@henryqw/pi-pr 6.2.12 → 6.2.13

package/README.md

@@ -42,6 +42,8 @@ Run `/pr` in a GitHub checkout. It reads fresh local and GitHub state, takes the
 
 `/pr` accepts no flags, prose, or base argument. Start with the command, not a helper skill or tool: direct calls cannot establish route authority. The helper run is bound to the current session and worktree. Its agent tools use plain-object parameter schemas so providers that omit root-union tools can expose them; action-specific arguments are still checked before the workflow runs.
 
+The `pi_pr_*` tools are model-only and run one action at a time. Codemode scripts and other tools cannot call them, so a script cannot batch guarded actions or filter the result the model needs for its next safety decision. With `codemode.mode` set to `only`, Pi hides other tools behind `codemode` but keeps these declared, so `/pr` workflows still work.
+
 ## Flow
 
 ![Flowchart showing /pr reading fresh GitHub and local state and choosing the next safe route](./docs/pr-routing.svg)

package/extensions/pr.ts

@@ -465,6 +465,7 @@ export default function pullRequestExtension(
 		description: "Run one guarded action for the /pr branch-update route.",
 		parameters: flatRoot(UpdateBranchActions),
 		executionMode: "sequential",
+		exposure: "model-only",
 		async execute(_toolCallId, raw, signal, _onUpdate, ctx) {
 			const params = checkedAction(UpdateBranchActions, raw);
 			return executeWorkflowAction(params.runId, "update-branch", ctx, signal, async (selected) => {
@@ -487,6 +488,7 @@ export default function pullRequestExtension(
 		description: "Run one guarded action for the /pr creation route.",
 		parameters: flatRoot(CreateActions),
 		executionMode: "sequential",
+		exposure: "model-only",
 		async execute(_toolCallId, raw, signal, _onUpdate, ctx) {
 			const params = checkedAction(CreateActions, raw);
 			return executeWorkflowAction(params.runId, "create", ctx, signal, async (selected) => {
@@ -512,6 +514,7 @@ export default function pullRequestExtension(
 		description: "Inspect, commit, validate, and publish only reviewed local work for the /pr route.",
 		parameters: flatRoot(WorkActions),
 		executionMode: "sequential",
+		exposure: "model-only",
 		async execute(_toolCallId, raw, signal, _onUpdate, ctx) {
 			const params = checkedAction(WorkActions, raw);
 			return executeWorkflowAction(params.runId, "publish-work", ctx, signal, async (selected) => {
@@ -535,6 +538,7 @@ export default function pullRequestExtension(
 		description: "Run one guarded action for the /pr feedback route.",
 		parameters: flatRoot(SweepActions),
 		executionMode: "sequential",
+		exposure: "model-only",
 		async execute(_toolCallId, raw, signal, _onUpdate, ctx) {
 			const params = checkedAction(SweepActions, raw);
 			return executeWorkflowAction(params.runId, "sweep", ctx, signal, async (selected) => {
@@ -563,6 +567,7 @@ export default function pullRequestExtension(
 		description: "Run one guarded action for the /pr failed-CI route.",
 		parameters: flatRoot(FixCiActions),
 		executionMode: "sequential",
+		exposure: "model-only",
 		async execute(_toolCallId, raw, signal, _onUpdate, ctx) {
 			const params = checkedAction(FixCiActions, raw);
 			return executeWorkflowAction(params.runId, "fix-ci", ctx, signal, async (selected) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@henryqw/pi-pr",
-  "version": "6.2.12",
+  "version": "6.2.13",
   "description": "Run /pr to safely discover or link the current pull request, then create, update, address feedback, fix CI, or merge when ready.",
   "keywords": [
     "pi-package",