agentsw 0.8.0 → 0.9.1

package/README.md

@@ -18,14 +18,14 @@ without touching the settings you hand-tuned.
 </div>
 
 ```console
-$ asw use vfing -m glm-5.3-flash
-switching to vfing (openai) · default model glm-5.3-flash
+$ asw use myproxy -m glm-5.3-flash
+switching to myproxy (openai) · default model glm-5.3-flash
 
 skip claude    Claude Code does not support openai-protocol providers
 ok   codex     ~/.codex/config.toml, ~/.codex/auth.json
                backup: ~/.config/agentsw/backups/transaction-<unique>
 ok   omp       ~/.omp/agent/models.yml
-               select in omp with: omp --model vfing/glm-5.3-flash
+               select in omp with: omp --model myproxy/glm-5.3-flash
 skip pi        pi not detected (pass --apps pi to force)
 ok   opencode  ~/.config/opencode/opencode.json
 ok   dsh       ~/.dsh/settings.yaml, ~/.dsh/.credentials.yaml
@@ -73,35 +73,35 @@ when a portable home directory is desired.
 ## Quick start
 
 ```bash
-agentsw                   # no args: interactive menu (add, import, use, status, apps)
+npx agentsw               # no install needed — opens the interactive menu
+agentsw                   # once installed globally; the short alias `asw` is identical
 ```
 
-The first run on an empty store offers to import the providers already configured in your
-agents, and asks for English or 简体中文. Prefer flags? The same flow, unattended:
+**Run it with no arguments and you get a menu — that is the whole tool.** Every action lives
+there: add a provider (auto-detect or manual setup), import the providers already configured in
+your agents, switch provider and default model, re-sync, update a model list, configure model
+metadata, rename or delete, install/upgrade an agent, change language. On the first run it asks
+for English or 简体中文 and offers to adopt what your agents are already using.
 
-```bash
-# add a provider and let it discover its own model list
-asw add -y --id vfing --protocol openai --openai-api responses \
-  --base-url https://api.example.com/v1 --api-key sk-... --discover
+Each menu action has a command equivalent for scripts, CI and headless machines — see
+[Commands](#commands). Examples below are written as `asw`; without a global install, run them
+as `npx agentsw <command>`.
 
-asw use vfing             # point every detected agent at it
-asw use vfing --dry-run   # ...or just show the diffs
-asw status                # what each agent points at right now
-```
+One command that needs no menu — `asw status` prints what each agent currently points at:
 
 ```console
 $ asw status
 config: ~/.config/agentsw/config.json
-active provider: vfing
-
-APP        FOUND  PROTOCOLS         CURRENT                               CONFIG
----------  -----  ----------------  ------------------------------------  ---------------------------
-claude     yes    anthropic         -                                     ~/.claude/settings.json
-codex      yes    openai            vfing · glm-5.3-flash                 ~/.codex/config.toml
-omp        yes    openai+anthropic  providers: sub, sub-anthropic, vfing  ~/.omp/agent/models.yml
-pi         no     openai+anthropic  -                                     ~/.pi/agent/models.json
-opencode   yes    openai+anthropic  vfing/glm-5.3-flash                   ~/.config/opencode/opencode.json
-dsh        yes    openai+anthropic  vfing · glm-5.3-flash                 ~/.dsh/settings.yaml
+active provider: myproxy
+
+APP       FOUND  PROTOCOLS         CURRENT                                 CONFIG
+--------  -----  ----------------  --------------------------------------  --------------------------------
+claude    yes    anthropic         -                                       ~/.claude/settings.json
+codex     yes    openai            myproxy · glm-5.3-flash                 ~/.codex/config.toml
+omp       yes    openai+anthropic  providers: sub, sub-anthropic, myproxy  ~/.omp/agent/models.yml
+pi        no     openai+anthropic  -                                       ~/.pi/agent/models.json
+opencode  yes    openai+anthropic  myproxy/glm-5.3-flash                   ~/.config/opencode/opencode.json
+dsh       yes    openai+anthropic  myproxy · glm-5.3-flash                 ~/.dsh/settings.yaml
 ```
 
 ## Supported apps
@@ -121,6 +121,12 @@ dsh        yes    openai+anthropic  vfing · glm-5.3-flash                 ~/.ds
 An agent that is not installed is skipped, not guessed at. `--apps codex,omp` narrows a run;
 `--apps` with an uninstalled agent forces it.
 
+The interactive menu asks the same question before writing: a multi-select where the first row
+is **all detected apps**, detected agents are listed first and undetected ones are marked. The
+last selection is remembered, so a menu `use`/`sync` keeps rewriting only the agents you picked.
+An error in any config file (invalid JSON/YAML/TOML) is reported with the file and position, never
+with the offending line, and dry-run keeps that detail instead of hiding it.
+
 ## Import what you already configured
 
 `import` reads every agent's config **and cc-switch's SQLite store** (read-only), resolves
@@ -129,13 +135,14 @@ lists and source apps are unioned. Different protocols on the same host stay sep
 
 ```console
 $ asw import --all
+
 ID             PROTOCOL   BASE URL                                MODELS  FROM       KEY
 -------------  ---------  --------------------------------------  ------  ---------  ---
-any            anthropic  https://a-ocnfniawgw.cn-shanghai...     1       cc-switch  yes
-sub            openai     https://new.vfing.de/v1                 18      omp        yes
-sub-anthropic  anthropic  https://new.vfing.de                    18      omp        yes
+any            anthropic  https://a-long-reseller.example.com...  1       cc-switch  yes
+sub            openai     https://api.example.com/v1              18      omp        yes
+sub-anthropic  anthropic  https://api.example.com                 18      omp        yes
 zhipu-glm      anthropic  https://open.bigmodel.cn/api/anthropic  1       cc-switch  yes
-imported sub · openai · https://new.vfing.de/v1 · 18 models [from omp]
+imported sub · openai · https://api.example.com/v1 · 18 models [from omp]
 imported zhipu-glm · anthropic · https://open.bigmodel.cn/api/anthropic · 1 models [from cc-switch]
 ```
 
@@ -245,7 +252,7 @@ Import still skips already configured accounts.
 | `use <id>` | switch every detected agent; `-a codex,omp`, `-m <model>`, `--dry-run` |
 | `sync` | re-apply the active provider (after an agent update, say) |
 | `discover <id> [--sync]` | refresh the model list + metadata from `/v1/models` |
-| `models [query]` | search the models.dev catalog |
+| `models [query]` | search the models.dev catalog (`-r` refresh the cache, `-l <n>` limit rows) |
 | `refresh [--provider <id>]` | refresh saved metadata and optionally configure Gateway; keep the model list |
 | `models --provider <id> --metadata` | inspect field sources, conflicts and reference pricing as JSON |
 | `prune <id>` / `remove <id> [--prune]` | remove from app configs / from the store |
@@ -253,7 +260,11 @@ Import still skips already configured accounts.
 | `apps` / `install <app>` / `upgrade` | agent version manager |
 
 ```bash
-asw use myproxy -a codex,omp -m glm-5.2
+# unattended add: discover the provider's model list, then write it everywhere
+asw add -y --id myproxy --protocol openai --openai-api responses \
+  --base-url https://api.example.com/v1 --api-key sk-... --discover
+asw use myproxy                           # every detected agent
+asw use myproxy -a codex,omp -m glm-5.2   # ...or only these, with another default model
 asw discover myproxy --sync
 asw remove myproxy --prune
 ```
@@ -262,6 +273,13 @@ New automatic IDs include the full hostname and protocol, e.g. `api-example-com-
 An explicit `--id` is retained, and syncing never renames an existing provider. Import
 deduplication compares endpoint, protocol, and credentials; different accounts remain separate.
 
+A bare IP works the same way — every dot and colon becomes a dash, and the **port is not part
+of the ID**, so `http://152.53.108.231:3456` becomes `152-53-108-231-openai`. Two ports on that
+host therefore share a base ID and the second provider gets `-2` appended
+(`152-53-108-231-openai-2`); pass `--id` to name them yourself. IPv6 hosts lose their brackets
+and dashes (`https://[2001:db8::1]:8080` → `2001-db8-1-openai`), an IDN host uses its punycode
+form, and a base URL that cannot be parsed falls back to `imported`.
+
 ```bash
 asw rename myproxy api-example-com-openai --dry-run
 asw rename myproxy api-example-com-openai

package/README.zh-CN.md

@@ -18,14 +18,14 @@
 </div>
 
 ```console
-$ asw use vfing -m glm-5.3-flash
-switching to vfing (openai) · default model glm-5.3-flash
+$ asw use myproxy -m glm-5.3-flash
+switching to myproxy (openai) · default model glm-5.3-flash
 
 skip claude    Claude Code does not support openai-protocol providers
 ok   codex     ~/.codex/config.toml, ~/.codex/auth.json
                backup: ~/.config/agentsw/backups/transaction-<unique>
 ok   omp       ~/.omp/agent/models.yml
-               select in omp with: omp --model vfing/glm-5.3-flash
+               select in omp with: omp --model myproxy/glm-5.3-flash
 skip pi        pi not detected (pass --apps pi to force)
 ok   opencode  ~/.config/opencode/opencode.json
 ok   dsh       ~/.dsh/settings.yaml, ~/.dsh/.credentials.yaml
@@ -71,35 +71,32 @@ npm install -g agentsw    # 需要 Node >= 22.13，内置 SQLite 无需额外启
 ## 快速开始
 
 ```bash
-agentsw                   # 不带参数：交互菜单（添加、导入、切换、状态、应用管理）
+npx agentsw               # 免安装，直接打开交互菜单
+agentsw                   # 全局安装后可用；短名 `asw` 完全等价
 ```
 
-存储为空时，首次运行会询问是否导入各智能体里已配置的供应商，并让你选择
-English 或简体中文。想用参数跑？同样的流程，全自动：
+**不带参数运行就是一个菜单——整个工具都在里面。** 添加供应商（自动识别或手动设置）、导入各智能体
+已有的供应商、切换供应商和默认模型、重新同步、更新模型列表、设置模型参数补充源、重命名或删除、
+安装/升级智能体、切换语言。首次运行会先问你要 English 还是简体中文，并提议接管你各智能体已经在用的配置。
 
-```bash
-# 添加供应商，并让它自己发现模型列表
-asw add -y --id vfing --protocol openai --openai-api responses \
-  --base-url https://api.example.com/v1 --api-key sk-... --discover
+菜单里的每项操作都有对应的命令，方便脚本、CI 和无头机器——见 [命令](#命令)。
+下文示例统一写作 `asw`；没有全局安装时，请改成 `npx agentsw <命令>`。
 
-asw use vfing             # 把所有检测到的智能体指向它
-asw use vfing --dry-run   # ……或者只看 diff
-asw status                # 各智能体当前指向什么
-```
+不用菜单也能看一眼——`asw status` 打印各智能体当前指向哪个供应商：
 
 ```console
 $ asw status
 config: ~/.config/agentsw/config.json
-active provider: vfing
-
-APP        FOUND  PROTOCOLS         CURRENT                               CONFIG
----------  -----  ----------------  ------------------------------------  ---------------------------
-claude     yes    anthropic         -                                     ~/.claude/settings.json
-codex      yes    openai            vfing · glm-5.3-flash                 ~/.codex/config.toml
-omp        yes    openai+anthropic  providers: sub, sub-anthropic, vfing  ~/.omp/agent/models.yml
-pi         no     openai+anthropic  -                                     ~/.pi/agent/models.json
-opencode   yes    openai+anthropic  vfing/glm-5.3-flash                   ~/.config/opencode/opencode.json
-dsh        yes    openai+anthropic  vfing · glm-5.3-flash                 ~/.dsh/settings.yaml
+active provider: myproxy
+
+APP       FOUND  PROTOCOLS         CURRENT                                 CONFIG
+--------  -----  ----------------  --------------------------------------  --------------------------------
+claude    yes    anthropic         -                                       ~/.claude/settings.json
+codex     yes    openai            myproxy · glm-5.3-flash                 ~/.codex/config.toml
+omp       yes    openai+anthropic  providers: sub, sub-anthropic, myproxy  ~/.omp/agent/models.yml
+pi        no     openai+anthropic  -                                       ~/.pi/agent/models.json
+opencode  yes    openai+anthropic  myproxy/glm-5.3-flash                   ~/.config/opencode/opencode.json
+dsh       yes    openai+anthropic  myproxy · glm-5.3-flash                 ~/.dsh/settings.yaml
 ```
 
 ## 支持的应用
@@ -119,6 +116,11 @@ dsh        yes    openai+anthropic  vfing · glm-5.3-flash                 ~/.ds
 未安装的应用会被跳过，而不是瞎猜。`--apps codex,omp` 只跑指定应用；
 对未检测到的应用显式传 `--apps` 可强制写入。
 
+交互菜单写配置前会问同一个问题：多选框第一行是**全部检测到的应用**，已检测到的排在前面，
+未检测到的会标注出来。上次的选择会被记住，所以菜单里的 `use`/`sync` 只会继续写你勾选的那几个。
+任何配置文件解析失败（JSON/YAML/TOML 非法）都会报出文件与位置，绝不回显出错那一行；
+`--dry-run` 同样保留这些细节，而不是含糊带过。
+
 ## 导入你已有的配置
 
 `import` 读取每个智能体的配置**以及 cc-switch 的 SQLite 存储**（只读），解析内联或环境变量
@@ -127,13 +129,14 @@ dsh        yes    openai+anthropic  vfing · glm-5.3-flash                 ~/.ds
 
 ```console
 $ asw import --all
+
 ID             PROTOCOL   BASE URL                                MODELS  FROM       KEY
 -------------  ---------  --------------------------------------  ------  ---------  ---
-any            anthropic  https://a-ocnfniawgw.cn-shanghai...     1       cc-switch  yes
-sub            openai     https://new.vfing.de/v1                 18      omp        yes
-sub-anthropic  anthropic  https://new.vfing.de                    18      omp        yes
+any            anthropic  https://a-long-reseller.example.com...  1       cc-switch  yes
+sub            openai     https://api.example.com/v1              18      omp        yes
+sub-anthropic  anthropic  https://api.example.com                 18      omp        yes
 zhipu-glm      anthropic  https://open.bigmodel.cn/api/anthropic  1       cc-switch  yes
-imported sub · openai · https://new.vfing.de/v1 · 18 models [from omp]
+imported sub · openai · https://api.example.com/v1 · 18 models [from omp]
 imported zhipu-glm · anthropic · https://open.bigmodel.cn/api/anthropic · 1 models [from cc-switch]
 ```
 
@@ -234,7 +237,7 @@ asw sync --provider myproxy
 | `use <id>` | 切换所有检测到的智能体；`-a codex,omp`、`-m <model>`、`--dry-run` |
 | `sync` | 重新应用当前供应商（比如某个智能体升级之后） |
 | `discover <id> [--sync]` | 从 `/v1/models` 刷新模型列表与元数据 |
-| `models [query]` | 搜索 models.dev 目录 |
+| `models [query]` | 搜索 models.dev 目录（`-r` 强制刷新缓存，`-l <n>` 限制条数） |
 | `refresh [--provider <id>]` | 刷新已有模型参数，可设置 Gateway 补充源，不改变模型列表 |
 | `models --provider <id> --metadata` | 以 JSON 查看字段来源、冲突和参考价格 |
 | `prune <id>` / `remove <id> [--prune]` | 从各应用配置中清除 / 从存储中删除 |
@@ -242,7 +245,11 @@ asw sync --provider myproxy
 | `apps` / `install <app>` / `upgrade` | 智能体版本管理 |
 
 ```bash
-asw use myproxy -a codex,omp -m glm-5.2
+# 无人值守：添加供应商并自动发现模型列表，然后写入所有智能体
+asw add -y --id myproxy --protocol openai --openai-api responses \
+  --base-url https://api.example.com/v1 --api-key sk-... --discover
+asw use myproxy                           # 所有检测到的智能体
+asw use myproxy -a codex,omp -m glm-5.2   # ……或只写这几个，并换一个默认模型
 asw discover myproxy --sync
 asw remove myproxy --prune
 ```
@@ -251,6 +258,13 @@ asw remove myproxy --prune
 显式指定的 `--id` 会保留，同步不会自动重命名。导入去重会同时比较端点、协议和凭据，
 不同账号保持独立；同一账号的自定义名称优先于自动生成名称。
 
+纯 IP 的填写方式完全一样——域名里的每个点和冒号都变成短横线，**端口不属于 ID**：
+`http://152.53.108.231:3456` 生成的 ID 是 `152-53-108-231-openai`。因此同一 IP 上的两个端口
+共用一个基础 ID，第二个供应商会自动带上 `-2`（`152-53-108-231-openai-2`）；
+想区分请自己传 `--id`。IPv6 会去掉方括号并把冒号变短横线
+（`https://[2001:db8::1]:8080` → `2001-db8-1-openai`），国际化域名使用 punycode，
+无法解析的 base URL 退回 `imported`。
+
 ```bash
 asw rename myproxy api-example-com-openai --dry-run
 asw rename myproxy api-example-com-openai

package/dist/commands.js

@@ -13,7 +13,7 @@ import { loadGatewayCatalog } from "./gateway.js";
 import { resolveTargets, supportsProtocol, targets } from "./targets/index.js";
 import { discoverProviderModels, probeProtocols } from "./discover.js";
 import { appCommand, appPackages, installedVersion, isNewer, latestVersion, normalizeAppVersion, runShell } from "./apps.js";
-import { drainPendingWrites, readTextIfExists, setDryRun } from "./fsutil.js";
+import { SafeConfigError, drainPendingWrites, readTextIfExists, setDryRun } from "./fsutil.js";
 import { applyModelFilter } from "./filter.js";
 import { availableProviderId, providerIdFromBaseUrl, providerNameFromBaseUrl } from "./slug.js";
 import { t } from "./i18n.js";
@@ -443,7 +443,8 @@ async function runTargets(op, provider, appsFilter, redactErrors = false) {
             results.push(await target[op](provider));
         }
         catch (err) {
-            results.push({ app: target.id, changed: [], notes: [], skipped: pc.red(redactErrors ? "failed: configuration could not be previewed safely" : `failed: ${err.message}`) });
+            const safe = redactErrors && !(err instanceof SafeConfigError);
+            results.push({ app: target.id, changed: [], notes: [], skipped: pc.red(`failed: ${safe ? "configuration could not be previewed safely" : err.message}`) });
             process.exitCode = 1;
         }
     }

package/dist/fsutil.js

@@ -3,6 +3,13 @@ import os from "node:os";
 import path from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomUUID } from "node:crypto";
+/**
+ * An error whose message is guaranteed to carry no file content. Dry-run redacts
+ * unknown errors wholesale (parser messages can embed credentials), so config
+ * parsers must throw this to stay actionable there.
+ */
+export class SafeConfigError extends Error {
+}
 // AGENTSW_HOME is an explicit portable/test override. Native Windows otherwise
 // uses USERPROFILE/os.homedir(), while Unix follows HOME as expected.
 export const home = process.env.AGENTSW_HOME?.trim() ||
@@ -88,7 +95,13 @@ export function readJsonIfExists(file) {
     const text = readTextIfExists(file);
     if (text === undefined)
         return undefined;
-    return JSON.parse(text);
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        // Node quotes surrounding input in the message, which may hold credentials.
+        throw new SafeConfigError(`${file}: invalid JSON configuration`);
+    }
 }
 /** Compatibility preview switch. Each target captures its value when its scoped work starts. */
 let dryRun = false;

package/dist/i18n.js

@@ -123,6 +123,10 @@ const messages = {
     "menu.defaultModel": { en: "default model", "zh-CN": "默认模型" },
     "menu.keepDefault": { en: "keep current default ({model})", "zh-CN": "保持当前默认模型({model})" },
     "menu.active": { en: "current in agentsw", "zh-CN": "agentsw 当前" },
+    "menu.pickApps": { en: "which agent configs should this write to?", "zh-CN": "写入哪些智能体配置？" },
+    "menu.appsAll": { en: "all {count} detected apps", "zh-CN": "全部 {count} 个检测到的应用" },
+    "menu.appNotDetected": { en: "(not detected)", "zh-CN": "(未检测到)" },
+    "menu.appsHint": { en: "↑/↓ move · Space toggle · Enter confirm", "zh-CN": "↑/↓ 移动 · 空格切换 · Enter 确认" },
     "menu.discoverFor": { en: "which provider's model list should be updated?", "zh-CN": "选择要更新模型列表的供应商" },
     "menu.pushRefresh": { en: "also sync this provider to agent configs after updating its model list?", "zh-CN": "更新模型列表后，是否同时将该供应商同步到智能体配置？" },
     "menu.removeProvider": { en: "which provider configuration should be deleted?", "zh-CN": "选择要删除配置的供应商" },

package/dist/jsonc.js

@@ -1,4 +1,4 @@
-import { readTextIfExists } from "./fsutil.js";
+import { SafeConfigError, readTextIfExists } from "./fsutil.js";
 import { applyEdits, createScanner, getNodeValue, modify, parseTree, printParseErrorCode, } from "jsonc-parser";
 export function isJsonObject(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -9,11 +9,10 @@ function parseJsoncObject(file, text) {
     const root = parseTree(source, errors, { allowTrailingComma: true });
     const error = errors[0];
     if (error) {
-        // Do not quote source text: config files can contain credentials.
-        throw new Error(`${file}: invalid JSONC (${printParseErrorCode(error.error)} at offset ${error.offset})`);
+        throw new SafeConfigError(`${file}: invalid JSONC (${printParseErrorCode(error.error)} at offset ${error.offset})`);
     }
     if (root?.type !== "object")
-        throw new Error(`${file}: expected a JSON object at the document root`);
+        throw new SafeConfigError(`${file}: expected a JSON object at the document root`);
     // Parsing resolves duplicate keys last-wins, but modify edits the first occurrence.
     // Reject that ambiguity at any depth rather than syncing a value the agent will not read.
     const checkDuplicates = (node) => {
@@ -22,7 +21,7 @@ function parseJsoncObject(file, text) {
             if (names) {
                 const name = child.children[0].value;
                 if (names.has(name)) {
-                    throw new Error(`${file}: invalid JSONC (duplicate object property at offset ${child.offset})`);
+                    throw new SafeConfigError(`${file}: invalid JSONC (duplicate object property at offset ${child.offset})`);
                 }
                 names.add(name);
             }

package/dist/menu.js

@@ -62,6 +62,42 @@ async function pickProvider(message) {
     const p = store.providers[id];
     return { id, defaultModel: p.defaultModel, models: p.models.map((m) => m.id) };
 }
+/**
+ * Multi-select target apps, remembering the previous choice. The first row selects
+ * every detected app; picking it (or toggling everything off) returns undefined,
+ * which keeps the CLI default of "all detected apps". A narrower selection becomes
+ * an explicit --apps filter, which force-writes even undetected apps — so only
+ * offer real choices.
+ */
+async function pickApps(message) {
+    const remembered = (loadStore().syncTargets ?? []).filter((id) => targets.some((target) => target.id === id));
+    const detected = targets.filter((target) => target.detect());
+    const { apps } = await prompts({
+        type: "multiselect",
+        name: "apps",
+        message,
+        hint: t("menu.appsHint"),
+        instructions: false,
+        choices: [
+            { title: t("menu.appsAll", { count: detected.length }), value: "all", selected: remembered.length === 0 },
+            // Detected apps first, and say so: choosing an undetected one force-creates its config.
+            ...[...targets].sort((a, b) => Number(b.detect()) - Number(a.detect())).map((target) => ({
+                title: `${target.id} · ${target.name}${target.detect() ? "" : ` ${pc.dim(t("menu.appNotDetected"))}`}`,
+                value: target.id,
+                selected: remembered.includes(target.id),
+            })),
+        ],
+    }, cancel);
+    const picked = (Array.isArray(apps) ? apps : []).filter((value) => value !== "all");
+    const all = picked.length === 0 || apps.includes("all") || picked.length === targets.length;
+    const store = loadStore();
+    if (all)
+        delete store.syncTargets;
+    else
+        store.syncTargets = picked;
+    saveStore(store);
+    return all ? undefined : picked.join(",");
+}
 async function renameFromMenu() {
     const picked = await pickProvider(t("menu.renameProvider"));
     if (!picked)
@@ -201,6 +237,7 @@ export async function cmdMenu() {
             const picked = await pickProvider(t("menu.pickProvider"));
             if (!picked)
                 continue;
+            const apps = await pickApps(t("menu.pickApps"));
             const { model } = await prompts({
                 type: picked.models.length > 1 ? "select" : null,
                 name: "model",
@@ -211,7 +248,7 @@ export async function cmdMenu() {
                     ...picked.models.filter((m) => m !== picked.defaultModel).map((m) => ({ title: m, value: m })),
                 ],
             }, cancel);
-            await cmdUse(picked.id, { model: model || undefined });
+            await cmdUse(picked.id, { model: model || undefined, apps });
         }
         else if (action === "status") {
             cmdStatus();
@@ -220,14 +257,14 @@ export async function cmdMenu() {
             cmdList();
         }
         else if (action === "sync") {
-            await cmdSync({});
+            await cmdSync({ apps: await pickApps(t("menu.pickApps")) });
         }
         else if (action === "discover") {
             const picked = await pickProvider(t("menu.discoverFor"));
             if (!picked)
                 continue;
             const sync = await askToggle(t("menu.pushRefresh"));
-            await cmdDiscover(picked.id, { sync });
+            await cmdDiscover(picked.id, { sync, apps: sync ? await pickApps(t("menu.pickApps")) : undefined });
         }
         else if (action === "metadata") {
             const picked = await pickProvider(t("menu.metadataProvider"));

package/dist/targets/codex.js

@@ -1,12 +1,23 @@
 import fs from "node:fs";
 import path from "node:path";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
-import { backupFile, home, readJsonIfExists, readTextIfExists, writeFileAtomic } from "../fsutil.js";
+import { SafeConfigError, backupFile, home, readJsonIfExists, readTextIfExists, writeFileAtomic } from "../fsutil.js";
 import { isJsonObject } from "../jsonc.js";
 import { transactionalTarget } from "../target-transaction.js";
 const dir = path.join(home, ".codex");
 const configFile = path.join(dir, "config.toml");
 const authFile = path.join(dir, "auth.json");
+/** smol-toml quotes the offending source line, which may hold a key: report only the position. */
+function parseConfigToml(file, text) {
+    try {
+        return parseToml(text);
+    }
+    catch (err) {
+        const { line, column } = err;
+        const position = line === undefined ? "" : ` (line ${line}${column === undefined ? "" : `, col ${column}`})`;
+        throw new SafeConfigError(`${file}: invalid TOML configuration${position}`);
+    }
+}
 /**
  * Codex CLI: [model_providers.<id>] in ~/.codex/config.toml selects a custom
  * OpenAI-protocol endpoint; the key ships via ~/.codex/auth.json OPENAI_API_KEY.
@@ -21,7 +32,7 @@ export const codex = transactionalTarget({
     async apply(provider) {
         const notes = [];
         const text = readTextIfExists(configFile);
-        const config = (text ? parseToml(text) : {});
+        const config = text ? parseConfigToml(configFile, text) : {};
         const authValue = readJsonIfExists(authFile);
         const auth = authValue === undefined ? {} : authValue;
         if (!isJsonObject(auth))
@@ -84,7 +95,7 @@ export const codex = transactionalTarget({
         const text = readTextIfExists(configFile);
         if (!text)
             return { app: this.id, changed: [], notes: [], skipped: "no config.toml" };
-        const config = parseToml(text);
+        const config = parseConfigToml(configFile, text);
         if (config.model_providers !== undefined && !isJsonObject(config.model_providers)) {
             throw new Error(`${configFile}: expected model_providers to be a table`);
         }
@@ -114,7 +125,7 @@ export const codex = transactionalTarget({
         if (!text)
             return undefined;
         try {
-            const config = parseToml(text);
+            const config = parseConfigToml(configFile, text);
             if (!config.model_provider)
                 return undefined;
             return `${String(config.model_provider)} · ${String(config.model ?? "?")}`;

package/dist/yaml.js

@@ -1,12 +1,33 @@
 import YAML from "yaml";
+import { SafeConfigError } from "./fsutil.js";
+/** YAML errors embed the offending source line, which may hold credentials: keep only the code and position. */
+function describeYamlErrors(file, errors) {
+    const details = [...new Set(errors.map((error) => {
+            const position = error.linePos?.[0];
+            return [
+                error.code,
+                position ? `line ${position.line}` : undefined,
+                position ? `col ${position.col}` : undefined,
+            ].filter(Boolean).join(" ");
+        }))].slice(0, 3);
+    return details.length
+        ? `${file}: invalid YAML configuration (${details.join("; ")})`
+        : `${file}: invalid YAML configuration`;
+}
 /** Resolve aliases in document context before edits can mutate or remove anchors. */
 export function parseYamlMapping(file, text) {
+    let doc;
+    try {
+        doc = text ? YAML.parseDocument(text) : new YAML.Document({});
+    }
+    catch {
+        throw new SafeConfigError(`${file}: invalid YAML configuration`);
+    }
+    if (doc.errors.length)
+        throw new SafeConfigError(describeYamlErrors(file, doc.errors));
+    if (doc.contents == null)
+        doc.contents = doc.createNode({});
     try {
-        const doc = text ? YAML.parseDocument(text) : new YAML.Document({});
-        if (doc.errors.length)
-            throw new Error("parse error");
-        if (doc.contents == null)
-            doc.contents = doc.createNode({});
         // YAML permits cycles; application configuration does not. The document
         // conversion also enforces YAML's alias expansion limit before we detach.
         JSON.stringify(doc.toJS());
@@ -27,8 +48,8 @@ export function parseYamlMapping(file, text) {
         return doc;
     }
     catch {
-        // Parser messages include source lines, which may contain credentials.
-        throw new Error(`${file}: invalid YAML configuration (expected an acyclic mapping with valid aliases)`);
+        // Parser and conversion messages include source lines, which may contain credentials.
+        throw new SafeConfigError(`${file}: invalid YAML configuration (expected an acyclic mapping with valid aliases)`);
     }
 }
 /** Validate the emitted configuration before any backup or write. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentsw",
-  "version": "0.8.0",
+  "version": "0.9.1",
   "description": "CLI provider switcher for coding agents: manage OpenAI/Anthropic-protocol providers in one place and sync them, with models.dev metadata, into Claude Code, Codex, omp, pi, prime-agent, opencode, Hermes, WorkBuddy and DeepSeek Harness",
   "type": "module",
   "repository": {