
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@donnes/syncode
Advanced tools
Sync AI code agent configs (Claude Code, Cursor, Windsurf, OpenCode) across machines and projects.
Stop fighting with AI agent configurations. Sync your Claude Code, Cursor, Windsurf, OpenCode, and VSCode settings across machines and projects with a single command.
The era of AI-powered coding is here, but managing multiple AI assistants is a mess. syncode solves this.
The Problem: You use Cursor at work, Claude Code for side projects, and want to try Windsurf or Roo Code. Each has its own config format and setup. Keeping 17+ AI agents in sync is manual hell.
The Solution: syncode is your single source of truth for AI agent configurations.
npx @donnes/syncode new
syncode init
# Install globally
npm install -g @donnes/syncode
# Or using bun
bun install -g @donnes/syncode
# Initialize
syncode new
syncode new
This will:
syncode init
This will:
~/.syncode/config.jsonsyncode sync
Choose direction:
syncode status
Shows:
syncode machine deps
Install opinionated development dependencies for your machine:
install.sh with curl-based installs where possibleThis is a boilerplate file that gets copied to your repo root during syncode new. Edit it to customize the tools for your workflow.
syncode machine status
Shows comprehensive machine setup status:
syncode push
Push your config changes to the remote repository:
| Agent | Config Path | Sync Method | Auto-Detect |
|---|---|---|---|
| Amp | ~/.config/amp | Symlink | ✅ Yes |
| Antigravity | ~/.gemini/antigravity | Copy | ✅ Yes |
| Claude Code | ~/.claude | Copy | ✅ Yes |
| Clawdbot | ~/.clawdbot | Symlink | ✅ Yes |
| Codex | ~/.codex | Symlink | ✅ Yes |
| Cursor | ~/Library/Application Support/Cursor/User | Symlink | ✅ Yes |
| Droid | ~/.factory | Symlink | ✅ Yes |
| Gemini CLI | ~/.gemini | Copy | ✅ Yes |
| GitHub Copilot | ~/.copilot | Copy | ✅ Yes |
| Goose | ~/.config/goose | Symlink | ✅ Yes |
| Kilo Code | ~/.kilocode | Symlink | ✅ Yes |
| Kiro CLI | ~/.kiro | Symlink | ✅ Yes |
| OpenCode | ~/.config/opencode | Symlink | ✅ Yes |
| Roo Code | ~/.roo | Symlink | ✅ Yes |
| Trae | ~/.trae | Symlink | ✅ Yes |
| VSCode | ~/Library/Application Support/Code/User | Symlink | ✅ Yes |
| Windsurf | ~/.codeium/windsurf | Symlink | ✅ Yes |
Global configuration is stored at ~/.syncode/config.json:
{
"version": "1.0.0",
"repoPath": "~/.syncode/repo",
"remote": "https://github.com/<username>/configs.git",
"agents": ["opencode", "claude", "cursor", "windsurf"],
"features": {
"autoSync": false,
"backupBeforeExport": true,
"smartSyncDefaults": true
}
}
~/.syncode/repo/
├── .git/
├── .gitignore
├── install.sh
├── README.md
├── .agents/ # Shared skills (symlinked)
│ └── skills/
└── configs/
├── amp/ # Symlinked
├── antigravity/ # Copy sync
├── claude/ # Copy sync (preserves cache)
├── clawdbot/ # Symlinked
├── codex/ # Symlinked
├── cursor/ # Symlinked
├── droid/ # Symlinked
├── gemini-cli/ # Copy sync
├── github-copilot/ # Copy sync
├── goose/ # Symlinked
├── kilo/ # Symlinked
├── kiro-cli/ # Symlinked
├── opencode/ # Symlinked
├── roo/ # Symlinked
├── trae/ # Symlinked
├── vscode/ # Symlinked
└── windsurf/ # Symlinked
# Edit your AI agent configs normally
# Example: ~/.config/opencode/opencode.json
# Example: ~/.agents/skills/my-helper.md
# Changes are synced via symlinks automatically
# Check what changed
syncode status
# Import changes to repo
syncode sync
# Select "Import"
# Push to remote (commits and pushes in one command)
syncode push
# Pull changes from remote
syncode pull
syncode new - Initialize a new agent config repositorysyncode init - Initialize from an existing agent config repositorysyncode sync - Sync agent configs (import or export)syncode status - Show status of synced agentssyncode push - Push config changes to git remotesyncode pull - Pull config changes from git remotesyncode machine deps - Install machine dependencies (install.sh)syncode machine status - Show full machine setup statussyncode --version - Show versionsyncode help - Show help message# Clone the repository
git clone https://github.com/donnes/syncode.git
cd syncode
# Install dependencies
bun install
# Run in development mode
bun run dev
# Build for production
bun run build
# Link locally
bun link
# Type check
bun run typecheck
# Build
bun run build
| Platform | Status | Notes |
|---|---|---|
| macOS | ✅ Fully Supported | Primary development platform |
| Linux | ✅ Fully Supported | Tested on Ubuntu, Arch |
| Windows | 🚧 Planned | Coming soon |
# Run initialization
syncode new
# Or connect to an existing repo
syncode init
# Check configuration health
syncode status
# Re-export configs
syncode sync
# Select "Export"
Contributions are welcome! Please read our Contributing Guide for details.
MIT © Donald Silveira
Made with ❤️ for developers
FAQs
Sync AI code agent configs (Claude Code, Cursor, Windsurf, OpenCode) across machines and projects.
The npm package @donnes/syncode receives a total of 4 weekly downloads. As such, @donnes/syncode popularity was classified as not popular.
We found that @donnes/syncode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.