AgentSync

Encrypted sync for AI agent configuration.

Snapshot, redact, encrypt, and restore Claude, Cursor, Codex, Copilot, and VS Code setup from a Git-backed vault.

AgentSync is a Bun-based CLI and background daemon that snapshots AI agent configuration from your machine, encrypts it with age recipients, and stores it in a Git-backed vault so you can pull the same setup onto another machine.

It is for people who keep global agent configuration in tools like Claude, Cursor, Codex, Copilot, and VS Code and want one encrypted source of truth instead of manually copying files between laptops.

Install

Global install with Bun 1.3.9 or later:

bun install -g @chrisleekr/agentsync
agentsync --version

Without a global install, run via bunx:

bunx --package @chrisleekr/agentsync agentsync --version

Quickstart

The fastest way in is the interactive TUI. Running agentsync with no arguments opens a tabbed dashboard that lets you browse the vault, inspect local agent content per agent, trigger push/pull, and migrate configuration between agents:

# Open the TUI (or use the explicit alias `agentsync tui`)
agentsync

In a non-interactive shell (CI, piped output) bare agentsync falls back to the status text output so scripts are not broken.

The flag-driven CLI is still the canonical scripting surface:

# Initialise a vault and the local machine key
agentsync init --remote git@github.com:<you>/agentsync-vault.git --branch main

# Push local agent configuration into the encrypted vault
agentsync push

# On another machine, after running init with the same remote
agentsync pull

The full quickstart, command reference, and architecture model live at the documentation site: https://chrisleekr.github.io/agentsync/.

Commands

Command	Why you run it
(bare) / tui	Open the interactive TUI: vault browser, per-agent local view, push/pull, and migrate.
init	Create the local vault workspace, machine key, config, and initial remote state.
push	Snapshot local agent configs, sanitise secrets, encrypt artefacts, and push to Git.
pull	Pull the latest vault state and apply decrypted artefacts locally.
status	Compare local files with the vault and surface drift.
doctor	Run environment, key, vault, and daemon diagnostics.
daemon	Install and manage the background auto-sync daemon.
key	Add recipients or rotate the local machine key.
skill	Remove a skill from the vault explicitly.
migrate	Translate configuration between agent formats locally.
destroy	Wipe the local vault clone (default) or the remote vault contents via a normal commit. Local agent files (~/.claude, ~/.cursor, …) are never touched.

Full flag tables and caveats: Commands.

Documentation

The full documentation is hosted at https://chrisleekr.github.io/agentsync/ and lives in docs/:

• Architecture — system model, push and pull pipelines, daemon model, security boundaries.
• Commands — every subcommand, flag, outcome, and caveat.
• Migrate — translate config between Claude, Cursor, Codex, Copilot, and VS Code.
• Operations — daemon install per OS, key rotation, troubleshooting catalogue.
• Contributing — develop from source, run the test suite, release discipline, doc ownership.

Contributing

Clone, verify, and read the contributor guide:

git clone git@github.com:chrisleekr/agentsync.git
cd agentsync
bun install
bun run check

The contributor workflow, the speckit feature flow, release discipline, and doc ownership all live in Contributing.

License

MIT.