEnvField2 = field === FIELDS.length;
@@ -448,9 +543,22 @@ var CredentialSetupUI = ({
       }
     }
   });
+  const loadProfileList = useCallback(async () => {
+    const profiles = await listCredentialProfiles();
+    setPhase({ type: "profile-select", profiles, cursor: 0 });
+  }, []);
   useEffect2(() => {
-    if (initialMode === "global") {
-      void handleModeChosen("global");
+    if (phase.type === "profile-loading") {
+      void loadProfileList();
+    }
+  }, [phase.type, loadProfileList]);
+  useEffect2(() => {
+    if (initialMode === "global" && !showProfileManager) {
+      void (async () => {
+        const existing = await loadGlobalCredentials();
+        const envCursor2 = existing ? Math.max(0, ENVIRONMENTS.indexOf(existing.environment)) : 0;
+        setPhase({ type: "creds-entry", field: 0, values: existing ?? {}, envCursor: envCursor2 });
+      })();
     }
   }, []);
   useEffect2(() => {
@@ -458,8 +566,9 @@ var CredentialSetupUI = ({
       setInputBuffer(phase.values.apiKey ?? "");
     }
   }, [phase.type]);
-  if (phase.type === "loading" || phase.type === "saving") {
-    return /* @__PURE__ */ jsx3(Box3, { paddingY: 1, paddingX: 2, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: phase.type === "loading" ? "Loading credentials\u2026" : "Saving credentials\u2026" }) });
+  if (phase.type === "loading" || phase.type === "saving" || phase.type === "profile-loading") {
+    const label = phase.type === "saving" ? "Saving credentials\u2026" : phase.type === "profile-loading" ? "Loading profiles\u2026" : "Loading credentials\u2026";
+    return /* @__PURE__ */ jsx3(Box3, { paddingY: 1, paddingX: 2, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: label }) });
   }
   if (phase.type === "done") {
     return null;
@@ -489,8 +598,58 @@ var CredentialSetupUI = ({
       /* @__PURE__ */ jsx3(Hint, { text: "\u2191\u2193 to move \xB7 Enter to select \xB7 Ctrl+C to quit" })
     ] });
   }
+  if (phase.type === "profile-select") {
+    const { profiles, cursor } = phase;
+    const addNewIdx = profiles.length;
+    return /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", paddingY: 1, paddingX: 2, gap: 1, children: [
+      /* @__PURE__ */ jsx3(Logo, {}),
+      /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx3(Text3, { bold: true, color: "cyan", children: "Kizen App Builder" }),
+        /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "\u2500".repeat(24) })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", gap: 0, children: [
+        /* @__PURE__ */ jsx3(Text3, { bold: true, children: "Credential profiles" }),
+        profiles.map((profile, i) => {
+          const selected = cursor === i;
+          return /* @__PURE__ */ jsxs2(Box3, { gap: 2, children: [
+            /* @__PURE__ */ jsx3(Text3, { ...selected && { color: "cyan" }, children: selected ? "\u276F" : " " }),
+            /* @__PURE__ */ jsx3(Text3, { bold: selected, ...selected && { color: "cyan" }, children: profile.isDefault ? "Default" : profile.name }),
+            /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: profile.path })
+          ] }, profile.name);
+        }),
+        /* @__PURE__ */ jsxs2(Box3, { gap: 2, children: [
+          /* @__PURE__ */ jsx3(Text3, { ...cursor === addNewIdx && { color: "cyan" }, children: cursor === addNewIdx ? "\u276F" : " " }),
+          /* @__PURE__ */ jsx3(Text3, { bold: cursor === addNewIdx, ...cursor === addNewIdx && { color: "cyan" }, children: "+ Add new profile" })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsx3(Hint, { text: "\u2191\u2193 to move \xB7 Enter to select \xB7 Esc to cancel" })
+    ] });
+  }
+  if (phase.type === "name-entry") {
+    const { nameBuffer, nameError } = phase;
+    return /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", paddingY: 1, paddingX: 2, gap: 1, children: [
+      /* @__PURE__ */ jsx3(Logo, {}),
+      /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx3(Text3, { bold: true, color: "cyan", children: "Kizen App Builder" }),
+        /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "\u2500".repeat(24) })
+      ] }),
+      /* @__PURE__ */ jsx3(Box3, { flexDirection: "column", gap: 0, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: "New credential profile" }) }),
+      nameError && /* @__PURE__ */ jsxs2(Text3, { color: "red", children: [
+        "Error: ",
+        nameError
+      ] }),
+      /* @__PURE__ */ jsxs2(Box3, { gap: 2, children: [
+        /* @__PURE__ */ jsx3(Box3, { width: 12, children: /* @__PURE__ */ jsx3(Text3, { bold: true, color: "cyan", children: "Profile name" }) }),
+        /* @__PURE__ */ jsx3(Text3, { color: "cyan", children: ">" }),
+        /* @__PURE__ */ jsx3(Text3, { children: nameBuffer }),
+        /* @__PURE__ */ jsx3(Text3, { color: "cyan", children: "\u2588" })
+      ] }),
+      /* @__PURE__ */ jsx3(Hint, { text: "Type a name \xB7 Enter to confirm \xB7 Esc to go back" })
+    ] });
+  }
   const { field: activeField, values, envCursor } = phase;
   const isEnvField = activeField === FIELDS.length;
+  const profileLabel = activeProfileName !== void 0 ? activeProfileName : DEFAULT_PROFILE_NAME;
   return /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", paddingY: 1, paddingX: 2, gap: 1, children: [
     /* @__PURE__ */ jsx3(Logo, {}),
     /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", marginTop: 1, children: [
@@ -498,10 +657,10 @@ var CredentialSetupUI = ({
       /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "\u2500".repeat(24) })
     ] }),
     /* @__PURE__ */ jsxs2(Box3, { flexDirection: "column", gap: 0, children: [
-      /* @__PURE__ */ jsx3(Text3, { bold: true, children: "Global credentials" }),
+      /* @__PURE__ */ jsx3(Text3, { bold: true, children: activeProfileName !== void 0 ? `Profile: ${activeProfileName}` : "Global credentials" }),
       /* @__PURE__ */ jsxs2(Text3, { dimColor: true, children: [
         "Saved to: ",
-        GLOBAL_CREDENTIALS_PATH
+        activeProfileName !== void 0 ? `~/.kizenappbuilder/${activeProfileName}.json` : GLOBAL_CREDENTIALS_PATH
       ] })
     ] }),
     error && /* @__PURE__ */ jsxs2(Text3, { color: "red", children: [
@@ -531,7 +690,11 @@ var CredentialSetupUI = ({
         }) })
       ] })
     ] }),
-    isEnvField ? /* @__PURE__ */ jsx3(Hint, { text: "\u2190\u2192 to select \xB7 \u2191\u2193 to move \xB7 Enter to save \xB7 Esc to cancel" }) : /* @__PURE__ */ jsx3(Hint, { text: "\u2191\u2193 to move \xB7 Backspace to delete \xB7 Esc to cancel" })
+    isEnvField ? /* @__PURE__ */ jsx3(Hint, { text: "\u2190\u2192 to select \xB7 \u2191\u2193 to move \xB7 Enter to save \xB7 Esc to cancel" }) : /* @__PURE__ */ jsx3(Hint, { text: "\u2191\u2193 to move \xB7 Backspace to delete \xB7 Esc to cancel" }),
+    /* @__PURE__ */ jsxs2(Text3, { dimColor: true, children: [
+      "Profile: ",
+      profileLabel
+    ] })
   ] });
 };
 
@@ -591,7 +754,7 @@ async function fileExists(filePath) {
     return false;
   }
 }
-function createRequestHandler(viewerPath, createServerLog, createProxyLog, credentialsRef) {
+function createRequestHandler(viewerPath, createServerLog, createProxyLog, credentialsRef, activeProfileRef, outputDir, broadcast) {
   const proxyCache = createProxyCache();
   return (req, res) => {
     void (async () => {
@@ -603,6 +766,34 @@ function createRequestHandler(viewerPath, createServerLog, createProxyLog, crede
           res.end(credentialsRef.current !== null ? JSON.stringify(credentialsRef.current) : "{}");
           return;
         }
+        if (url === "/api/credential-profiles" && req.method === "GET") {
+          const profiles = await listCredentialProfiles();
+          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify({ profiles, active: activeProfileRef.current }));
+          return;
+        }
+        if (url === "/api/credentials/switch" && req.method === "POST") {
+          const chunks = [];
+          for await (const chunk of req) {
+            chunks.push(chunk);
+          }
+          const body = JSON.parse(Buffer.concat(chunks).toString("utf-8") || "{}");
+          const profileName = body.profile;
+          const creds = profileName === void 0 || profileName === "" ? await loadGlobalCredentials() : await loadCredentialProfile(profileName);
+          if (creds !== null) {
+            credentialsRef.current = creds;
+            activeProfileRef.current = profileName || void 0;
+            const active = activeProfileRef.current;
+            await saveConfig(outputDir, {
+              credentialMode: "global",
+              ...active !== void 0 && { activeCredentialProfile: active }
+            });
+            broadcast({ type: "credentials-updated", credentials: creds });
+          }
+          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify({ ok: creds !== null }));
+          return;
+        }
         if (url === "/api/bundle") {
           const bundlePath = join6(process.cwd(), ".kizenapp", "bundle.json");
           try {
@@ -686,10 +877,20 @@ function createRequestHandler(viewerPath, createServerLog, createProxyLog, crede
         res.writeHead(200, { "Content-Type": mimeType });
         createReadStream(resolvedPath).pipe(res);
       } catch (err) {
-        createProxyLog({
-          kind: "info",
-          message: `Error handling ${url}: ${err instanceof Error ? err.message : String(err)}`
-        });
+        if (url.startsWith("/api/proxy")) {
+          createProxyLog({
+            kind: "request",
+            method: req.method ?? "GET",
+            status: 502,
+            fromCache: false,
+            url: url.slice("/api/proxy".length) || "/"
+          });
+        } else {
+          createProxyLog({
+            kind: "info",
+            message: `Error handling ${url}: ${err instanceof Error ? err.message : String(err)}`
+          });
+        }
         if (!res.headersSent) {
           res.writeHead(502);
           res.end("Bad Gateway");
@@ -702,10 +903,16 @@ var DevUI = ({
   port,
   pluginDir,
   outputDir,
-  credentials: initialCredentials
+  credentials: initialCredentials,
+  credentialMode: initialCredentialMode,
+  activeCredentialProfile: initialActiveProfile
 }) => {
   const credentialsRef = useRef(initialCredentials);
+  const activeProfileRef = useRef(initialActiveProfile);
   const [credMode, setCredMode] = useState3("main");
+  const [credentialMode, setCredentialMode] = useState3(
+    initialCredentialMode
+  );
   const [status, setStatus] = useState3("starting");
   const [errorMessage, setErrorMessage] = useState3(null);
   const [serverLogHistory, setServerLogHistory] = useState3([]);
@@ -775,8 +982,14 @@ var DevUI = ({
   const handleCredentialsDone = useCallback2(
     (result) => {
       credentialsRef.current = result.credentials;
+      activeProfileRef.current = result.profileName;
       setCredMode("main");
-      void saveConfig(outputDir, { credentialMode: result.mode });
+      setCredentialMode(result.mode);
+      const profile = result.profileName;
+      void saveConfig(outputDir, {
+        credentialMode: result.mode,
+        ...profile !== void 0 && { activeCredentialProfile: profile }
+      });
       broadcast({ type: "credentials-updated", credentials: result.credentials });
     },
     [outputDir, broadcast]
@@ -862,7 +1075,10 @@ var DevUI = ({
         viewerPath,
         createServerLog,
         createProxyLog,
-        credentialsRef
+        credentialsRef,
+        activeProfileRef,
+        outputDir,
+        broadcast
       );
       const server = createServer(handler);
       const wss = new WebSocketServer({ server });
@@ -899,6 +1115,8 @@ var DevUI = ({
     return /* @__PURE__ */ jsx4(
       CredentialSetupUI,
       {
+        ...credentialMode !== void 0 && { initialMode: credentialMode },
+        showProfileManager: credentialMode === "global",
         onComplete: handleCredentialsDone,
         onCancel: () => {
           setCredMode("main");
@@ -1032,6 +1250,7 @@ function devCommand(program2) {
     ensureGitignore(pluginDir);
     let credentials = null;
     let credentialMode;
+    let activeCredentialProfile;
     if (options.credentials) {
       credentials = await loadCredentialsFromFile(options.credentials);
     } else {
@@ -1040,16 +1259,31 @@ function devCommand(program2) {
         credentialMode = "local";
       } else if (config.credentialMode === "global") {
         credentialMode = "global";
-        credentials = await loadGlobalCredentials();
+        activeCredentialProfile = config.activeCredentialProfile;
+        if (activeCredentialProfile) {
+          credentials = await loadCredentialProfile(activeCredentialProfile);
+          if (!credentials) {
+            credentials = await loadGlobalCredentials();
+            activeCredentialProfile = void 0;
+          }
+        } else {
+          credentials = await loadGlobalCredentials();
+        }
         if (!credentials) {
           const result = await runSetupUI("global");
           credentials = result.credentials;
+          activeCredentialProfile = result.profileName;
         }
       } else {
         const result = await runSetupUI();
         credentials = result.credentials;
         credentialMode = result.mode;
-        await saveConfig(outputDir, { credentialMode: result.mode });
+        activeCredentialProfile = result.profileName;
+        const profile = result.profileName;
+        await saveConfig(outputDir, {
+          credentialMode: result.mode,
+          ...profile !== void 0 && { activeCredentialProfile: profile }
+        });
       }
     }
     const { waitUntilExit } = render2(
@@ -1058,7 +1292,8 @@ function devCommand(program2) {
         pluginDir,
         outputDir,
         credentials,
-        ...credentialMode !== void 0 && { credentialMode }
+        ...credentialMode !== void 0 && { credentialMode },
+        ...activeCredentialProfile !== void 0 && { activeCredentialProfile }
       }),
       { exitOnCtrlC: false }
     );