Canonfig
A deterministic, one-way configuration synchronizer with bounded AI assistance.
Canonfig keeps declared AI agent configuration aligned across machines. One Source Machine publishes immutable, authenticated Profile Revisions. Each Follower Machine plans, applies, and verifies the revision selected for its Machine Profile and Follower Groups.
The authority boundary
Followers never publish upstream state. Discovery and Configuration Agent output become Profile Change Proposals; publication is always explicit.
Start here
Tutorial: sync Claude Code and Codex from machine A to machine B
Publish your setup from one machine, enroll a second one, and keep it in sync on a schedule.
How-to: Update and republish a profile
Change what followers receive, add or remove resources, pin tools, and roll content back.
How-to: Manage schedules
Install and inspect native daily or weekly follower synchronization.
How-to: Run Canonfig unattended
Keep the Source serving and followers syncing after logout, reboot, or a tunnel outage.
How-to: Recover drift
Resume an interrupted synchronization or resolve non-converged outcomes.
How-to: Upgrade to Canonfig 4.2.0
Update 4.0.x/4.1.x safely, or preserve a 3.2.x installation before setting up 4.2.0 separately.
Explanation: Architecture
Understand the authority model, determinism, credentials, and rollback.
Reference: CLI
Complete CLI command surface, platform behavior, diagnostics, and security.
Non-goals
Canonfig does not provide bidirectional synchronization, automatic credential copying, silent conflict resolution for modified skills, whole-home-directory backup, or a hosted fleet control plane. It also does not guarantee rollback for third-party installers.