config-sync-service¶

Status: Current | Last reviewed: 2026-05-28

Replicates agent configurations between environments. Used to push a known-good agent from a staging tenant into a production tenant — or to mirror an environment's config snapshot.

Source¶

apps/config-sync-service

Runtime¶

Aspect	Value
Language	Python 3.12
Framework	FastAPI

What it does¶

Reads agents, agent_versions, tools, integrations from a source.
Re-encrypts secret blobs with the destination's MASTER_ENCRYPTION_KEY.
Writes them to the destination, preserving versions or stamping new ones.
Records an audit trail of what was synced.

Dependencies¶

Service	Purpose
Postgres (source)	Read
Postgres (destination)	Write
Both `MASTER_ENCRYPTION_KEY` values	Re-encrypt

Vanguard¶

overmind restart config-sync-service

Used most often to seed a fresh devcontainer from a saved snapshot.

Production¶

Helm chart at charts/config-sync-service.