pi-noodle: your Pi agent's inner voice and memory.
Shared memory. Optional archive encryption. A side chat beside your main task.
Memory · Memory editor · Encryption · Side chat · Install · Full guide
pi install npm:pi-noodleCurrent version: 1.15.7
What is it? pi-noodle is an extension for Pi, the terminal coding agent. It gives main Pi and its side conversation a shared place to remember useful facts, an optional searchable history archive, and a separate space to ask questions without replacing the main task.
Know the defaults: shared memory is on in trusted projects and stored in local plaintext. Recalled facts can reach your active model. The archive, encryption, watchers and side-chat tool/bridge grants start off. Nothing is silently imported or encrypted.
Stop explaining the same project decisions in every session. Save preferences, corrections and useful references once; make them available to both main Pi and Noodle.
Conceptual flow, not a live UI. Memory works even when the side-chat window is closed.
- Remember useful facts: project notes for local decisions; global notes for preferences you deliberately want across projects.
- Find them again: bounded automatic recall and local keyword search, without embeddings or background model jobs.
- Stay in control: inspect provenance, edit curated notes, review deletion, or pause saving and recall separately.
- Go beyond notes: the separate, opt-in archive can search recorded conversations and tool output, or explicitly import older Pi sessions.
Try a synthetic project note:
/noodle-memory remember Build workflow | This project uses npm, not pnpm.
/noodle-memory search Build workflow
/noodle-memory editor
Memory is reference material, not higher-priority instructions. Recall is bounded, not perfect; do not store passwords or tokens in it. Memory controls and privacy.
Keep useful facts. Correct the rest. Open /noodle-memory editor to search saved notes, read them beside the list, and review changes before saving. Inside Noodle, use /memory editor.
Actual editor renderer with synthetic notes and a demonstration palette—not a user database. Open the full-size preview.
- Find → read → edit: Search narrows the list; moving between notes updates the preview. Choose Edit, then Review and save.
- Keyboard first, mouse when supported: Tab switches sections, arrows navigate, Enter activates. Fullscreen mode adds row/button clicks, double-click details and pane scrolling. Regular mode stays keyboard-only; no Pi settings are changed.
- Stay in control: choose project or global scope, review deletions, and get a warning before discarding unsaved edits. Save/delete/discard approvals remain keyboard-only after every review page is displayed.
The editor manages curated notes, not captured conversations or the separate archive. Memory remains local plaintext and can reach your active model independently of Repo tools. Editor controls and limits.
Keep a searchable archive, and choose whether to encrypt it on disk. The archive is separate from shared memory. Recording, model access and encryption are independent opt-ins.
Conceptual protection boundary. This is archive encryption, not end-to-end encryption.
- Protect the active archive: its database, search index and SQLite journals—not just individual message bodies.
- Choose how to unlock: a password, a session/process grant, a time limit, or an explicitly remembered key in the OS credential store.
- Search when permitted: human inspection and model access have separate controls; encrypted storage does not prevent authorized reads from reaching a model provider.
What it does not encrypt: shared memory, Pi's original transcripts, attachments, exports and retained plaintext copies. The archive can contain sensitive unredacted content. This is not a sandbox or independently audited cryptography.
Read the safe setup instructions before enabling recording or migrating. Pause effective capture first if you want to avoid new plaintext archive captures. Password entry requires Pi's regular TUI; native-library and OS requirements apply. Existing plaintext sources remain until you explicitly clean them up.
Archive search and import · Encryption, unlock and recovery · Technical security boundary
Ask a question without replacing the main conversation. Open /noodle for a separate thread that receives a summary and bounded recent context from main Pi.
Conceptual flow. Separate conversations are not a privacy sandbox; shared memory has its own controls.
/noodle explain the last validation failure and suggest what to check next
Use the main model or choose another physical model with F2; adjust thinking with F3. Enable repository tools only when wanted. Note main sends a quiet follow-up when enabled; Redirect requires review for every send.
Close is not stop. Assigned work and enabled grants can continue after closing the panel. /noodle status, /noodle stop and /noodle access off keep control available without reopening it. Restart/reload ends background work; this is not a daemon.
Side-chat controls · Model selection · Overlay preview
- Install with
pi install npm:pi-noodle, then restart or reload Pi. - Read the first-use memory notice. Use
/noodle-memoryto inspect effective controls, or/noodle-memory offto pause memory without deleting data. - Try the memory commands above or open
/noodle. Enable archive recording, encryption and extra tools only when you choose.
Requires Pi 1.0.0 or newer and Node.js 22.19.0 or newer. Pi supplies the host runtime and model authentication; this package does not install another copy of Pi. Encryption has optional native dependencies; local runtime validation is Linux-only.
| Feature | Default | Important boundary |
|---|---|---|
| Shared memory | On in trusted projects | Local plaintext; recalled facts may reach your active model. |
| Session archive | Off | Separate store; no silent backfill or import. |
| Archive encryption | Off | Protects only the active archive; does not turn recording on. |
| Model archive access | Off | Separate opt-in; wider searches need approval or an explicit standing setting. |
| Repo tools, Note main, Redirect | Off | Separate grants; redirects also need per-send confirmation. |
| Capability | What it adds |
|---|---|
| Watchers | Bounded local checks can wake an idle main agent, without model polling. Off by default; the wake-up model turn can cost tokens. |
| Native MCP | Use configured external tools and services through Pi when Repo tools is enabled. |
| History import | Preview and explicitly approve existing session files; inspect duplicates and partial results. |
| Memory editor | Browse, search, correct and organize curated notes with visible save/delete reviews. |
The old /jarvis* commands and jarvis_* tools still work as aliases. Saved memory, archives, watchers and side-session references remain compatible. Remove the old extension before loading pi-noodle; do not load both together.
Storage keeps its legacy names unless you explicitly use the offline storage migration utility. No migration is required to use the renamed extension. Historical records and authenticated format tags are not blindly rewritten.
- Complete user guide and command reference
- Archive encryption design
- Editable logo, layers and artwork generation
- Release process · Changelog · MIT code license
Maintained at rustytensor/pi-noodle. npm publication is manual.
Logo adapted from 'Death Ramen Skull Bowl Logo' by gagavastard (Envato Elements).