pi-state-sync
Pi extension · v0.3.1

Your Pi config.
Everywhere.

Git-backed configuration sync across hosts, with encrypted secrets, deliberate commands, and zero session leakage.

Quick start
  • ✓ Explicit Git writes
  • ✓ dotenvx validation
  • ✓ No session sync
pi · ~/.pi/agent
›/pistate status
M settings.json
M extensions/review.ts
›/pistate snapshot chore: sync config
validatestagecommit
✓ Committed: chore: sync config
workstation
laptop
Built for Pi Git dotenvx GitHub
Small surface, strong defaults

Sync what matters.
Leave risk behind.

Pi already stores durable configuration as files. pi-state-sync adds guardrails—not another storage format.

Five commands. No hidden automation.

Choose new, existing, or local setup. Reset remotes safely. No background commits, shutdown hooks, force pushes, or surprise network writes.

/pistate configure /pistate configure reset /pistate status /pistate snapshot /pistate pull /pistate push

Portable allowlist

Settings, models, context, extensions, skills, prompts, and themes. Nothing else gets staged.

Secrets stay secrets

Encrypted .env can travel. Private keys, OAuth auth, trust, sessions, and caches cannot.

●API_KEY="encrypted:…"

Predictable pulls

Dirty trees stop. Pulls fast-forward or fail. Successful updates validate first, then reload Pi resources.

clean?ff-onlyvalidatereload
Across hosts

A workflow you already know.

Git remains the source of truth. The extension makes safe operations convenient inside Pi.

  1. 01

    Change Pi naturally

    Edit settings, add a skill, tune a theme, or install a package.

  2. 02

    Snapshot explicitly

    Review status, validate secrets, and create a local Git commit.

  3. 03

    Push, then pull elsewhere

    Move configuration—not credentials or conversation history.

Host AHost B
# workstation
/pistate snapshot "update tools"
/pistate push

# laptop
/pistate pull
✓ Pulled Pi state
Fail closed

Designed around what must never sync.

Credential and runtime paths are rejected if tracked. Likely literal JSON secrets fail validation. dotenvx checks environment files before commit.

Read the security model
Ready when you are

Give your Pi a home.

One private Git repository. Five explicit commands. Every host configured the same way.

Copied to clipboard