dotsync stops the sync when it finds a secret.
It keeps ~/.claude and ~/.codex in sync across my Macs with git. Before every push it scans the tracked files, names the file, and I choose: ignore it or encrypt it with age.
Repo → https://github.com/akira-foundation/dotsync
GitHubGitHub - akira-foundation/dotsync: Sync agent config folders across Macs with git, gh and ageSync agent config folders across Macs with git, gh and age - akira-foundation/dotsync
commit 1c0275a