The sync command queries all hosts to find where services are actually running and updates the state file to match reality. Supports --dry-run to preview changes without modifying state. Useful for initial setup or after manual changes.