update param visibility

Author: icecrasher321

apps/sim/blocks/blocks/pi.ts

@@ -121,6 +121,7 @@ export const PiBlock: BlockConfig<PiResponse> = {
       title: 'GitHub Token',
       type: 'short-input',
       password: true,
+      paramVisibility: 'user-only',
       placeholder: 'GitHub personal access token (repo scope)',
       tooltip: 'Personal access token with repo scope, used to clone, push, and open the PR.',
       required: true,
@@ -201,6 +202,7 @@ export const PiBlock: BlockConfig<PiResponse> = {
       title: 'Password',
       type: 'short-input',
       password: true,
+      paramVisibility: 'user-only',
       placeholder: 'Your SSH password',
       required: { field: 'mode', value: 'local', and: { field: 'authMethod', value: 'password' } },
       condition: { field: 'mode', value: 'local', and: { field: 'authMethod', value: 'password' } },
@@ -210,6 +212,7 @@ export const PiBlock: BlockConfig<PiResponse> = {
       id: 'privateKey',
       title: 'Private Key',
       type: 'code',
+      paramVisibility: 'user-only',
       placeholder: '-----BEGIN OPENSSH PRIVATE KEY-----\n...',
       required: {
         field: 'mode',
@@ -246,6 +249,7 @@ export const PiBlock: BlockConfig<PiResponse> = {
       title: 'Passphrase',
       type: 'short-input',
       password: true,
+      paramVisibility: 'user-only',
       placeholder: 'Passphrase for encrypted key (optional)',
       mode: 'advanced',
       condition: {

apps/sim/executor/handlers/pi/local-backend.ts

@@ -88,7 +88,13 @@ export const runLocalPi: PiBackendRun<PiLocalRunParams> = async (params, context
   // Isolate Pi resource discovery: an empty cwd/agentDir keeps DefaultResourceLoader
   // from loading the Sim server's own .agents/skills, AGENTS.md, extensions, or settings.
   const isolatedDir = await mkdtemp(join(tmpdir(), 'sim-pi-'))
-  const session = await openSshSession(params.ssh)
+  // Clean up the scratch dir if the SSH connection fails — the try/finally below
+  // is only entered once the session is open, so an early handshake failure would
+  // otherwise orphan the directory.
+  const session = await openSshSession(params.ssh).catch(async (error) => {
+    await rm(isolatedDir, { recursive: true, force: true }).catch(() => {})
+    throw error
+  })
 
   try {
     const sdk = await loadPiSdk()