dsh-sync

Keeping DeepSeek Harness settings aligned across multiple machines usually meant pushing the entire DSH home directory into Git — credentials, machine-specific endpoints, local plugin dependencies all traveling together. That workflow is both a security risk and an audit nightmare. dsh-sync solves one problem: sync exactly what you choose, and keep everything else local.

Its core capabilities include fine-grained selection by settings namespace, profile, patch, and preset directory; automatic stripping of known secret fields and user-defined local-only paths before anything is written to Git; per-line review where you can skip an added line or keep a removed local line; explicit confirmation gates separating executable changes (profile patches, plugin manifests, user presets) from ordinary settings; conflict resolution at the line or file level; and automatic backup with one-click repair if an apply is interrupted. The sync repository stays fully isolated from live files — fetch never overwrites, push is fast-forward only.

It is built for developers and platform teams running DeepSeek Harness on two or more machines, CI nodes, or shared environments who want configuration that is traceable, reviewable, and reversible — without a single credential or machine-specific value ever landing in a repository.