fix(pi): preserve update PR BYOK after staging rebase

Author: Bill Leoutsakos

apps/sim/blocks/blocks/pi.test.ts

@@ -242,6 +242,20 @@ describe('Pi cloud authoring surface', () => {
         babysitMode: true,
       })
     ).toBe(false)
+    expect(
+      evaluateSubBlockCondition(prState?.condition, {
+        mode: 'cloud_branch',
+        babysitMode: 'true',
+      })
+    ).toBe(false)
     expect(PiBlock.inputs.prState).toBeDefined()
   })
+
+  it.each(['cloud', 'cloud_branch'])(
+    'always shows the model API key for sandbox authoring mode %s',
+    (mode) => {
+      const apiKey = PiBlock.subBlocks.find((subBlock) => subBlock.id === 'apiKey')
+      expect(evaluateSubBlockCondition(apiKey?.condition, { mode })).toBe(true)
+    }
+  )
 })

apps/sim/blocks/blocks/pi.ts

@@ -153,7 +153,7 @@ const hostedModelApiKeyCondition = getApiKeyCondition()
  * rule and hide the field when Sim covers the key.
  */
 const piApiKeyCondition = (values?: Record<string, unknown>) =>
-  isPiByokOnlyMode(values?.mode) ? CLOUD : hostedModelApiKeyCondition(values)
+  isPiByokOnlyMode(values?.mode) ? CLOUD_AUTHORING : hostedModelApiKeyCondition(values)
 
 export const PiBlock: BlockConfig<PiResponse> = {
   type: 'pi',

apps/sim/providers/pi-providers.ts

@@ -29,16 +29,16 @@ export function isPiSupportedProvider(providerId: string): providerId is PiSuppo
 
 /**
  * Whether a Pi block mode hands the model API key into the sandbox and
- * therefore always requires the user's own key. Create PR ('cloud') runs the
- * model client inside the sandbox, so Sim never supplies a hosted key for it:
- * the block always shows the API Key field, copilot validation never strips
- * it, and execution requires BYOK. Review Code and Local Dev keep the model
- * client in Sim and follow the normal hosted-key rules. All three enforcement
- * sites (block condition, edit-workflow validation, key resolution) consume
- * this predicate so they cannot drift.
+ * therefore always requires the user's own key. Create PR ('cloud') and Update
+ * PR ('cloud_branch') run the model client inside the sandbox, so Sim never
+ * supplies a hosted key for them: the block always shows the API Key field,
+ * copilot validation never strips it, and execution requires BYOK. Review Code
+ * and Local Dev keep the model client in Sim and follow the normal hosted-key
+ * rules. All three enforcement sites (block condition, edit-workflow
+ * validation, key resolution) consume this predicate so they cannot drift.
  */
 export function isPiByokOnlyMode(mode: unknown): boolean {
-  return mode === 'cloud'
+  return mode === 'cloud' || mode === 'cloud_branch'
 }
 
 /** Returns Pi's provider ID for a supported Sim provider. */