@trops/dash-core 0.1.833 → 0.1.834

package/dist/electron/index.js

@@ -1,8 +1,8 @@
 'use strict';
 
 var require$$0$2 = require('electron');
-var require$$1$2 = require('path');
 var require$$0$3 = require('fs');
+var require$$1$2 = require('path');
 var require$$0$4 = require('crypto');
 var require$$2$1 = require('os');
 var require$$3$1 = require('adm-zip');
@@ -1320,7 +1320,7 @@ var secureStoreController$1 = {
   decryptString,
 };
 
-const path$t = require$$1$2;
+const path$r = require$$1$2;
 const {
   readFileSync,
   writeFileSync: writeFileSync$3,
@@ -1338,7 +1338,7 @@ const {
 function ensureDirectoryExistence$1(filePath) {
   try {
     // isDirectory
-    var dirname = path$t.dirname(filePath);
+    var dirname = path$r.dirname(filePath);
     // check if the directory exists...return true
     // if not, we can pass in the dirname as the filepath
     // and check each directory recursively.
@@ -1453,7 +1453,7 @@ function removeFilesFromDirectory(directory, excludeFiles = []) {
 
       for (const file of files) {
         if (!excludeFiles.includes(file)) {
-          unlinkSync(path$t.join(directory, file), (err) => {
+          unlinkSync(path$r.join(directory, file), (err) => {
             if (err) throw err;
           });
         }
@@ -1470,6 +1470,269 @@ var file = {
   checkDirectory: checkDirectory$1,
 };
 
+var profileStore$2 = {exports: {}};
+
+/**
+ * profileStore.js
+ *
+ * The list of profiles for an app and which one is active, kept in
+ * <userData>/Dashboard/<appId>/profiles.json:
+ *
+ *   { activeProfileId, profiles: [{ id, name, createdAt }] }
+ *
+ * Until a second profile is created the file doesn't exist and the app
+ * has one profile, Default, whose data stays in Dashboard/<appId>/ exactly
+ * as before profiles existed. Other profiles live in
+ * Dashboard/<appId>/profiles/<id>/.
+ */
+
+const { app: app$c } = require$$0$2;
+const path$q = require$$1$2;
+const fs$m = require$$0$3;
+
+const appName$2 = "Dashboard";
+const storeFilename = "profiles.json";
+const profilesDirname = "profiles";
+
+const DEFAULT_PROFILE_ID = "default";
+const DEFAULT_PROFILE_NAME = "Default";
+
+// Ids we create are "p-<base36>"; only these are ever used in a path.
+const PROFILE_ID_PATTERN = /^[a-z0-9-]{1,64}$/;
+
+const cache$3 = new Map();
+
+function getAppRootDir(appId) {
+  if (!appId || typeof appId !== "string") {
+    throw new Error("profileStore: appId is required");
+  }
+  return path$q.join(app$c.getPath("userData"), appName$2, appId);
+}
+
+function getStorePath(appId) {
+  return path$q.join(getAppRootDir(appId), storeFilename);
+}
+
+function defaultStore() {
+  return {
+    activeProfileId: DEFAULT_PROFILE_ID,
+    profiles: [{ id: DEFAULT_PROFILE_ID, name: DEFAULT_PROFILE_NAME }],
+  };
+}
+
+// A missing or unreadable file means "Default only" — never an error, so
+// a damaged profiles.json can't hide the user's dashboards.
+function normalize$1(raw) {
+  const base = defaultStore();
+  if (!raw || !Array.isArray(raw.profiles)) return base;
+  const profiles = raw.profiles.filter(
+    (p) =>
+      p &&
+      typeof p.id === "string" &&
+      PROFILE_ID_PATTERN.test(p.id) &&
+      p.id !== DEFAULT_PROFILE_ID,
+  );
+  const defaultEntry = raw.profiles.find(
+    (p) => p && p.id === DEFAULT_PROFILE_ID,
+  );
+  const all = [{ ...base.profiles[0], ...defaultEntry }, ...profiles];
+  const activeProfileId = all.some((p) => p.id === raw.activeProfileId)
+    ? raw.activeProfileId
+    : DEFAULT_PROFILE_ID;
+  return { activeProfileId, profiles: all };
+}
+
+function readStore(appId) {
+  if (cache$3.has(appId)) return cache$3.get(appId);
+  let raw = null;
+  try {
+    raw = JSON.parse(fs$m.readFileSync(getStorePath(appId), "utf8"));
+  } catch (e) {
+    raw = null;
+  }
+  const store = normalize$1(raw);
+  cache$3.set(appId, store);
+  return store;
+}
+
+function writeStore(appId, store) {
+  const file = getStorePath(appId);
+  fs$m.mkdirSync(path$q.dirname(file), { recursive: true });
+  fs$m.writeFileSync(file, JSON.stringify(store, null, 2));
+  cache$3.set(appId, store);
+  return store;
+}
+
+function sameName(a, b) {
+  return a.trim().toLowerCase() === b.trim().toLowerCase();
+}
+
+function cleanName(name) {
+  const trimmed = typeof name === "string" ? name.trim() : "";
+  if (!trimmed) throw new Error("A profile needs a name");
+  if (trimmed.length > 60)
+    throw new Error("Profile names are 60 characters or fewer");
+  return trimmed;
+}
+
+function findProfile(store, profileId) {
+  const profile = store.profiles.find((p) => p.id === profileId);
+  if (!profile) throw new Error(`No profile with id ${profileId}`);
+  return profile;
+}
+
+function newProfileId(store) {
+  let id;
+  do {
+    id = `p-${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+  } while (store.profiles.some((p) => p.id === id));
+  return id;
+}
+
+/**
+ * The folder holding a profile's per-profile files. Default keeps the
+ * app folder itself.
+ */
+function getProfileDir(appId, profileId) {
+  if (profileId === DEFAULT_PROFILE_ID) return getAppRootDir(appId);
+  if (!PROFILE_ID_PATTERN.test(profileId || "")) {
+    throw new Error(`Invalid profile id: ${profileId}`);
+  }
+  return path$q.join(getAppRootDir(appId), profilesDirname, profileId);
+}
+
+const profileStore$1 = {
+  list(appId) {
+    return readStore(appId).profiles.map((p) => ({ ...p }));
+  },
+
+  getActiveProfileId(appId) {
+    return readStore(appId).activeProfileId;
+  },
+
+  getActive(appId) {
+    const store = readStore(appId);
+    return { ...findProfile(store, store.activeProfileId) };
+  },
+
+  create(appId, name) {
+    const store = readStore(appId);
+    const clean = cleanName(name);
+    if (store.profiles.some((p) => sameName(p.name, clean))) {
+      throw new Error(`A profile named "${clean}" already exists`);
+    }
+    const profile = {
+      id: newProfileId(store),
+      name: clean,
+      createdAt: new Date().toISOString(),
+    };
+    writeStore(appId, {
+      ...store,
+      profiles: [...store.profiles, profile],
+    });
+    fs$m.mkdirSync(getProfileDir(appId, profile.id), { recursive: true });
+    return { ...profile };
+  },
+
+  rename(appId, profileId, name) {
+    const store = readStore(appId);
+    findProfile(store, profileId);
+    const clean = cleanName(name);
+    if (
+      store.profiles.some((p) => p.id !== profileId && sameName(p.name, clean))
+    ) {
+      throw new Error(`A profile named "${clean}" already exists`);
+    }
+    const profiles = store.profiles.map((p) =>
+      p.id === profileId ? { ...p, name: clean } : p,
+    );
+    writeStore(appId, { ...store, profiles });
+    return { ...profiles.find((p) => p.id === profileId) };
+  },
+
+  /**
+   * Removes a profile and its folder. Default and the active profile
+   * can't be deleted.
+   */
+  remove(appId, profileId) {
+    const store = readStore(appId);
+    findProfile(store, profileId);
+    if (profileId === DEFAULT_PROFILE_ID) {
+      throw new Error("The Default profile can't be deleted");
+    }
+    if (profileId === store.activeProfileId) {
+      throw new Error("Switch to another profile before deleting this one");
+    }
+    writeStore(appId, {
+      ...store,
+      profiles: store.profiles.filter((p) => p.id !== profileId),
+    });
+    fs$m.rmSync(getProfileDir(appId, profileId), {
+      recursive: true,
+      force: true,
+    });
+    return { success: true };
+  },
+
+  setActive(appId, profileId) {
+    const store = readStore(appId);
+    findProfile(store, profileId);
+    writeStore(appId, { ...store, activeProfileId: profileId });
+    return { ...findProfile(store, profileId) };
+  },
+
+  getProfileDir,
+  getAppRootDir,
+
+  // Tests only: forget what was read so the next call reads the disk.
+  _resetCache() {
+    cache$3.clear();
+  },
+};
+
+profileStore$2.exports = profileStore$1;
+profileStore$2.exports.DEFAULT_PROFILE_ID = DEFAULT_PROFILE_ID;
+profileStore$2.exports.DEFAULT_PROFILE_NAME = DEFAULT_PROFILE_NAME;
+
+var profileStoreExports = profileStore$2.exports;
+
+/**
+ * profilePaths.js
+ *
+ * Where the active profile's files live. Controllers for per-profile data
+ * (dashboards, folders, themes, layouts, ratings) build their paths here
+ * instead of joining userData/Dashboard/<appId> themselves, so switching
+ * profile switches every one of them together.
+ *
+ * Shared data (providers, settings, widget data, installed widgets) is
+ * not per profile and keeps its own paths.
+ */
+
+const path$p = require$$1$2;
+const profileStore = profileStoreExports;
+
+/**
+ * @param {string} appId
+ * @param {string} [profileId] defaults to the active profile
+ * @returns {string} the profile's data folder
+ */
+function getProfileDataDir$1(appId, profileId) {
+  const id = profileId || profileStore.getActiveProfileId(appId);
+  return profileStore.getProfileDir(appId, id);
+}
+
+/**
+ * @param {string} appId
+ * @param {string} filename e.g. "workspaces.json"
+ * @param {string} [profileId] defaults to the active profile
+ * @returns {string} the file's path inside the profile's folder
+ */
+function getProfileFilePath$6(appId, filename, profileId) {
+  return path$p.join(getProfileDataDir$1(appId, profileId), filename);
+}
+
+var profilePaths = { getProfileDataDir: getProfileDataDir$1, getProfileFilePath: getProfileFilePath$6 };
+
 /**
  * workspaceEvents.js
  *
@@ -1502,14 +1765,12 @@ function emitWorkspaceDeleted$1(workspaceId) {
 
 var workspaceEvents = { onWorkspaceDeleted: onWorkspaceDeleted$1, emitWorkspaceDeleted: emitWorkspaceDeleted$1 };
 
-const { app: app$g } = require$$0$2;
-const path$s = require$$1$2;
 const { writeFileSync: writeFileSync$2 } = require$$0$3;
 const { getFileContents: getFileContents$7 } = file;
+const { getProfileFilePath: getProfileFilePath$5 } = profilePaths;
 const { emitWorkspaceDeleted } = workspaceEvents;
 
 const configFilename$5 = "workspaces.json";
-const appName$7 = "Dashboard";
 
 const workspaceController$3 = {
   /**
@@ -1551,12 +1812,7 @@ const workspaceController$3 = {
   saveWorkspaceForApplication: (win, appId, workspaceObject) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$s.join(
-        app$g.getPath("userData"),
-        appName$7,
-        appId,
-        configFilename$5,
-      );
+      const filename = getProfileFilePath$5(appId, configFilename$5);
       const workspacesArray = getFileContents$7(filename);
 
       // lets check to see if we already have this one!
@@ -1600,12 +1856,7 @@ const workspaceController$3 = {
   saveMenuItemsForApplication: (win, appId, menuItems) => {
     try {
       // filename to the workspaces file
-      const filename = path$s.join(
-        app$g.getPath("userData"),
-        appName$7,
-        appId,
-        configFilename$5,
-      );
+      const filename = getProfileFilePath$5(appId, configFilename$5);
       const workspacesArray = getFileContents$7(filename);
 
       // Update menu items for workspaces
@@ -1649,12 +1900,7 @@ const workspaceController$3 = {
    */
   deleteWorkspaceForApplication: (win, appId, workspaceId) => {
     try {
-      const filename = path$s.join(
-        app$g.getPath("userData"),
-        appName$7,
-        appId,
-        configFilename$5,
-      );
+      const filename = getProfileFilePath$5(appId, configFilename$5);
       const workspacesArray = getFileContents$7(filename);
 
       const filtered = workspacesArray.filter(
@@ -1688,12 +1934,7 @@ const workspaceController$3 = {
 
   listWorkspacesForApplication: (win, appId) => {
     try {
-      const filename = path$s.join(
-        app$g.getPath("userData"),
-        appName$7,
-        appId,
-        configFilename$5,
-      );
+      const filename = getProfileFilePath$5(appId, configFilename$5);
 
       const workspacesArray = getFileContents$7(filename);
       console.log(
@@ -1716,12 +1957,7 @@ const workspaceController$3 = {
 
   listMenuItemsForApplication: (win, appId) => {
     try {
-      const filename = path$s.join(
-        app$g.getPath("userData"),
-        appName$7,
-        appId,
-        configFilename$5,
-      );
+      const filename = getProfileFilePath$5(appId, configFilename$5);
       const workspacesArray = getFileContents$7(filename);
 
       // Extract unique menu items from workspaces
@@ -1760,13 +1996,11 @@ const workspaceController$3 = {
 
 var workspaceController_1 = workspaceController$3;
 
-const { app: app$f } = require$$0$2;
-const path$r = require$$1$2;
 const { writeFileSync: writeFileSync$1 } = require$$0$3;
 const { getFileContents: getFileContents$6 } = file;
+const { getProfileFilePath: getProfileFilePath$4 } = profilePaths;
 
 const configFilename$4 = "themes.json";
-const appName$6 = "Dashboard";
 
 const themeController$5 = {
   /**
@@ -1781,12 +2015,7 @@ const themeController$5 = {
   saveThemeForApplication: (win, appId, name, obj) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$r.join(
-        app$f.getPath("userData"),
-        appName$6,
-        appId,
-        configFilename$4,
-      );
+      const filename = getProfileFilePath$4(appId, configFilename$4);
       const data = getFileContents$6(filename, {});
 
       // Add/update the theme based on the name
@@ -1827,12 +2056,7 @@ const themeController$5 = {
    */
   listThemesForApplication: (win, appId) => {
     try {
-      const filename = path$r.join(
-        app$f.getPath("userData"),
-        appName$6,
-        appId,
-        configFilename$4,
-      );
+      const filename = getProfileFilePath$4(appId, configFilename$4);
 
       const data = getFileContents$6(filename, {});
 
@@ -1869,12 +2093,7 @@ const themeController$5 = {
    */
   deleteThemeForApplication: (win, appId, themeKey) => {
     try {
-      const filename = path$r.join(
-        app$f.getPath("userData"),
-        appName$6,
-        appId,
-        configFilename$4,
-      );
+      const filename = getProfileFilePath$4(appId, configFilename$4);
       const data = getFileContents$6(filename, {});
 
       if (themeKey in data) {
@@ -1946,9 +2165,9 @@ var themeController_1 = themeController$5;
  *      `/data/`.
  */
 
-const path$q = require$$1$2;
+const path$o = require$$1$2;
 const fs$l = require$$0$3;
-const { app: app$e } = require$$0$2;
+const { app: app$b } = require$$0$2;
 
 const APP_NAME = "Dashboard";
 
@@ -1957,10 +2176,10 @@ const APP_NAME = "Dashboard";
  * @returns {string[]} ordered allowed roots for that category
  */
 function getAllowedRoots$2(category) {
-  const userData = app$e.getPath("userData");
+  const userData = app$b.getPath("userData");
   switch (category) {
     case "data": {
-      const def = path$q.join(userData, APP_NAME, "data");
+      const def = path$o.join(userData, APP_NAME, "data");
       // The user can configure a custom data directory in
       // Settings → General → Data Directory. If set, that
       // location is ALSO an allowed root. We don't replace the
@@ -1970,13 +2189,13 @@ function getAllowedRoots$2(category) {
       return override ? [def, override] : [def];
     }
     case "themes":
-      return [path$q.join(userData, APP_NAME, "themes")];
+      return [path$o.join(userData, APP_NAME, "themes")];
     case "widgets":
-      return [path$q.join(userData, "widgets")];
+      return [path$o.join(userData, "widgets")];
     case "plugins":
-      return [path$q.join(userData, "plugins")];
+      return [path$o.join(userData, "plugins")];
     case "downloads":
-      return [app$e.getPath("downloads")];
+      return [app$b.getPath("downloads")];
     default:
       throw new Error("safePath: unknown allowed-roots category: " + category);
   }
@@ -1991,8 +2210,8 @@ function getAllowedRoots$2(category) {
  */
 function readDataDirectoryFromSettings() {
   try {
-    const settingsPath = path$q.join(
-      app$e.getPath("userData"),
+    const settingsPath = path$o.join(
+      app$b.getPath("userData"),
       APP_NAME,
       "settings.json",
     );
@@ -2023,7 +2242,7 @@ function safePath$4(requested, allowedRoots) {
     throw new Error("safePath: allowedRoots must be a non-empty array");
   }
 
-  const resolved = path$q.resolve(requested);
+  const resolved = path$o.resolve(requested);
 
   // Real-path through symlinks. If the file doesn't exist yet (a
   // create-new operation), real-path the parent so a symlink in the
@@ -2033,8 +2252,8 @@ function safePath$4(requested, allowedRoots) {
     real = fs$l.realpathSync(resolved);
   } catch (_e) {
     try {
-      const parent = fs$l.realpathSync(path$q.dirname(resolved));
-      real = path$q.join(parent, path$q.basename(resolved));
+      const parent = fs$l.realpathSync(path$o.dirname(resolved));
+      real = path$o.join(parent, path$o.basename(resolved));
     } catch (_e2) {
       // Parent doesn't exist either. Use the resolved-but-not-
       // real path; the caller's mkdirSync will happen inside the
@@ -2053,7 +2272,7 @@ function safePath$4(requested, allowedRoots) {
     }
     // Exact match OR strictly-inside (with separator to prevent
     // /data-evil/ matching /data/).
-    if (real === realRoot || real.startsWith(realRoot + path$q.sep)) {
+    if (real === realRoot || real.startsWith(realRoot + path$o.sep)) {
       return real;
     }
   }
@@ -2176,8 +2395,8 @@ var fsGrantAttribution = { dataFileOwner, dropMisattributedFsPaths: dropMisattri
  */
 
 const fs$k = require$$0$3;
-const path$p = require$$1$2;
-const { app: app$d } = require$$0$2;
+const path$n = require$$1$2;
+const { app: app$a } = require$$0$2;
 const { dropMisattributedFsPaths } = fsGrantAttribution;
 
 const FILE_NAME = "widgetMcpGrants.json";
@@ -2189,7 +2408,7 @@ const FS_CLEANUP_MARK = "widgetMcpGrants.fs-attribution-cleaned";
 let _cache$1 = null;
 
 function grantsFilePath() {
-  return path$p.join(app$d.getPath("userData"), FILE_NAME);
+  return path$n.join(app$a.getPath("userData"), FILE_NAME);
 }
 
 function loadFromDisk() {
@@ -2212,7 +2431,7 @@ function loadFromDisk() {
  * failed save leaves the mark unwritten, so the next load tries again.
  */
 function cleanMisattributedOnce(parsed) {
-  const mark = path$p.join(path$p.dirname(grantsFilePath()), FS_CLEANUP_MARK);
+  const mark = path$n.join(path$n.dirname(grantsFilePath()), FS_CLEANUP_MARK);
   if (fs$k.existsSync(mark)) return parsed;
   const { grants, removed } = dropMisattributedFsPaths(parsed);
   try {
@@ -2236,7 +2455,7 @@ function writeToDisk(data) {
   const tmp = p + ".tmp";
   // Ensure parent dir exists (userData should already, but be defensive
   // for first-launch / freshly-cleared profile cases).
-  fs$k.mkdirSync(path$p.dirname(p), { recursive: true });
+  fs$k.mkdirSync(path$n.dirname(p), { recursive: true });
   fs$k.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf8");
   fs$k.renameSync(tmp, p);
 }
@@ -2998,7 +3217,7 @@ function commonjsRequire(path) {
  */
 
 const fs$j = require$$0$3;
-const path$o = require$$1$2;
+const path$m = require$$1$2;
 const { builtinModules } = require$$2;
 
 // Provided by the host app via MODULE_MAP in widgetBundleLoader.js — never
@@ -3034,7 +3253,7 @@ const CODE = /\.(?:js|jsx|ts|tsx|mjs|cjs)$/;
 function sourceFiles(dir, rel = "") {
   let entries;
   try {
-    entries = fs$j.readdirSync(path$o.join(dir, rel), { withFileTypes: true });
+    entries = fs$j.readdirSync(path$m.join(dir, rel), { withFileTypes: true });
   } catch (_e) {
     return [];
   }
@@ -3106,7 +3325,7 @@ const VALID_NAME = /^(?:@[a-z0-9~-][a-z0-9._~-]*\/)?[a-z0-9~-][a-z0-9._~-]*$/i;
 function findLibraryImports(dir) {
   const found = new Set();
   for (const rel of sourceFiles(dir)) {
-    const source = fs$j.readFileSync(path$o.join(dir, rel), "utf8");
+    const source = fs$j.readFileSync(path$m.join(dir, rel), "utf8");
     const code = codeMask(source);
     for (const re of IMPORTS) {
       re.lastIndex = 0;
@@ -3129,7 +3348,7 @@ function findLibraryImports(dir) {
 /** The version of a library installed in one of `paths` (node_modules). */
 function installedVersion(name, paths) {
   for (const p of paths || []) {
-    const file = path$o.join(p, ...name.split("/"), "package.json");
+    const file = path$m.join(p, ...name.split("/"), "package.json");
     try {
       const v = JSON.parse(fs$j.readFileSync(file, "utf8")).version;
       if (typeof v === "string" && v) return v;
@@ -3149,7 +3368,7 @@ function libraryDependencies(dir, paths) {
   let listed = {};
   try {
     const pkg = JSON.parse(
-      fs$j.readFileSync(path$o.join(dir, "package.json"), "utf8"),
+      fs$j.readFileSync(path$m.join(dir, "package.json"), "utf8"),
     );
     if (pkg && pkg.dependencies && typeof pkg.dependencies === "object") {
       listed = pkg.dependencies;
@@ -3686,7 +3905,7 @@ function requireWidgetLibraries () {
  */
 
 const fs$i = require$$0$3;
-const path$n = require$$1$2;
+const path$l = require$$1$2;
 
 // Provided by the host app via MODULE_MAP in widgetBundleLoader.js — never
 // bundled (utils/libraryImports.js).
@@ -3705,13 +3924,13 @@ const {
  */
 function hostLibraryPaths(dir = __dirname) {
   const out = [];
-  let at = path$n.resolve(dir);
+  let at = path$l.resolve(dir);
   for (;;) {
-    if (path$n.basename(at) !== "node_modules") {
-      const candidate = path$n.join(at, "node_modules");
+    if (path$l.basename(at) !== "node_modules") {
+      const candidate = path$l.join(at, "node_modules");
       if (fs$i.existsSync(candidate)) out.push(candidate);
     }
-    const up = path$n.dirname(at);
+    const up = path$l.dirname(at);
     if (up === at) break;
     at = up;
   }
@@ -3722,8 +3941,8 @@ function hostLibraryPaths(dir = __dirname) {
 function copyDir(from, to) {
   fs$i.mkdirSync(to, { recursive: true });
   for (const name of fs$i.readdirSync(from)) {
-    const src = path$n.join(from, name);
-    const dest = path$n.join(to, name);
+    const src = path$l.join(from, name);
+    const dest = path$l.join(to, name);
     if (fs$i.statSync(src).isDirectory()) copyDir(src, dest);
     else fs$i.writeFileSync(dest, fs$i.readFileSync(src));
   }
@@ -3736,10 +3955,10 @@ function copyDir(from, to) {
  */
 function mirrorLibrary(spec, fromPaths, toDir) {
   const name = packageNameOf(spec);
-  const dest = path$n.join(toDir, ...name.split("/"));
+  const dest = path$l.join(toDir, ...name.split("/"));
   if (fs$i.existsSync(dest)) return true;
   for (const from of fromPaths) {
-    const src = path$n.join(from, ...name.split("/"));
+    const src = path$l.join(from, ...name.split("/"));
     if (fs$i.existsSync(src)) {
       copyDir(src, dest);
       return true;
@@ -3778,19 +3997,19 @@ function appFolder() {
  */
 function libraryResolution(dir = __dirname) {
   const paths = libraryPaths(dir);
-  const inAsar = paths.filter((p) => p.includes(`.asar${path$n.sep}`));
+  const inAsar = paths.filter((p) => p.includes(`.asar${path$l.sep}`));
   if (!inAsar.length) return { nodePaths: paths, plugins: [] };
   let cache;
   try {
     const { app } = require("electron");
-    cache = path$n.join(
+    cache = path$l.join(
       app.getPath("userData"),
       "widget-build-libraries",
       app.getVersion(),
       "node_modules",
     );
   } catch (_e) {
-    cache = path$n.join(
+    cache = path$l.join(
       require$$2$1.tmpdir(),
       "dash-widget-build-libraries",
       "node_modules",
@@ -3818,13 +4037,13 @@ function libraryResolution(dir = __dirname) {
 /** A file in esbuild's error, short: "widgets/A.js", else its name. */
 function shortFile(file) {
   const f = String(file || "")
-    .split(path$n.sep)
+    .split(path$l.sep)
     .join("/");
   return f.includes("/widgets/")
     ? `widgets/${f.split("/widgets/").pop()}`
     : f.startsWith("widgets/")
       ? f
-      : path$n.basename(f);
+      : path$l.basename(f);
 }
 
 /**
@@ -3838,7 +4057,7 @@ function friendlyCompileError(error) {
     const loc = e.location || {};
     const missing = /^Could not resolve "(.+)"/.exec(e.text || "");
     if (missing && /^[./]/.test(missing[1])) {
-      return `${path$n.basename(String(loc.file || "a file"))} imports "${missing[1]}", which isn't in the package.`;
+      return `${path$l.basename(String(loc.file || "a file"))} imports "${missing[1]}", which isn't in the package.`;
     }
     if (missing) {
       return `This widget needs the library "${packageNameOf(missing[1])}", which this app doesn't include.`;
@@ -3885,7 +4104,7 @@ function getEsbuildDiagnostics() {
 
   try {
     const pkgJsonPath = require.resolve("esbuild/package.json");
-    diagnostics.esbuildPackageDir = path$n.dirname(pkgJsonPath);
+    diagnostics.esbuildPackageDir = path$l.dirname(pkgJsonPath);
     diagnostics.esbuildVersion = commonjsRequire(pkgJsonPath).version;
   } catch (err) {
     diagnostics.esbuildResolveError = err.message;
@@ -3895,13 +4114,13 @@ function getEsbuildDiagnostics() {
     const archPkgJson = require.resolve(
       `${diagnostics.archPackage}/package.json`,
     );
-    const archDir = path$n.dirname(archPkgJson);
+    const archDir = path$l.dirname(archPkgJson);
     // esbuild's native binary on macOS/Linux is bin/esbuild;
     // on Windows it's esbuild.exe at the package root.
     const candidate =
       process.platform === "win32"
-        ? path$n.join(archDir, "esbuild.exe")
-        : path$n.join(archDir, "bin", "esbuild");
+        ? path$l.join(archDir, "esbuild.exe")
+        : path$l.join(archDir, "bin", "esbuild");
     diagnostics.nativeBinaryPath = candidate;
     diagnostics.nativeBinaryExists = fs$i.existsSync(candidate);
   } catch (err) {
@@ -3949,19 +4168,19 @@ async function healthCheck() {
  * @returns {string|null} Path to the widgets/ directory, or null
  */
 function findWidgetsDir$2(widgetPath) {
-  const direct = path$n.join(widgetPath, "widgets");
+  const direct = path$l.join(widgetPath, "widgets");
   if (fs$i.existsSync(direct)) {
     return direct;
   }
 
   // Check configs/widgets/ (packageZip.js nests .dash.js files here)
-  const configsWidgets = path$n.join(widgetPath, "configs", "widgets");
+  const configsWidgets = path$l.join(widgetPath, "configs", "widgets");
   if (fs$i.existsSync(configsWidgets)) {
     return configsWidgets;
   }
 
   // Check configs/ directory (used by packageZip.js for distributed widgets)
-  const configs = path$n.join(widgetPath, "configs");
+  const configs = path$l.join(widgetPath, "configs");
   if (fs$i.existsSync(configs)) {
     return configs;
   }
@@ -3978,7 +4197,7 @@ function findWidgetsDir$2(widgetPath) {
     );
 
     for (const subdir of subdirs) {
-      const nested = path$n.join(widgetPath, subdir.name, "widgets");
+      const nested = path$l.join(widgetPath, subdir.name, "widgets");
       if (fs$i.existsSync(nested)) {
         console.log(`[WidgetCompiler] Found nested widgets/ at ${nested}`);
         return nested;
@@ -4038,15 +4257,15 @@ async function compileWidget$1(
   // since widgetsDir may be nested (e.g., ./weather-widget/widgets/).
   // Built elsewhere (outDir), the entry imports the sources by full path.
   const relWidgetsDir = outDir
-    ? path$n.resolve(widgetsDir).split(path$n.sep).join("/")
-    : "./" + path$n.relative(widgetPath, widgetsDir).split(path$n.sep).join("/");
+    ? path$l.resolve(widgetsDir).split(path$l.sep).join("/")
+    : "./" + path$l.relative(widgetPath, widgetsDir).split(path$l.sep).join("/");
   const imports = [];
   const exportParts = [];
 
   for (const dashFile of dashFiles) {
     const componentName = dashFile.replace(".dash.js", "");
     const componentFile = `${componentName}.js`;
-    const componentFilePath = path$n.join(widgetsDir, componentFile);
+    const componentFilePath = path$l.join(widgetsDir, componentFile);
     const hasComponent = fs$i.existsSync(componentFilePath);
 
     // Import the config (always)
@@ -4079,9 +4298,9 @@ async function compileWidget$1(
   const entryContent = [...imports, "", ...exportParts, ""].join("\n");
 
   // Write temporary entry file in the widget root (or beside the build)
-  const distDir = outDir || path$n.join(widgetPath, "dist");
-  const entryPath = path$n.join(outDir || widgetPath, "__compile_entry.js");
-  const outPath = path$n.join(distDir, "index.cjs.js");
+  const distDir = outDir || path$l.join(widgetPath, "dist");
+  const entryPath = path$l.join(outDir || widgetPath, "__compile_entry.js");
+  const outPath = path$l.join(distDir, "index.cjs.js");
   // The package's own libraries (package.json dependencies), downloaded
   // into a temp folder for this build (consolidation Phase 1a-3).
   let own = null;
@@ -10721,7 +10940,7 @@ var dashConfigParser = { parseDashConfig: parseDashConfig$3, DashConfigParseErro
  */
 
 const fs$h = require$$0$3;
-const path$m = require$$1$2;
+const path$k = require$$1$2;
 const { findWidgetsDir: findWidgetsDir$1 } = widgetCompiler$1;
 const { parseDashConfig: parseDashConfig$2 } = dashConfigParser;
 
@@ -10762,9 +10981,9 @@ class DynamicWidgetLoader {
       );
 
       const widgetsDir =
-        findWidgetsDir$1(widgetPath) || path$m.join(widgetPath, "widgets");
-      const componentPath = path$m.join(widgetsDir, `${componentName}.js`);
-      const configPath = path$m.join(widgetsDir, `${componentName}.dash.js`);
+        findWidgetsDir$1(widgetPath) || path$k.join(widgetPath, "widgets");
+      const componentPath = path$k.join(widgetsDir, `${componentName}.js`);
+      const configPath = path$k.join(widgetsDir, `${componentName}.dash.js`);
 
       if (!fs$h.existsSync(componentPath)) {
         throw new Error(`Component file not found: ${componentPath}`);
@@ -11600,9 +11819,9 @@ var registryDownload = {
  */
 
 const fs$g = require$$0$3;
-const path$l = require$$1$2;
+const path$j = require$$1$2;
 const os$4 = require$$2$1;
-const { app: app$c } = require$$0$2;
+const { app: app$9 } = require$$0$2;
 
 // Cache: widgetId → permissions | null. Populated lazily on first
 // lookup; invalidated when a widget is installed/uninstalled (the
@@ -11617,7 +11836,7 @@ function expandHome(p) {
   if (typeof p !== "string" || !p) return p;
   if (p === "~") return os$4.homedir();
   if (p.startsWith("~/") || p.startsWith("~\\")) {
-    return path$l.join(os$4.homedir(), p.slice(2));
+    return path$j.join(os$4.homedir(), p.slice(2));
   }
   return p;
 }
@@ -11727,10 +11946,10 @@ function dottedComponentIdToPackageId(widgetId) {
 function resolveWidgetPackagePath(widgetId) {
   const packageId = dottedComponentIdToPackageId(widgetId);
   if (typeof packageId !== "string" || !packageId) return null;
-  const widgetsRoot = path$l.join(app$c.getPath("userData"), "widgets");
+  const widgetsRoot = path$j.join(app$9.getPath("userData"), "widgets");
   // Split scope from name for "@scope/name" form.
   const parts = packageId.startsWith("@") ? packageId.split("/") : [packageId];
-  return path$l.join(widgetsRoot, ...parts, "package.json");
+  return path$j.join(widgetsRoot, ...parts, "package.json");
 }
 
 /**
@@ -11822,7 +12041,7 @@ var widgetPermissions = {
  */
 
 const fs$f = require$$0$3;
-const path$k = require$$1$2;
+const path$i = require$$1$2;
 
 const SOURCE_EXTENSIONS = new Set([
   ".js",
@@ -11880,13 +12099,13 @@ function readSourceFiles(dir) {
       return;
     }
     for (const entry of entries) {
-      const abs = path$k.join(current, entry.name);
-      const rel = relBase ? path$k.join(relBase, entry.name) : entry.name;
+      const abs = path$i.join(current, entry.name);
+      const rel = relBase ? path$i.join(relBase, entry.name) : entry.name;
       if (entry.isDirectory()) {
         if (skipDirs.has(entry.name)) continue;
         walk(abs, rel);
       } else if (entry.isFile()) {
-        const ext = path$k.extname(entry.name).toLowerCase();
+        const ext = path$i.extname(entry.name).toLowerCase();
         if (!SOURCE_EXTENSIONS.has(ext)) continue;
         if (result.length >= SCAN_FILE_LIMIT) return;
         try {
@@ -11912,7 +12131,7 @@ function scanForMcpUsage(input) {
   let fileList = [];
   if (input.files && typeof input.files === "object") {
     for (const [relPath, source] of Object.entries(input.files)) {
-      const ext = path$k.extname(relPath).toLowerCase();
+      const ext = path$i.extname(relPath).toLowerCase();
       if (!SOURCE_EXTENSIONS.has(ext)) continue;
       if (typeof source !== "string") continue;
       fileList.push({ relPath, source });
@@ -12025,7 +12244,7 @@ var manifestScanner = {
  */
 
 const fs$e = require$$0$3;
-const path$j = require$$1$2;
+const path$h = require$$1$2;
 const { safePath: safePath$3 } = safePath_1;
 
 const NAME_RE = /^@?[a-z0-9][a-z0-9.-]*(\/[a-z0-9][a-z0-9.-]*)?$/i;
@@ -12046,8 +12265,8 @@ function loadWidgetManifest(folderPath) {
     return { ok: false, error: `folder does not exist: ${folderPath}` };
   }
 
-  const dashJsonPath = path$j.join(folderPath, "dash.json");
-  const packageJsonPath = path$j.join(folderPath, "package.json");
+  const dashJsonPath = path$h.join(folderPath, "dash.json");
+  const packageJsonPath = path$h.join(folderPath, "package.json");
 
   let raw;
   let source;
@@ -12118,7 +12337,7 @@ function loadWidgetManifest(folderPath) {
 
   // entry: optional with sensible default. Validate when present.
   let entry = typeof raw.entry === "string" ? raw.entry : "widgets";
-  if (path$j.isAbsolute(entry) || entry.split(/[/\\]/).includes("..")) {
+  if (path$h.isAbsolute(entry) || entry.split(/[/\\]/).includes("..")) {
     return {
       ok: false,
       error: "manifest.entry must be relative and must not contain `..`",
@@ -12129,15 +12348,15 @@ function loadWidgetManifest(folderPath) {
     // folder root after realpath. If the entry doesn't yet exist on
     // disk (common during validate-only flows), fall back to a plain
     // resolve-and-prefix check.
-    const candidate = path$j.join(folderPath, entry);
+    const candidate = path$h.join(folderPath, entry);
     if (fs$e.existsSync(candidate)) {
       safePath$3(candidate, [folderPath]);
     } else {
-      const resolved = path$j.resolve(candidate);
-      const rootResolved = path$j.resolve(folderPath);
+      const resolved = path$h.resolve(candidate);
+      const rootResolved = path$h.resolve(folderPath);
       if (
         resolved !== rootResolved &&
-        !resolved.startsWith(rootResolved + path$j.sep)
+        !resolved.startsWith(rootResolved + path$h.sep)
       ) {
         return {
           ok: false,
@@ -12216,7 +12435,7 @@ function walkSourceContainment(rootPath) {
     const stat = fs$e.lstatSync(current);
     if (stat.isDirectory()) {
       for (const entry of fs$e.readdirSync(current)) {
-        stack.push(path$j.join(current, entry));
+        stack.push(path$h.join(current, entry));
       }
     }
     // Symlinks: lstat gives us the symlink-itself; safePath above
@@ -19853,9 +20072,9 @@ function requireTransform () {
 	return transform;
 }
 
-const { app: app$b } = require$$0$2;
+const { app: app$8 } = require$$0$2;
 var fs$d = require$$0$3;
-const path$i = require$$1$2;
+const path$g = require$$1$2;
 const events$5 = events$8;
 const { getFileContents: getFileContents$5, writeToFile: writeToFile$2 } = file;
 const { safePath: safePath$2, getAllowedRoots: getAllowedRoots$1 } = safePath_1;
@@ -19872,9 +20091,9 @@ const { readEnforceFlag: readEnforceFlag$2, readJitFlag: readJitFlag$2 } = secur
 // domain-neutral name is a separate slice).
 function _loadFlags$1() {
   try {
-    const settingsPath = path$i.join(
-      app$b.getPath("userData"),
-      appName$5,
+    const settingsPath = path$g.join(
+      app$8.getPath("userData"),
+      appName$1,
       "settings.json",
     );
     if (!fs$d.existsSync(settingsPath)) return null;
@@ -19943,7 +20162,7 @@ async function _runNetworkGate$1(win, action, widgetId, args, errorEvent, token)
 const ObjectsToCsv = require$$9$2;
 const Transform = requireTransform();
 const https$4 = require$$0$7;
-const appName$5 = "Dashboard";
+const appName$1 = "Dashboard";
 
 const dataController$1 = {
   /**
@@ -19959,9 +20178,9 @@ const dataController$1 = {
       // Validate the renderer-supplied filename is contained within
       // the data directory. path.join doesn't reject `..` segments;
       // safePath does.
-      const candidate = path$i.join(
-        app$b.getPath("userData"),
-        appName$5,
+      const candidate = path$g.join(
+        app$8.getPath("userData"),
+        appName$1,
         appId,
         "data",
         toFilename,
@@ -20320,9 +20539,9 @@ const dataController$1 = {
       if (data) {
         // Validate filename is contained within the data directory.
         // path.join doesn't reject `..` segments; safePath does.
-        const candidate = path$i.join(
-          app$b.getPath("userData"),
-          appName$5,
+        const candidate = path$g.join(
+          app$8.getPath("userData"),
+          appName$1,
           "data",
           filename,
         );
@@ -20429,9 +20648,9 @@ const dataController$1 = {
     try {
       if (filename) {
         // filename to the pages file (live pages)
-        const fromFilename = path$i.join(
-          app$b.getPath("userData"),
-          appName$5,
+        const fromFilename = path$g.join(
+          app$8.getPath("userData"),
+          appName$1,
           "data",
           filename,
         );
@@ -20667,14 +20886,14 @@ var migrations = {
  * settingsController
  */
 
-const { app: app$a } = require$$0$2;
-const path$h = require$$1$2;
+const { app: app$7 } = require$$0$2;
+const path$f = require$$1$2;
 const fs$c = require$$0$3;
 const { getFileContents: getFileContents$4, writeToFile: writeToFile$1 } = file;
 const { migrateSettings, CURRENT_SCHEMA_VERSION: CURRENT_SCHEMA_VERSION$2 } = migrations;
 
 const configFilename$3 = "settings.json";
-const appName$4 = "Dashboard";
+const appName = "Dashboard";
 
 // Helper function to recursively copy directory
 function copyDirectory(source, destination) {
@@ -20684,8 +20903,8 @@ function copyDirectory(source, destination) {
 
   const files = fs$c.readdirSync(source);
   for (const file of files) {
-    const srcPath = path$h.join(source, file);
-    const destPath = path$h.join(destination, file);
+    const srcPath = path$f.join(source, file);
+    const destPath = path$f.join(destination, file);
     const stat = fs$c.lstatSync(srcPath);
 
     // Skip symlinks to prevent following links to sensitive files
@@ -20713,9 +20932,9 @@ const settingsController$4 = {
     try {
       if (data) {
         // <appId>/settings.json
-        const filename = path$h.join(
-          app$a.getPath("userData"),
-          appName$4,
+        const filename = path$f.join(
+          app$7.getPath("userData"),
+          appName,
           configFilename$3,
         );
         // Always stamp the current schema version on every save so the
@@ -20757,9 +20976,9 @@ const settingsController$4 = {
   getSettingsForApplication: (win) => {
     try {
       // <appId>/settings.json
-      const filename = path$h.join(
-        app$a.getPath("userData"),
-        appName$4,
+      const filename = path$f.join(
+        app$7.getPath("userData"),
+        appName,
         configFilename$3,
       );
       // make sure the file exists...
@@ -20805,15 +21024,15 @@ const settingsController$4 = {
    */
   getDataDirectory: (win) => {
     try {
-      const settingsPath = path$h.join(
-        app$a.getPath("userData"),
-        appName$4,
+      const settingsPath = path$f.join(
+        app$7.getPath("userData"),
+        appName,
         configFilename$3,
       );
       const settings = getFileContents$4(settingsPath, {});
       const userDataDir =
         settings.userDataDirectory ||
-        path$h.join(app$a.getPath("userData"), appName$4);
+        path$f.join(app$7.getPath("userData"), appName);
 
       console.log("[settingsController] Data directory retrieved successfully");
       // Return the data for ipcMain.handle() - modern promise-based approach
@@ -20850,9 +21069,9 @@ const settingsController$4 = {
       }
 
       // Update settings
-      const settingsPath = path$h.join(
-        app$a.getPath("userData"),
-        appName$4,
+      const settingsPath = path$f.join(
+        app$7.getPath("userData"),
+        appName,
         configFilename$3,
       );
       const settings = getFileContents$4(settingsPath, {});
@@ -20884,20 +21103,20 @@ const settingsController$4 = {
   migrateDataDirectory: (win, oldPath, newPath) => {
     try {
       // Resolve paths to prevent traversal
-      const resolvedOldPath = path$h.resolve(oldPath);
-      const resolvedNewPath = path$h.resolve(newPath);
+      const resolvedOldPath = path$f.resolve(oldPath);
+      const resolvedNewPath = path$f.resolve(newPath);
 
       // Validate oldPath is the current configured data directory
-      const settingsCheckPath = path$h.join(
-        app$a.getPath("userData"),
-        appName$4,
+      const settingsCheckPath = path$f.join(
+        app$7.getPath("userData"),
+        appName,
         configFilename$3,
       );
       const currentSettings = getFileContents$4(settingsCheckPath, {});
       const currentDataDir =
         currentSettings.userDataDirectory ||
-        path$h.join(app$a.getPath("userData"), appName$4);
-      if (resolvedOldPath !== path$h.resolve(currentDataDir)) {
+        path$f.join(app$7.getPath("userData"), appName);
+      if (resolvedOldPath !== path$f.resolve(currentDataDir)) {
         throw new Error("Source path must be the current data directory");
       }
 
@@ -20933,9 +21152,9 @@ const settingsController$4 = {
       copyDirectory(resolvedOldPath, resolvedNewPath);
 
       // Update settings to use new path
-      const settingsPath = path$h.join(
-        app$a.getPath("userData"),
-        appName$4,
+      const settingsPath = path$f.join(
+        app$7.getPath("userData"),
+        appName,
         configFilename$3,
       );
       const settings = getFileContents$4(settingsPath, {});
@@ -21831,13 +22050,11 @@ function requireProviderController () {
 	return providerController_1;
 }
 
-const { app: app$9 } = require$$0$2;
-const path$g = require$$1$2;
 const events$4 = events$8;
 const { getFileContents: getFileContents$3 } = file;
+const { getProfileFilePath: getProfileFilePath$3 } = profilePaths;
 
 const configFilename$2 = "layouts.json";
-const appName$3 = "Dashboard";
 
 const layoutController$1 = {
   /**
@@ -21848,12 +22065,7 @@ const layoutController$1 = {
    */
   listLayoutsForApplication: (win, appId) => {
     try {
-      const filename = path$g.join(
-        app$9.getPath("userData"),
-        appName$3,
-        appId,
-        configFilename$2,
-      );
+      const filename = getProfileFilePath$3(appId, configFilename$2);
       const layoutsArray = getFileContents$3(filename);
       win.webContents.send(events$4.LAYOUT_LIST_COMPLETE, {
         layouts: layoutsArray,
@@ -58106,7 +58318,7 @@ const {
 const {
   StreamableHTTPClientTransport,
 } = streamableHttp$1;
-const path$f = require$$1$2;
+const path$e = require$$1$2;
 const fs$b = require$$0$3;
 const os$3 = require$$2$1;
 const responseCache$2 = responseCache_1;
@@ -58124,7 +58336,7 @@ const {
   isBuiltinTransport,
   createBuiltinTransport,
 } = builtinServers;
-const { app: app$8 } = require$$0$2;
+const { app: app$6 } = require$$0$2;
 
 /**
  * Load the user's settings.json (or null on absence/parse error). The
@@ -58133,8 +58345,8 @@ const { app: app$8 } = require$$0$2;
  */
 function loadSettingsForFlags() {
   try {
-    const settingsPath = path$f.join(
-      app$8.getPath("userData"),
+    const settingsPath = path$e.join(
+      app$6.getPath("userData"),
       "Dashboard",
       "settings.json",
     );
@@ -58885,7 +59097,7 @@ const mcpController$3 = {
           }
 
           // Interpolate {{MCP_DIR}} in args to resolve local MCP server scripts
-          const mcpDir = path$f.join(__dirname, "..", "mcp");
+          const mcpDir = path$e.join(__dirname, "..", "mcp");
           for (let i = 0; i < args.length; i++) {
             if (
               typeof args[i] === "string" &&
@@ -59468,7 +59680,7 @@ const mcpController$3 = {
    */
   getCatalog: (win) => {
     try {
-      const catalogPath = path$f.join(
+      const catalogPath = path$e.join(
         __dirname,
         "..",
         "mcp",
@@ -59509,7 +59721,7 @@ const mcpController$3 = {
    */
   getKnownExternalCatalog: () => {
     try {
-      const catalogPath = path$f.join(
+      const catalogPath = path$e.join(
         __dirname,
         "..",
         "mcp",
@@ -59614,7 +59826,7 @@ const mcpController$3 = {
     }
 
     // Interpolate {{MCP_DIR}} in authCommand args (same as startServer)
-    const mcpDir = path$f.join(__dirname, "..", "mcp");
+    const mcpDir = path$e.join(__dirname, "..", "mcp");
     const resolvedArgs = (authCommand.args || []).map((arg) =>
       typeof arg === "string" && arg.includes("{{MCP_DIR}}")
         ? arg.replace(/\{\{MCP_DIR\}\}/g, mcpDir)
@@ -59786,7 +59998,7 @@ var isNewerVersion_1 = { isNewerVersion: isNewerVersion$1 };
  * - Support two-level browsing: packages (bundles) and widgets within packages
  */
 
-const path$e = require$$1$2;
+const path$d = require$$1$2;
 const fs$a = require$$0$3;
 const os$2 = require$$2$1;
 const { toPackageId } = packageId;
@@ -59817,7 +60029,7 @@ function getCacheKey() {
  * Get the local test registry path for dev mode
  */
 function getTestRegistryPath() {
-  return path$e.join(__dirname, "..", "registry", "test-registry-index.json");
+  return path$d.join(__dirname, "..", "registry", "test-registry-index.json");
 }
 
 /**
@@ -60441,7 +60653,7 @@ async function fetchPackageSource(packageName, componentName = null) {
 
   const zip = new AdmZip(buffer);
   const safeName = (pkg.name || "pkg").replace(/[^a-zA-Z0-9-_]/g, "_");
-  const tempDir = path$e.join(
+  const tempDir = path$d.join(
     os$2.tmpdir(),
     `dash-registry-preview-${safeName}-${Date.now()}`,
   );
@@ -60450,7 +60662,7 @@ async function fetchPackageSource(packageName, componentName = null) {
     validateZipEntries(zip, tempDir);
     zip.extractAllTo(tempDir, true);
 
-    const widgetsDir = path$e.join(tempDir, "widgets");
+    const widgetsDir = path$d.join(tempDir, "widgets");
     let componentCode = "";
     let configCode = "";
     let widgetName = null;
@@ -60478,7 +60690,7 @@ async function fetchPackageSource(packageName, componentName = null) {
       if (!configFile) configFile = dashFiles[0];
 
       if (configFile) {
-        configCode = fs$a.readFileSync(path$e.join(widgetsDir, configFile), "utf8");
+        configCode = fs$a.readFileSync(path$d.join(widgetsDir, configFile), "utf8");
         widgetName = configFile.replace(/\.dash\.js$/, "");
       }
 
@@ -60493,7 +60705,7 @@ async function fetchPackageSource(packageName, componentName = null) {
 
       if (componentFile) {
         componentCode = fs$a.readFileSync(
-          path$e.join(widgetsDir, componentFile),
+          path$d.join(widgetsDir, componentFile),
           "utf8",
         );
         if (!widgetName) widgetName = componentFile.replace(/\.js$/, "");
@@ -60501,13 +60713,13 @@ async function fetchPackageSource(packageName, componentName = null) {
     }
 
     let bundleSource = null;
-    const bundlePath = path$e.join(tempDir, "dist", "index.cjs.js");
+    const bundlePath = path$d.join(tempDir, "dist", "index.cjs.js");
     if (fs$a.existsSync(bundlePath)) {
       bundleSource = fs$a.readFileSync(bundlePath, "utf8");
     }
 
     let dashMeta = {};
-    const dashPath = path$e.join(tempDir, "dash.json");
+    const dashPath = path$d.join(tempDir, "dash.json");
     if (fs$a.existsSync(dashPath)) {
       try {
         dashMeta = JSON.parse(fs$a.readFileSync(dashPath, "utf8"));
@@ -60629,7 +60841,7 @@ async function fetchPackageManifest(packageName) {
 
   const zip = new AdmZip(buffer);
   const safeName = (pkg.name || "pkg").replace(/[^a-zA-Z0-9-_]/g, "_");
-  const tempDir = path$e.join(
+  const tempDir = path$d.join(
     os$2.tmpdir(),
     `dash-registry-manifest-${safeName}-${Date.now()}`,
   );
@@ -60698,7 +60910,7 @@ var registryController$3 = {
 var fs$9 = require$$0$3;
 var JSONStream = require$$4$1;
 const algoliasearch$1 = require$$2$4;
-const path$d = require$$3$3;
+const path$c = require$$3$3;
 const { ensureDirectoryExistence, checkDirectory } = file;
 
 let AlgoliaIndex$1 = class AlgoliaIndex {
@@ -60805,7 +61017,7 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
           if (err) reject(err);
           if (files) {
             files.forEach((file) => {
-              fs$9.unlinkSync(path$d.join(directoryPath, file));
+              fs$9.unlinkSync(path$c.join(directoryPath, file));
             });
             resolve();
           }
@@ -60828,7 +61040,7 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
       let results = [];
       for (const fileIndex in files) {
         // for each file lets read the file and then push to algolia
-        const pathToBatch = path$d.join(batchFilepath, files[fileIndex]);
+        const pathToBatch = path$c.join(batchFilepath, files[fileIndex]);
         const fileContents = await this.readFile(pathToBatch);
         if (fileContents) {
           if ("data" in fileContents && "filepath" in fileContents) {
@@ -61367,24 +61579,21 @@ function upsertMenuItem$1(items, menuItem) {
 
 var upsertMenuItem_1 = { upsertMenuItem: upsertMenuItem$1 };
 
-const { app: app$7 } = require$$0$2;
-const path$c = require$$1$2;
+const path$b = require$$1$2;
 const { writeFileSync } = require$$0$3;
 const { getFileContents: getFileContents$2 } = file;
+const {
+  getProfileFilePath: getProfileFilePath$2,
+  getProfileDataDir,
+} = profilePaths;
 const { upsertMenuItem } = upsertMenuItem_1;
 
 const configFilename$1 = "menuItems.json";
-const appName$2 = "Dashboard";
 
 const menuItemsController$1 = {
   saveMenuItemForApplication: (win, appId, menuItem) => {
     try {
-      const filename = path$c.join(
-        app$7.getPath("userData"),
-        appName$2,
-        appId,
-        configFilename$1,
-      );
+      const filename = getProfileFilePath$2(appId, configFilename$1);
       const raw = getFileContents$2(filename) || [];
       const deduped = upsertMenuItem(raw, menuItem);
       writeFileSync(filename, JSON.stringify(deduped, null, 2));
@@ -61398,12 +61607,7 @@ const menuItemsController$1 = {
 
   listMenuItemsForApplication: (win, appId) => {
     try {
-      const filename = path$c.join(
-        app$7.getPath("userData"),
-        appName$2,
-        appId,
-        configFilename$1,
-      );
+      const filename = getProfileFilePath$2(appId, configFilename$1);
       const menuItemsArray = getFileContents$2(filename);
       const filtered = menuItemsArray.filter((mi) => mi !== null);
       // Return the data for ipcMain.handle() - modern promise-based approach
@@ -61425,10 +61629,10 @@ const menuItemsController$1 = {
   // a missing menuId would read as folder 1), as the confirm says.
   deleteMenuItemForApplication: (win, appId, menuItemId) => {
     try {
-      const dir = path$c.join(app$7.getPath("userData"), appName$2, appId);
+      const dir = getProfileDataDir(appId);
       return deleteMenuItemFromFiles(
-        path$c.join(dir, configFilename$1),
-        path$c.join(dir, "workspaces.json"),
+        path$b.join(dir, configFilename$1),
+        path$b.join(dir, "workspaces.json"),
         menuItemId,
       );
     } catch (e) {
@@ -63340,7 +63544,7 @@ streamableHttp.StreamableHTTPServerTransport = StreamableHTTPServerTransport$1;
  */
 
 const fs$7 = require$$0$3;
-const path$b = require$$1$2;
+const path$a = require$$1$2;
 const forge = require$$2$5;
 
 /**
@@ -63349,8 +63553,8 @@ const forge = require$$2$5;
  * @returns {{ cert: string, key: string }} PEM-encoded certificate and private key
  */
 function getOrCreateCert$1(certsDir) {
-  const certPath = path$b.join(certsDir, "cert.pem");
-  const keyPath = path$b.join(certsDir, "key.pem");
+  const certPath = path$a.join(certsDir, "cert.pem");
+  const keyPath = path$a.join(certsDir, "key.pem");
 
   // Return existing cert if valid
   if (fs$7.existsSync(certPath) && fs$7.existsSync(keyPath)) {
@@ -74187,7 +74391,7 @@ var dashboardConfigUtils$1 = {
  * not exposed to the renderer.
  */
 
-const { app: app$6, safeStorage: safeStorage$1 } = require$$0$2;
+const { app: app$5, safeStorage: safeStorage$1 } = require$$0$2;
 const os$1 = require$$2$1;
 
 const {
@@ -74487,7 +74691,7 @@ var publisherKeyController$1 = {
  */
 
 const fs$6 = require$$0$3;
-const path$a = require$$1$2;
+const path$9 = require$$1$2;
 const { getStoredToken } = registryAuthController$1;
 const { signZipBuffer: signZipBuffer$1 } = publisherKeyController$1;
 
@@ -74549,7 +74753,7 @@ async function publishToRegistry$1(zipPath, manifest) {
     formData.append(
       "file",
       new Blob([zipBuffer], { type: "application/zip" }),
-      path$a.basename(zipPath),
+      path$9.basename(zipPath),
     );
     formData.append("manifest", JSON.stringify(manifest));
     formData.append("signature", signing.signature);
@@ -74836,8 +75040,8 @@ function requireWidgetPublishManifest () {
  * Mirrors dashboardConfigController patterns for ZIP creation, manifest generation,
  * and registry interaction.
  */
-const path$9 = require$$1$2;
-const { app: app$5, dialog: dialog$2 } = require$$0$2;
+const path$8 = require$$1$2;
+const { app: app$4, dialog: dialog$2 } = require$$0$2;
 const AdmZip$2 = require$$3$1;
 
 const themeController$3 = themeController_1;
@@ -75367,7 +75571,7 @@ async function installThemeFromRegistry$1(win, appId, packageName) {
       // Validate entry path (security: prevent path traversal)
       if (
         themeEntry.entryName.includes("..") ||
-        path$9.isAbsolute(themeEntry.entryName)
+        path$8.isAbsolute(themeEntry.entryName)
       ) {
         return {
           success: false,
@@ -75679,8 +75883,8 @@ var secretBox = { createSecretBox: createSecretBox$1, PREFIX };
  * the host and the store together.
  */
 
-const path$8 = require$$1$2;
-const { app: app$4, safeStorage } = require$$0$2;
+const path$7 = require$$1$2;
+const { app: app$3, safeStorage } = require$$0$2;
 const Store$1 = require$$0$5;
 const { createSecretBox } = secretBox;
 
@@ -75697,11 +75901,11 @@ function createElectronHost$1() {
   const budgetStore = new Store$1({ name: "dash-bot-budgets" });
   const memoryStore = new Store$1({ name: "dash-bot-memory" });
   const recentStore = new Store$1({ name: "dash-create-recent" });
-  const botsRoot = path$8.join(app$4.getPath("userData"), "bots");
+  const botsRoot = path$7.join(app$3.getPath("userData"), "bots");
 
   return {
     // The saved audit log (US-003 AC5) — append-only JSON lines.
-    paths: { botsRoot, auditLog: path$8.join(botsRoot, "audit.log") },
+    paths: { botsRoot, auditLog: path$7.join(botsRoot, "audit.log") },
     clock: { now: () => new Date().toISOString() },
     // Seals sensitive bot data at rest (run answers) with the OS keychain.
     // Falls back to plain text where the keychain isn't available.
@@ -75759,7 +75963,7 @@ var BotStore$2 = {exports: {}};
  */
 
 const fs$5 = require$$0$3;
-const path$7 = require$$1$2;
+const path$6 = require$$1$2;
 const {
   newBotId,
   isValidBotId,
@@ -75850,7 +76054,7 @@ let BotStore$1 = class BotStore {
     if (!isValidBotId(id)) {
       throw new Error(`BotStore: invalid bot id "${id}"`);
     }
-    return path$7.join(this._botsRoot, id, "files");
+    return path$6.join(this._botsRoot, id, "files");
   }
 
   /** @returns {object[]} all bot definitions */
@@ -75939,7 +76143,7 @@ let BotStore$1 = class BotStore {
     this._save(data);
 
     if (isValidBotId(id)) {
-      fs$5.rmSync(path$7.join(this._botsRoot, id), {
+      fs$5.rmSync(path$6.join(this._botsRoot, id), {
         recursive: true,
         force: true,
       });
@@ -79159,7 +79363,7 @@ var PauseController_1 = PauseController$1;
  * Portable (NFR-006): the file path, fs and clock are injected; no Electron.
  */
 
-const path$6 = require$$1$2;
+const path$5 = require$$1$2;
 
 const DEFAULT_MAX_BYTES = 2.5 * 1024 * 1024;
 
@@ -79297,7 +79501,7 @@ function createAuditLog$1({
     };
     let line = `${JSON.stringify(saved)}\n`;
     try {
-      fs.mkdirSync(path$6.dirname(file), { recursive: true });
+      fs.mkdirSync(path$5.dirname(file), { recursive: true });
       // A torn last line (Dash quit mid-write) mustn't swallow this entry.
       if (!checkedEnd) {
         checkedEnd = true;
@@ -81127,7 +81331,7 @@ var placeWidget_1 = {
 
 const fs$3 = require$$0$3;
 const os = require$$2$1;
-const path$5 = require$$1$2;
+const path$4 = require$$1$2;
 
 /** Registry sign-in state and the username that becomes the package scope. */
 async function registryIdentity$1() {
@@ -81154,8 +81358,8 @@ async function zipAndPublish$1(files, manifest) {
   const registryApiController = registryApiController$3;
   const zip = new AdmZip();
   for (const f of files) zip.addFile(f.name, Buffer.from(f.text, "utf8"));
-  const dir = fs$3.mkdtempSync(path$5.join(os.tmpdir(), "dash-bot-publish-"));
-  const zipPath = path$5.join(dir, `${manifest.name}-${manifest.version}.zip`);
+  const dir = fs$3.mkdtempSync(path$4.join(os.tmpdir(), "dash-bot-publish-"));
+  const zipPath = path$4.join(dir, `${manifest.name}-${manifest.version}.zip`);
   try {
     zip.writeZip(zipPath);
     const result = await registryApiController.publishToRegistry(
@@ -88219,7 +88423,7 @@ var teamDirectory = { summarizeTeams: summarizeTeams$1, summarizeLeads, resolveD
  * injected/portable modules; this file is the boundary.
  */
 
-const path$4 = require$$1$2;
+const path$3 = require$$1$2;
 const { Cron } = require$$1$3;
 const { createElectronHost } = host;
 const BotStore = BotStoreExports;
@@ -90023,7 +90227,7 @@ const botController$1 = {
             toolName: req.toolName,
             args: req.input,
           },
-          { isWriteTool, pathArgKeys: PATH_ARG_KEYS, dirname: path$4.dirname },
+          { isWriteTool, pathArgKeys: PATH_ARG_KEYS, dirname: path$3.dirname },
         );
         remembered = grantStore.setGrant(req.botId, next) === true;
         if (remembered) {
@@ -90454,7 +90658,7 @@ const botController$1 = {
           : undefined,
       // Sandbox dir for engines with native file/shell tools (claude-agent).
       workingDir: this._botsRoot
-        ? path$4.join(this._botsRoot, bot.id, "files")
+        ? path$3.join(this._botsRoot, bot.id, "files")
         : undefined,
     };
   },
@@ -91942,13 +92146,14 @@ var botController_1 = botController$1;
  * applies event wiring. (Import is implemented in DASH-13.)
  */
 
-const { app: app$3, dialog: dialog$1 } = require$$0$2;
-const path$3 = require$$1$2;
+const { app: app$2, dialog: dialog$1 } = require$$0$2;
+const path$2 = require$$1$2;
 // The publish step reads each pinned widget's package.json for its
 // permissions (it never ran before: every dep came out unpinned).
 const fs$2 = require$$0$3;
 const AdmZip$1 = require$$3$1;
 const { getFileContents: getFileContents$1 } = file;
+const { getProfileFilePath: getProfileFilePath$1 } = profilePaths;
 const {
   validateDashboardConfig,
   applyDefaults,
@@ -91975,7 +92180,6 @@ const {
 const themeController$2 = themeController_1;
 
 const configFilename = "workspaces.json";
-const appName$1 = "Dashboard";
 
 /**
  * Export a workspace as a .dashboard.json config inside a ZIP file.
@@ -91998,12 +92202,7 @@ async function exportDashboardConfig$1(
 ) {
   try {
     // 1. Read workspace from workspaces.json
-    const filename = path$3.join(
-      app$3.getPath("userData"),
-      appName$1,
-      appId,
-      configFilename,
-    );
+    const filename = getProfileFilePath$1(appId, configFilename);
     const workspacesArray = getFileContents$1(filename);
     const workspace = workspacesArray.find(
       (w) => w.id === workspaceId || w.id === Number(workspaceId),
@@ -92122,8 +92321,8 @@ async function exportDashboardConfig$1(
 
     const { canceled, filePath } = await dialog$1.showSaveDialog(win, {
       title: "Export Dashboard as ZIP",
-      defaultPath: path$3.join(
-        app$3.getPath("desktop"),
+      defaultPath: path$2.join(
+        app$2.getPath("desktop"),
         `dashboard-${sanitizedName}.zip`,
       ),
       filters: [{ name: "ZIP Archive", extensions: ["zip"] }],
@@ -92190,7 +92389,7 @@ async function selectDashboardFile$1(win) {
 
     // Extract and validate
     const zip = new AdmZip$1(zipPath);
-    const tempDir = path$3.join(app$3.getPath("temp"), "dash-import");
+    const tempDir = path$2.join(app$2.getPath("temp"), "dash-import");
     const { validateZipEntries } = widgetRegistryExports;
     validateZipEntries(zip, tempDir);
 
@@ -92300,7 +92499,7 @@ async function importDashboardConfig$1(
     const zip = new AdmZip$1(zipPath);
 
     // Validate ZIP entries for path traversal
-    const tempDir = path$3.join(app$3.getPath("temp"), "dash-import");
+    const tempDir = path$2.join(app$2.getPath("temp"), "dash-import");
     const { validateZipEntries } = widgetRegistryExports;
     validateZipEntries(zip, tempDir);
 
@@ -92975,7 +93174,7 @@ async function downloadDashboardPackage(packageName, { purpose = null } = {}) {
   const zip = new AdmZip$1(zipBuffer);
 
   // 3. Validate ZIP entries
-  const tempDir = path$3.join(app$3.getPath("temp"), "dash-registry-import");
+  const tempDir = path$2.join(app$2.getPath("temp"), "dash-registry-import");
   const { validateZipEntries } = widgetRegistryExports;
   validateZipEntries(zip, tempDir);
 
@@ -93152,12 +93351,7 @@ async function collectDashboardDependencies$1(
 ) {
   try {
     // 1. Read workspace
-    const filename = path$3.join(
-      app$3.getPath("userData"),
-      appName$1,
-      appId,
-      configFilename,
-    );
+    const filename = getProfileFilePath$1(appId, configFilename);
     const workspacesArray = getFileContents$1(filename);
     const workspace = workspacesArray.find(
       (w) => w.id === workspaceId || w.id === Number(workspaceId),
@@ -93431,12 +93625,7 @@ async function prepareDashboardForPublish$1(
     const { resolveNextVersion } = requireWidgetPublishManifest();
 
     // 1. Read workspace
-    const filename = path$3.join(
-      app$3.getPath("userData"),
-      appName$1,
-      appId,
-      configFilename,
-    );
+    const filename = getProfileFilePath$1(appId, configFilename);
     const workspacesArray = getFileContents$1(filename);
     const workspace = workspacesArray.find(
       (w) => w.id === workspaceId || w.id === Number(workspaceId),
@@ -93755,7 +93944,7 @@ async function prepareDashboardForPublish$1(
         );
       });
       if (!match || !match.path) continue;
-      const pkgJsonPath = path$3.join(match.path, "package.json");
+      const pkgJsonPath = path$2.join(match.path, "package.json");
       if (!fs$2.existsSync(pkgJsonPath)) continue;
       try {
         const pkg = JSON.parse(fs$2.readFileSync(pkgJsonPath, "utf8"));
@@ -93799,8 +93988,8 @@ async function prepareDashboardForPublish$1(
     const sanitizedName = manifest.name;
     const { canceled, filePath } = await dialog$1.showSaveDialog(win, {
       title: "Save Dashboard Package for Registry",
-      defaultPath: path$3.join(
-        app$3.getPath("desktop"),
+      defaultPath: path$2.join(
+        app$2.getPath("desktop"),
         `dashboard-${sanitizedName}-v${manifest.version}.zip`,
       ),
       filters: [{ name: "ZIP Archive", extensions: ["zip"] }],
@@ -93969,12 +94158,7 @@ async function checkDashboardUpdatesForApp$1(appId) {
   const { fetchRegistryIndex } = registryController$3;
 
   try {
-    const filename = path$3.join(
-      app$3.getPath("userData"),
-      appName$1,
-      appId,
-      configFilename,
-    );
+    const filename = getProfileFilePath$1(appId, configFilename);
     const workspaces = getFileContents$1(filename) || [];
 
     const index = await fetchRegistryIndex();
@@ -94040,12 +94224,7 @@ function getProviderSetupManifest$1(appId, requiredProviders = []) {
  */
 function getDashboardPublishPreview$1(appId, workspaceId, widgetRegistry = null) {
   try {
-    const filename = path$3.join(
-      app$3.getPath("userData"),
-      appName$1,
-      appId,
-      configFilename,
-    );
+    const filename = getProfileFilePath$1(appId, configFilename);
     const workspacesArray = getFileContents$1(filename);
     const workspace = workspacesArray.find(
       (w) => w.id === workspaceId || w.id === Number(workspaceId),
@@ -94693,9 +94872,9 @@ var notificationController_1 = notificationController$2;
  * `consumers: Set` field, and re-gating sends would break that.
  */
 
-const { app: app$2 } = require$$0$2;
+const { app: app$1 } = require$$0$2;
 const fs$1 = require$$0$3;
-const path$2 = require$$1$2;
+const path$1 = require$$1$2;
 const WebSocket = require$$3$4;
 const {
   gateNetworkCall,
@@ -94705,8 +94884,8 @@ const { readEnforceFlag, readJitFlag } = securityFlags;
 
 function _loadFlags() {
   try {
-    const settingsPath = path$2.join(
-      app$2.getPath("userData"),
+    const settingsPath = path$1.join(
+      app$1.getPath("userData"),
       "Dashboard",
       "settings.json",
     );
@@ -96322,22 +96501,20 @@ var dashboardRatingsUtils = {
  * Runs in the Electron main process.
  */
 
-const { app: app$1 } = require$$0$2;
-const path$1 = require$$1$2;
 const { getFileContents, writeToFile } = file;
 const {
   validateAndBuildRating,
   enrichWithRatings,
 } = dashboardRatingsUtils;
+const { getProfileFilePath } = profilePaths;
 
 const ratingsFilename = "dashboard-ratings.json";
-const appName = "Dashboard";
 
 /**
  * Get the ratings file path for an app.
  */
 function getRatingsPath(appId) {
-  return path$1.join(app$1.getPath("userData"), appName, appId, ratingsFilename);
+  return getProfileFilePath(appId, ratingsFilename);
 }
 
 /**