Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions apps/docs/content/docs/en/workflows/blocks/meta.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
"title": "Core Blocks",
"pages": [
"agent",
"pi",
"api",
"function",
"condition",
Expand All @@ -17,6 +16,7 @@
"human-in-the-loop",
"variables",
"wait",
"credential"
"credential",
"pi"
]
}
6 changes: 3 additions & 3 deletions apps/docs/content/docs/en/workflows/blocks/pi.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ Pick the mode with the **Mode** dropdown. The fields below it change to match.
Cloud runs entirely inside a disposable sandbox, so it never touches your machine. It clones the repo, lets the agent work with full read/shell/edit/git, pushes a branch, and opens a PR you review and merge.

- Requires sandbox execution to be enabled (the Cloud option only appears when it is).
- Requires **your own provider API key (BYOK)** — the model key is handed to the sandbox, so Sim never injects a hosted key there.
- Requires **your own provider API key (BYOK)** — the model key is handed to the sandbox.
- Needs a **GitHub token** with permission to clone, push, and open a PR (see [Setup](#setup-cloud)).
- The deliverable is a **pull request** — nothing is committed to your default branch directly.

Expand Down Expand Up @@ -118,7 +118,7 @@ The one case neither layer can rescue is a *first* prompt that already exceeds t

## Setup

### Cloud
### Cloud [#setup-cloud]

Cloud runs in a sandbox image with the Pi CLI and git baked in.

Expand All @@ -128,7 +128,7 @@ Cloud runs in a sandbox image with the Pi CLI and git baked in.
- *Fine-grained:* select the repo, then **Contents: Read and write** + **Pull requests: Read and write**.
- *Classic:* the **`repo`** scope. For org repos, authorize the token for SSO.

### Local
### Local [#setup-local]

1. **Enable SSH** on the target machine (on macOS: System Settings → General → Sharing → Remote Login).
2. **Expose it on a public host.** Sim blocks `localhost`/LAN, so use a TCP tunnel — for example `ngrok tcp 22`, which gives a `host:port` to put in **Host** and **Port**.
Expand Down
1 change: 1 addition & 0 deletions apps/realtime/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@
"@sim/logger": "workspace:*",
"@sim/platform-authz": "workspace:*",
"@sim/realtime-protocol": "workspace:*",
"@sim/runtime-secrets": "workspace:*",
"@sim/security": "workspace:*",
"@sim/utils": "workspace:*",
"@sim/workflow-persistence": "workspace:*",
Expand Down
9 changes: 9 additions & 0 deletions apps/realtime/src/bootstrap.ts
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
/**
* Container entrypoint. Hydrates `process.env` from the runtime secret before
* loading the Socket.IO server, whose modules (`@/env`, DB preflight) read env
* at import time. See `@sim/runtime-secrets`.
*/
import { loadRuntimeSecrets } from '@sim/runtime-secrets'

await loadRuntimeSecrets()
await import('@/index')
Loading
Loading