feat(wren): shared field registry + browser-based profile form (wren profile add --ui)

wren/README.md

@@ -25,7 +25,8 @@ pip install wren-engine[spark]       # Spark
 pip install wren-engine[athena]      # Athena
 pip install wren-engine[oracle]      # Oracle
 pip install 'wren-engine[memory]'    # Schema & query memory (LanceDB)
-pip install 'wren-engine[all]'       # All connectors + memory
+pip install 'wren-engine[ui]'        # Browser-based profile form (starlette + uvicorn)
+pip install 'wren-engine[all]'       # All connectors + memory + ui
 ```
 
 Requires Python 3.11+.
@@ -54,7 +55,20 @@ Requires Python 3.11+.
 }
 ```
 
-**2. Create `~/.wren/connection_info.json`** — your connection:
+**2. Configure a connection profile** — pick one of three ways:
+
+```bash
+# Browser form (recommended, requires wren-engine[ui])
+wren profile add my-db --ui
+
+# Interactive terminal prompts
+wren profile add my-db --interactive
+
+# Import from an existing connection file
+wren profile add my-db --from-file connection_info.json
+```
+
+Or create `~/.wren/connection_info.json` manually:
 
 ```json
 {
@@ -73,7 +87,7 @@ Requires Python 3.11+.
 wren --sql 'SELECT order_id FROM "orders" LIMIT 10'
 ```
 
-For the full CLI reference and per-datasource `connection_info.json` formats, see [`docs/cli.md`](docs/cli.md) and [`docs/connections.md`](docs/connections.md).
+For the full CLI reference and per-datasource connection field reference, see [`docs/cli.md`](docs/cli.md) and [`docs/connections.md`](docs/connections.md).
 
 **4. Index schema for semantic search** (optional, requires `wren-engine[memory]`):
 
@@ -86,6 +100,38 @@ wren memory recall -q "best customers"         # retrieve similar past queries
 
 ---
 
+## Connection profiles
+
+Profiles let you store named connection configurations in `~/.wren/profiles.yml` and switch between them easily — useful when working across multiple databases or environments.
+
+```bash
+# Add a profile (browser form, interactive prompts, or file import)
+wren profile add prod --ui                        # opens http://localhost:<port>
+wren profile add staging --interactive            # terminal prompts
+wren profile add local --from-file conn.json      # import existing file
+
+# List and switch profiles
+wren profile list                                 # * marks the active profile
+wren profile switch prod
+
+# Inspect a profile (sensitive fields masked)
+wren profile debug prod
+
+# Remove a profile
+wren profile rm old-profile --force
+```
+
+The `--ui` flag opens a browser-based form that auto-derives fields from each datasource's schema — including file upload for BigQuery credentials, variant selection for Databricks/Redshift, and sensible defaults for all 20+ supported sources. Requires `pip install 'wren-engine[ui]'`.
+
+Once a profile is active, `wren` uses it automatically:
+
+```bash
+wren profile switch prod
+wren --sql 'SELECT COUNT(*) FROM "orders"'        # connects using prod profile
+```
+
+---
+
 ## Python SDK
 
 ```python
@@ -112,12 +158,19 @@ just format         # Auto-fix
 
 | Command | What it runs | Docker needed |
 |---------|-------------|---------------|
-| `just test-unit` | Unit tests | No |
+| `just test-unit` | Unit tests (engine, CTE rewriter, field registry, profiles) | No |
 | `just test-duckdb` | DuckDB connector tests | No |
 | `just test-postgres` | PostgreSQL connector tests | Yes |
 | `just test-mysql` | MySQL connector tests | Yes |
 | `just test` | All tests | Yes |
 
+Profile web tests (`test_profile_web.py`) require `wren-engine[ui]`:
+
+```bash
+uv sync --extra dev --extra ui --find-links ../wren-core-py/target/wheels/
+uv run pytest tests/test_profile_web.py -v
+```
+
 ## Publishing
 
 ```bash

wren/pyproject.toml

@@ -53,8 +53,9 @@ spark = ["pyspark>=3.5"]
 athena = ["ibis-framework[athena]"]
 oracle = ["oracledb>=2"]
 memory = ["lancedb>=0.6", "sentence-transformers>=2.2"]
+ui = ["starlette>=0.37", "uvicorn>=0.29", "jinja2>=3.1", "python-multipart>=0.0.9"]
 all = [
-  "wren-engine[postgres,mysql,bigquery,snowflake,clickhouse,trino,mssql,databricks,redshift,athena,oracle,spark,memory]",
+  "wren-engine[postgres,mysql,bigquery,snowflake,clickhouse,trino,mssql,databricks,redshift,athena,oracle,spark,memory,ui]",
 ]
 dev = [
   "pytest>=8",
@@ -76,6 +77,7 @@ path = "src/wren/__init__.py"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/wren"]
+artifacts = ["src/wren/templates/*.html"]
 
 [tool.ruff]
 line-length = 88

wren/src/wren/connector/databricks.py

@@ -19,27 +19,25 @@ def __init__(self, connection_info: DatabricksConnectionUnion):
 
         if isinstance(connection_info, DatabricksTokenConnectionInfo):
             self.connection = dbsql.connect(
-                server_hostname=connection_info.server_hostname.get_secret_value(),
-                http_path=connection_info.http_path.get_secret_value(),
+                server_hostname=connection_info.server_hostname,
+                http_path=connection_info.http_path,
                 access_token=connection_info.access_token.get_secret_value(),
             )
         elif isinstance(connection_info, DatabricksServicePrincipalConnectionInfo):
             kwargs = {
-                "host": connection_info.server_hostname.get_secret_value(),
+                "host": connection_info.server_hostname,
                 "client_id": connection_info.client_id.get_secret_value(),
                 "client_secret": connection_info.client_secret.get_secret_value(),
             }
             if connection_info.azure_tenant_id is not None:
-                kwargs["azure_tenant_id"] = (
-                    connection_info.azure_tenant_id.get_secret_value()
-                )
+                kwargs["azure_tenant_id"] = (connection_info.azure_tenant_id,)
 
             def credential_provider():
                 return oauth_service_principal(DbConfig(**kwargs))
 
             self.connection = dbsql.connect(
-                server_hostname=connection_info.server_hostname.get_secret_value(),
-                http_path=connection_info.http_path.get_secret_value(),
+                server_hostname=connection_info.server_hostname,
+                http_path=connection_info.http_path,
                 credentials_provider=credential_provider,
             )
 

wren/src/wren/connector/duckdb.py

@@ -23,7 +23,7 @@ def _init_duckdb_s3(connection, info: S3FileConnectionInfo):
         TYPE S3,
         KEY_ID '{_escape_sql(info.access_key.get_secret_value())}',
         SECRET '{_escape_sql(info.secret_key.get_secret_value())}',
-        REGION '{_escape_sql(info.region.get_secret_value())}'
+        REGION '{_escape_sql(info.region)}'
     )""")
 
 
@@ -35,7 +35,7 @@ def _init_duckdb_minio(connection, info: MinioFileConnectionInfo):
         SECRET '{_escape_sql(info.secret_key.get_secret_value())}',
         REGION 'ap-northeast-1'
     )""")
-    connection.execute("SET s3_endpoint=?", [info.endpoint.get_secret_value()])
+    connection.execute("SET s3_endpoint=?", [info.endpoint])
     connection.execute("SET s3_url_style='path'")
     connection.execute("SET s3_use_ssl=?", [info.ssl_enabled])
 
@@ -98,16 +98,14 @@ def _attach_database(self, connection_info) -> None:
                 )
 
     def _list_duckdb_files(self, connection_info) -> list[str]:
-        op = opendal.Operator("fs", root=connection_info.url.get_secret_value())
+        op = opendal.Operator("fs", root=connection_info.url)
         files = []
         try:
             for file in op.list("/"):
                 if file.path != "/":
                     stat = op.stat(file.path)
                     if not stat.mode.is_dir() and file.path.endswith(".duckdb"):
-                        files.append(
-                            f"{connection_info.url.get_secret_value()}/{file.path}"
-                        )
+                        files.append(f"{connection_info.url}/{file.path}")
         except Exception as e:
             raise WrenError(
                 ErrorCode.GENERIC_USER_ERROR, f"Failed to list files: {e!s}"

wren/src/wren/connector/oracle.py

@@ -104,7 +104,7 @@ def _make_oracle_connection(connection_info):
         )
     if hasattr(connection_info, "dsn") and connection_info.dsn:
         return oracledb.connect(
-            user=connection_info.user.get_secret_value(),
+            user=connection_info.user,
             password=(
                 connection_info.password.get_secret_value()
                 if connection_info.password
@@ -113,15 +113,15 @@ def _make_oracle_connection(connection_info):
             dsn=connection_info.dsn.get_secret_value(),
         )
     return oracledb.connect(
-        user=connection_info.user.get_secret_value(),
+        user=connection_info.user,
         password=(
             connection_info.password.get_secret_value()
             if connection_info.password
             else None
         ),
-        host=connection_info.host.get_secret_value(),
-        port=int(connection_info.port.get_secret_value()),
-        service_name=connection_info.database.get_secret_value(),
+        host=connection_info.host,
+        port=int(connection_info.port),
+        service_name=connection_info.database,
     )
 
 

wren/src/wren/connector/redshift.py

@@ -20,19 +20,19 @@ def __init__(self, connection_info: RedshiftConnectionUnion):
         if isinstance(connection_info, RedshiftIAMConnectionInfo):
             self.connection = redshift_connector.connect(
                 iam=True,
-                cluster_identifier=connection_info.cluster_identifier.get_secret_value(),
-                database=connection_info.database.get_secret_value(),
-                db_user=connection_info.user.get_secret_value(),
+                cluster_identifier=connection_info.cluster_identifier,
+                database=connection_info.database,
+                db_user=connection_info.user,
                 access_key_id=connection_info.access_key_id.get_secret_value(),
                 secret_access_key=connection_info.access_key_secret.get_secret_value(),
-                region=connection_info.region.get_secret_value(),
+                region=connection_info.region,
             )
         elif isinstance(connection_info, RedshiftConnectionInfo):
             self.connection = redshift_connector.connect(
-                host=connection_info.host.get_secret_value(),
-                port=int(connection_info.port.get_secret_value()),
-                database=connection_info.database.get_secret_value(),
-                user=connection_info.user.get_secret_value(),
+                host=connection_info.host,
+                port=int(connection_info.port),
+                database=connection_info.database,
+                user=connection_info.user,
                 password=connection_info.password.get_secret_value(),
             )
         else:

wren/src/wren/connector/spark.py

@@ -13,8 +13,8 @@ def __init__(self, connection_info: SparkConnectionInfo):
     def _create_session(self):
         from pyspark.sql import SparkSession  # noqa: PLC0415
 
-        host = self.connection_info.host.get_secret_value()
-        port = self.connection_info.port.get_secret_value()
+        host = self.connection_info.host
+        port = self.connection_info.port
         return (
             SparkSession.builder.remote(f"sc://{host}:{port}")
             .appName("wren")

wren/src/wren/docs.py

@@ -7,59 +7,8 @@
 
 from pydantic import SecretStr
 
-from wren.model import (
-    AthenaConnectionInfo,
-    BaseConnectionInfo,
-    BigQueryDatasetConnectionInfo,
-    BigQueryProjectConnectionInfo,
-    CannerConnectionInfo,
-    ClickHouseConnectionInfo,
-    ConnectionUrl,
-    DatabricksServicePrincipalConnectionInfo,
-    DatabricksTokenConnectionInfo,
-    DorisConnectionInfo,
-    GcsFileConnectionInfo,
-    LocalFileConnectionInfo,
-    MinioFileConnectionInfo,
-    MSSqlConnectionInfo,
-    MySqlConnectionInfo,
-    OracleConnectionInfo,
-    PostgresConnectionInfo,
-    RedshiftConnectionInfo,
-    RedshiftIAMConnectionInfo,
-    S3FileConnectionInfo,
-    SnowflakeConnectionInfo,
-    SparkConnectionInfo,
-    TrinoConnectionInfo,
-)
-
-# Mapping from DataSource name → list of ConnectionInfo classes.
-# Sources with discriminated unions list all variants.
-DATASOURCE_MODELS: dict[str, list[type[BaseConnectionInfo]]] = {
-    "athena": [AthenaConnectionInfo],
-    "bigquery": [BigQueryDatasetConnectionInfo, BigQueryProjectConnectionInfo],
-    "canner": [CannerConnectionInfo],
-    "clickhouse": [ClickHouseConnectionInfo],
-    "databricks": [
-        DatabricksTokenConnectionInfo,
-        DatabricksServicePrincipalConnectionInfo,
-    ],
-    "doris": [DorisConnectionInfo],
-    "duckdb": [LocalFileConnectionInfo],
-    "gcs_file": [GcsFileConnectionInfo],
-    "local_file": [LocalFileConnectionInfo],
-    "minio_file": [MinioFileConnectionInfo],
-    "mssql": [MSSqlConnectionInfo],
-    "mysql": [MySqlConnectionInfo],
-    "oracle": [OracleConnectionInfo],
-    "postgres": [PostgresConnectionInfo],
-    "redshift": [RedshiftConnectionInfo, RedshiftIAMConnectionInfo],
-    "s3_file": [S3FileConnectionInfo],
-    "snowflake": [SnowflakeConnectionInfo],
-    "spark": [SparkConnectionInfo],
-    "trino": [TrinoConnectionInfo],
-    "connection_url": [ConnectionUrl],
-}
+from wren.model import BaseConnectionInfo
+from wren.model.field_registry import DATASOURCE_MODELS  # noqa: F401
 
 
 def _resolve_sources(