README file from
GithubLocal Sidekick
A light Obsidian plugin I got Codex to build for me so I could use local LLM agents through a simple interactive chat sidebar in Obsidian via Ollama and the Pi agent harness.
DISCLAIMER: I am not a javascript/node developer. This is a vibe-coded project with human oversight prioritising safe, conservative agent capabilities and simplicity. If anyone has relevant experience or suggestions for improvements, I'd be happy to hear from you. I know that one or two similar agent plugins exist, but I wanted one specifically designed for local agents as a lightweight sidebar chat rather than a full dashboard or ACP generalist.
About
Local Sidekick is a privacy-first local LLM sidebar for Obsidian, designed for Pi and Ollama users who want vault-aware chat, explicit note context, conservative reviewed edits, with explicit safety boundaries and local-only workflows.
Local Sidekick seamlessly uses your Obsidian theme for its UI, supporting dark and light mode. It can be launched from the command palette or from the small AI agent icon on the left toolbar. Doing so will open the interactive dashboard as a tab in the right hand sidebar. An agent status panel at the top of the sidebar gives real time information on the local models being used alongside interactive buttons to find local models. Below a new chat can be started from an interactive prompt box with model selection or a recent chat from session history continued.
Features
- Local model workflow through Pi and Ollama.
- Persistent chat sessions with a history landing page.
- Compact model rail with discovered Pi/Ollama models and capability badges.
- Markdown and math rendering through Obsidian's renderer.
- Vault file mentions with
@, including Markdown, text-like files, attachments, and best-effort PDF text extraction. - Prompt context helpers:
@search(query)for local vault search.@semantic(query)for lightweight related-note search.@vault-indexfor filenames and top headings.@linksor@links(query)for conservative internal link suggestions.@cmd(command)for exact allowlisted local commands.@url(url)for optional HTTPS web fetch context from explicitly allowlisted hosts.
- Reviewed Markdown edit proposals with visible diffs and approval before write.
- Chat export to Markdown, defaulting to a
Chats/folder in the vault. - Obsidian command palette actions for opening the sidebar, exporting chats, checking Pi/Ollama, and suggesting internal links.
Chat session agent reply streams are rendered in markdown with your Obsidian theme, handling math and standard formatting. For a full Obsidian IDE experience use the terminal plugin alongside this so you never have to leave Obsidian!
Requirements
- Obsidian desktop
1.5.0or newer. - Node.js and npm for building from source.
- Ollama running locally.
- Pi installed and available as
pi, or configured with an absolute executable path in plugin settings. - At least one Ollama model configured in Pi.
Tool use depends on the selected model. Some Ollama models can chat but do not support tools. When a model does not support tools, keep Pi tools disabled and use explicit @ context, @search, @semantic, and @vault-index instead.
Installation
You can simply install from the Obsidian app Community Plugins page by searching for "Local Sidekick".
Or install from source...
From Source
- Clone this repository.
- Install dependencies:
npm install
- Build the plugin:
npm run build
- Create this folder in your vault:
.obsidian/plugins/local-sidekick/
- Copy these files into that folder:
main.js
manifest.json
styles.css
- Reload Obsidian and enable
Local SidekickinSettings -> Community plugins.
For alpha testing, use a copied vault or a small test vault first.
Pi And Ollama Setup
- Start Ollama.
- Pull the local models you want to use.
- Configure Pi so it can see those models.
- In Obsidian, open
Settings -> Local Sidekick. - Confirm:
Ollama hostpoints to your local Ollama server, usuallyhttp://127.0.0.1:11434.Pi executableis eitherpior the absolute path to your Pi binary.Pi toolsisDisableduntil you intentionally enable read-only tools.
- Open the sidebar and click
Ollama,Pi, andRPCto confirm discovery.
The sidebar can still be useful without Pi tools. File mentions and local context directives are often safer and more reliable than asking a model to inspect the vault on its own.
Usage
Open the command palette and run Open sidekick. Local Sidekick opens as a right sidebar so your main note stays visible.
Start a new chat from the session landing page, or select a previous session. Use the model rail at the top to switch models. Use @ in the composer to attach vault files as context.
Useful prompt patterns:
Summarize @Projects/Example/MAIN.md and list only facts supported by that file.
Use @vault-index and @semantic(EGNO interpolation) to suggest related notes.
Use @links for this note and propose only high-confidence Obsidian links.
Use @cmd(git status) and tell me whether the vault plugin repo is clean.
When the agent proposes edits, it must use reviewed edit blocks. The plugin renders a diff and requires approval before applying changes.
Safety
Local Sidekick is built around conservative defaults.
- The default Pi tool mode is disabled.
- Read-only Pi tools, when enabled, are limited to
read,grep,find, andls. - Pi
bash, edit, and write tools are not enabled by the plugin. - The plugin launches the local Pi executable to run the agent. This is necessary for local agent workflows and is why automated review tools may report shell/process execution.
- Pi is launched without a shell. The executable is
piby default, and non-default executable paths require per-session confirmation. - Shell execution is not generally available to the model or chat.
@cmd(...)only runs exact commands listed in the safe command allowlist, which you can edit in settings.- The default safe command allowlist is intentionally narrow:
git statusandgit diff --stat. - Safe commands run without a shell and from the vault root. Avoid adding package-manager scripts unless you trust the vault/repo.
- File writes require reviewed Markdown edit proposals and user approval.
- Deletes are blocked.
- Writes outside the vault are blocked.
- URL fetching is disabled by default.
@url(...)requires HTTPS, requires an explicit host allowlist, and blocks localhost/private/link-local/reserved/metadata IP ranges after DNS resolution.- External workspace roots are opt-in and read-only.
These guardrails reduce risk, but they do not make local agent workflows risk-free. Local models can hallucinate, misunderstand paths, or propose incorrect edits. Review diffs before approving them.
Local Data And Sync
Local Sidekick stores settings, chat history, proposed edits, approvals, and session metadata in the plugin's Obsidian data file inside the vault configuration. That data is local to your vault, but it may be copied by Obsidian Sync, iCloud, Dropbox, Git, or any other sync/backup tool that includes your .obsidian folder.
Treat .obsidian/plugins/local-sidekick/data.json as private vault data. It may contain prompts, model replies, note excerpts, proposed file contents, and local settings. Do not publish or share it accidentally.
Persistent Pi session files are stored under the plugin folder in your vault configuration. Local Sidekick prepares that folder through Obsidian's vault adapter before launching Pi.
Because vault plugin data can be imported from someone else, Local Sidekick asks for per-session confirmation before using a non-default Pi executable path or before launching Pi with experimental extensions, skills, prompt templates, and context files enabled. Keep Pi executable set to pi and experimental Pi features disabled unless you intentionally trust the configured behavior.
Experimental Pi Features
By default, Local Sidekick starts Pi with extensions, skills, prompt templates, and context files disabled for prompt runs. This keeps the plugin's behavior narrow and makes vault context explicit.
Advanced users can enable Allow Pi extensions, skills, prompt templates, and context files under the Experimental settings section. When enabled, Local Sidekick stops passing the Pi flags that disable those features, so Pi may load whatever your Pi configuration, extensions, skills, prompt templates, or context files define. This path is not the default because it has not been fully tested with Local Sidekick's safety model and may add extra tools or context outside the plugin's own UI.
Pi tools are separate. They remain disabled by default. The only supported Pi tool mode in the plugin UI is the read-only tool allowlist: read, grep, find, and ls. Broader Pi tool use is intentionally not exposed yet.
PDF Support
PDF mention support is best-effort. The plugin tries to extract text from common text-based PDFs inside the vault and adds that text as prompt context.
Limitations:
- No OCR.
- Scanned PDFs may produce no text.
- Encrypted or unusual PDFs may fail extraction.
- Very large PDFs are skipped.
- Compressed and decompressed PDF streams have stricter per-stream and total limits to reduce UI freezes from malicious or unusual PDFs.
- Extracted text is capped before it is sent to the model.
When PDF extraction fails, the plugin should tell the model that content was unavailable rather than letting it infer details from the filename.
Internal Link Suggestions
The internal link tool is intentionally conservative. It builds candidates from Markdown filenames and top-level headings, ranks them with local related-note search, and proposes links only when meaningful visible terms appear in the current note.
Suggested links are rendered as reviewed diffs. They are not applied automatically.
Known Limitations
- This is alpha software.
- Local models may hallucinate unless given exact context.
- Some Ollama models do not support tools.
- Pi behavior depends on the installed Pi version and local configuration.
- PDF extraction is not a full PDF parser and does not perform OCR.
- Web fetch is intentionally limited, disabled by default, HTTPS-only, and requires an explicit host allowlist.
- The reviewed edit path currently targets Markdown files.
- There is no automated end-to-end test suite yet.
- Public release metadata still needs maintainer-specific details before a Community Plugin submission.
Commands
The plugin registers these Obsidian commands:
Open sidekickInsert sidekick blockRestart sidekick bridgeStop sidekick bridgeCheck Ollama statusCheck Pi executableDiscover Pi RPCStop agent runClear agent eventsStart new persistent agent sessionExport active agent chat to MarkdownSuggest internal links for current noteRun agent safety self-checkCreate sample approval request