@pikku/cli 0.12.107 → 0.12.109

package/dist/.pikku/scopes/pikku-personas.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-roles.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-scope-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scope-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scopes.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/secrets/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 /**

package/dist/.pikku/services/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/services/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/setup/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/pikku-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/setup/pikku-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/trigger/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { TypedVariablesService as CoreTypedVariablesService, } from '@pikku/core/services';
 /**

package/dist/.pikku/workflow/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { pikkuWorkflowGraph as corePikkuWorkflowGraph } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { pikkuState } from '@pikku/core/state';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.107
+ * This file was generated by @pikku/cli@0.12.109
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.107') {
-      process.stderr.write(`\n  Update available  0.12.107 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.109') {
+      process.stderr.write(`\n  Update available  0.12.109 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/cli.wiring.js

@@ -681,72 +681,30 @@ wireCLI({
                 rpc: pikkuCLICommand({
                     func: enableRpc,
                     description: 'Enable public RPC endpoint',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 console: pikkuCLICommand({
                     func: enableConsole,
                     description: 'Enable console functions',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 scenarios: pikkuCLICommand({
                     func: enableScenarios,
                     description: 'Enable scenario instrumentation functions',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 agent: pikkuCLICommand({
                     func: enableAgent,
                     description: 'Enable public agent endpoints',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 workflow: pikkuCLICommand({
                     func: enableWorkflow,
                     description: 'Enable workflow workers',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 events: pikkuCLICommand({
                     func: enableEvents,
                     description: 'Enable the realtime events channel + SSE stream (scaffolds events.gen.ts)',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 'remote-rpc': pikkuCLICommand({
                     func: enableRemoteRpc,
                     description: 'Enable the remote internal RPC queue worker + HTTP endpoint (scaffolds rpc-remote.gen.ts)',
-                    options: {
-                        noAuth: {
-                            description: 'Disable auth requirement',
-                            default: false,
-                        },
-                    },
                 }),
                 webhook: pikkuCLICommand({
                     func: enableWebhook,

package/dist/src/fabric/functions/validate.function.js

@@ -779,6 +779,7 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
     // was supposed to report the broken config. Shape-check the entries once here
     // and let the apps/ and type-check passes consume the narrowed list.
     const declaredFrontends = [];
+    let hasMantineFrontend = false;
     /** every syntactically valid cwd, including ones whose directory is missing */
     const declaredCwdList = [];
     const rawFrontends = fabricConfig?.frontends;
@@ -864,6 +865,9 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
             const isReactFrontend = !!(appAllDeps['@mantine/core'] ||
                 appAllDeps['@pikku/mantine'] ||
                 appAllDeps['react']);
+            if (appAllDeps['@mantine/core'] || appAllDeps['@pikku/mantine']) {
+                hasMantineFrontend = true;
+            }
             if (isReactFrontend) {
                 const srcFiles = await listSourceFiles(join(appPath, 'src'));
                 let usesMessages = false;
@@ -1059,9 +1063,12 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
     }
     // ── packages/theme + packages/components ──────────────────────────────
     const designDocUrl = 'https://pikkufabric.dev/docs/design';
+    const designSeverity = hasMantineFrontend ? w : info;
     const themePkgDir = join(root, 'packages', 'mantine-theme');
     if (!existsSync(themePkgDir)) {
-        info('theme-missing', 'packages/mantine-theme/ not found — Fabric design features require a theme package', themePkgDir, `Create packages/mantine-theme/ with your Mantine theme tokens. See ${designDocUrl}`);
+        designSeverity('theme-missing', hasMantineFrontend
+            ? 'packages/mantine-theme/ not found — the Fabric console Design tab has no themes to list and reports "No themes yet"'
+            : 'packages/mantine-theme/ not found — Fabric design features require a theme package', themePkgDir, `Create packages/mantine-theme/ with your Mantine theme tokens. See ${designDocUrl}`);
     }
     else {
         // The Fabric console's Design tab lists a theme only when it can read a
@@ -1085,7 +1092,7 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
             }
         }
         if (specIds.length === 0) {
-            info('theme-no-spec', 'packages/mantine-theme/ has no themes/<id>.json spec — the Fabric console Design tab reports "no theme set" (and cannot edit the theme) even if the app is branded via a hand-written createTheme()', themesDir, lines('Add a theme spec the console can read:', '1. Create packages/mantine-theme/themes/<id>.json (id is kebab-case), e.g.:', '{', '  "name": "My Brand",', '  "brand": { "colors": { "primary": "#4f46e5" }, "fonts": { "body": "Inter" } },', '  "structure": { "defaultRadius": "md", "defaultColorScheme": "light" }', '}', '2. Create packages/mantine-theme/active.json: { "id": "<id>" }', '3. Build the Mantine theme from the active spec in index.ts.', `See ${designDocUrl}`));
+            designSeverity('theme-no-spec', 'packages/mantine-theme/ has no themes/<id>.json spec — the Fabric console Design tab reports "no theme set" (and cannot edit the theme) even if the app is branded via a hand-written createTheme()', themesDir, lines('Add a theme spec the console can read:', '1. Create packages/mantine-theme/themes/<id>.json (id is kebab-case), e.g.:', '{', '  "name": "My Brand",', '  "brand": { "colors": { "primary": "#4f46e5" }, "fonts": { "body": "Inter" } },', '  "structure": { "defaultRadius": "md", "defaultColorScheme": "light" }', '}', '2. Create packages/mantine-theme/active.json: { "id": "<id>" }', '3. Build the Mantine theme from the active spec in index.ts.', `See ${designDocUrl}`));
         }
         else {
             // A spec exists — active.json must point at one, else the console has no
@@ -1102,8 +1109,21 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
             }
         }
     }
-    if (!existsSync(join(root, 'packages', 'components'))) {
-        info('components-missing', 'packages/components/ not found — Fabric design features require a components package', join(root, 'packages', 'components'), `Create packages/components/ with your shared UI components. See ${designDocUrl}`);
+    // The design server globs stories from apps/*/src/components, not packages/components.
+    const storyFiles = [];
+    let hasComponentKit = false;
+    for (const name of existsSync(appsDir) ? await readdir(appsDir) : []) {
+        const kitDir = join(appsDir, name, 'src', 'components');
+        if (!existsSync(kitDir))
+            continue;
+        hasComponentKit = true;
+        for (const file of await listSourceFiles(kitDir)) {
+            if (file.endsWith('.stories.tsx'))
+                storyFiles.push(file);
+        }
+    }
+    if (hasComponentKit && storyFiles.length === 0) {
+        designSeverity('design-no-stories', "no apps/*/src/components/**/*.stories.tsx found — the Fabric console Design tab's Library and App lenses have nothing to show", join(appsDir, '*', 'src', 'components'), lines('Add a story beside a component. The Library lens reads <Name>.stories.tsx', '(each named export is a visual variant); the App lens reads', '<Name>.app.stories.tsx (each named export is one data state of the query', 'or mutation the page drives it with). A minimal Library story:', '', "  import type { Story, StoryMeta } from './csf.types'", "  import { Wordmark } from './Wordmark'", '', '  export default {', "    title: 'Wordmark',", '    component: Wordmark,', '  } satisfies StoryMeta', '', "  export const Default: Story = { args: { name: 'Acme' } }", `See ${designDocUrl}`));
     }
     // ── frontend type-check (what the build container actually runs) ───────
     // Every check above is a heuristic standing in for this compile. The build

package/dist/src/functions/commands/dev-agent-runner.js

@@ -54,26 +54,61 @@ export async function createDevAgentRunner({ logger, projectRoot, variables, })
     // copy of `@ai-sdk/provider` handed to a runner built against another is the
     // one combination that fails at call time rather than at load time, with an
     // error about the model spec that names neither package.
+    const PAIR = ['@pikku/ai-vercel', '@ai-sdk/openai-compatible'];
+    // `projectRoot` is the root package.json, and under an isolated node_modules
+    // layout (bun, pnpm) that resolves only what the *root* declares — a monorepo
+    // that installed the pair in the workspace using it still misses here. Say so
+    // rather than silently swapping in our own copies: the failure that follows
+    // names neither package, so the log line is the only thing connecting it back.
+    const resolveFromProject = (name) => {
+        try {
+            return pathToFileURL(fromProject.resolve(name)).href;
+        }
+        catch {
+            return undefined;
+        }
+    };
     const loadPair = async () => {
-        const project = ['@pikku/ai-vercel', '@ai-sdk/openai-compatible'].map((name) => {
-            try {
-                return pathToFileURL(fromProject.resolve(name)).href;
-            }
-            catch {
-                return undefined;
-            }
-        });
-        const [runner, provider] = project.every(Boolean)
-            ? project
-            : ['@pikku/ai-vercel', '@ai-sdk/openai-compatible'];
-        return Promise.all([import(runner), import(provider)]);
+        const project = PAIR.map(resolveFromProject);
+        const complete = project.every(Boolean);
+        if (!complete && project.some(Boolean)) {
+            const missing = PAIR.filter((_, index) => !project[index]);
+            logger.warn(`pikku dev: ${missing.join(' and ')} could not be resolved from ${join(projectRoot, 'package.json')}, so the CLI's own AI SDK copies are being used for all of ${PAIR.join(' and ')}. In a monorepo with an isolated node_modules layout, declare them at the root.`);
+        }
+        const [runner, provider] = complete ? project : PAIR;
+        return Promise.all([import(runner), import(provider)]).then((modules) => [...modules, complete ? project : undefined]);
+    };
+    // The runner and the provider each hold their own `@ai-sdk/provider`. When the
+    // majors differ the provider builds a model whose `specificationVersion` the
+    // runner's `ai` refuses, and the throw arrives at the first model call reading
+    // `Unsupported model version …` — naming the model and the gateway, but not
+    // the two packages that actually disagree. Check it here instead, where both
+    // paths are in hand.
+    const providerSpecVersion = (from) => {
+        if (!from) {
+            return undefined;
+        }
+        try {
+            return createRequire(from)('@ai-sdk/provider/package.json')
+                .version;
+        }
+        catch {
+            return undefined;
+        }
     };
     let VercelAgentRunner;
     let createOpenAICompatible;
     try {
-        const [runnerModule, providerModule] = await loadPair();
+        const [runnerModule, providerModule, resolved] = await loadPair();
         ({ VercelAgentRunner } = runnerModule);
         ({ createOpenAICompatible } = providerModule);
+        const [runnerSpec, providerSpec] = (resolved ?? []).map(providerSpecVersion);
+        if (runnerSpec &&
+            providerSpec &&
+            runnerSpec.split('.')[0] !== providerSpec.split('.')[0]) {
+            logger.error(`pikku dev: AI agents disabled — @pikku/ai-vercel resolves @ai-sdk/provider@${runnerSpec} but @ai-sdk/openai-compatible resolves @ai-sdk/provider@${providerSpec}. Those majors are incompatible: the provider builds models the runner's \`ai\` refuses. @ai-sdk/openai-compatible publishes one line per major of \`ai\` (npm dist-tags ai-v5/ai-v6/latest) — install the line matching the \`ai\` your @pikku/ai-vercel peer-depends on.`);
+            return undefined;
+        }
     }
     catch (error) {
         logger.warn(`pikku dev: AI provider env is set but the AI SDK packages could not be loaded — AI agents disabled: ${error instanceof Error ? error.message : String(error)}`);

package/dist/src/functions/commands/dev.js

@@ -22,7 +22,6 @@ import { createDevAgentRunner } from './dev-agent-runner.js';
 import { resolveConsoleMount } from './serve-console.js';
 import { serverReadyLine } from '../../server/server-ready.js';
 import { createEphemeralContentSigningJWT } from '../../server/content-signing-jwt.js';
-import { resolveScaffoldFeature } from '../../utils/resolve-scaffold-feature.js';
 import { applyModelAliasOverride } from '../../utils/model-alias-override.js';
 export const dev = pikkuSessionlessFunc({
     remote: true,
@@ -135,7 +134,7 @@ export const dev = pikkuSessionlessFunc({
         // project — an app bootstrap is what a deployed bundle imports, and coverage
         // endpoints have no business in one.
         if (config.scaffold?.scenarios) {
-            registerScenarioInstrumentation(resolveScaffoldFeature('scenarios', config.scaffold.scenarios).auth);
+            registerScenarioInstrumentation();
         }
         const configModule = await loadUserModule(pikkuConfigFactory.file);
         const servicesModule = await loadUserModule(singletonServicesFactory.file);

package/dist/src/functions/commands/enable.js

@@ -1,14 +1,7 @@
 import { readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { pikkuVoidFunc } from '#pikku/function';
-/**
- * Remote RPC workers carry no auth dimension — `serialize-remote-rpc.ts`
- * hardcodes `auth: false` on what it generates — so enabling it writes a bare
- * `true` and there is nothing to opt out of.
- */
-const NO_AUTH_DIMENSION = new Set(['remoteRpc']);
-async function enableFeature(feature, logger, config, data) {
-    const noAuth = data?.noAuth ?? false;
+async function enableFeature(feature, logger, config) {
     const configPath = join(config.configDir, 'pikku.config.json');
     const raw = await readFile(configPath, 'utf-8');
     const json = JSON.parse(raw);
@@ -18,41 +11,32 @@ async function enableFeature(feature, logger, config, data) {
     if (!json.scaffold.pikkuDir) {
         json.scaffold.pikkuDir = 'pikku';
     }
-    // `true` is enabled AND authenticated. Only an explicit --no-auth writes the
-    // object form, so a feature can never be turned on public by accident.
-    //
-    // The console is an admin surface — every RPC requires a session, so
-    // --no-auth is ignored for it.
-    const wantsPublic = noAuth &&
-        feature !== 'console' &&
-        !NO_AUTH_DIMENSION.has(feature);
-    const value = feature === 'webhook' ? true : wantsPublic ? { auth: false } : true;
+    const value = true;
     json.scaffold[feature] = value;
     await writeFile(configPath, JSON.stringify(json, null, 2) + '\n', 'utf-8');
-    logger.info(`Enabled scaffold.${feature} = ${JSON.stringify(value)} in ${configPath}` +
-        (wantsPublic ? ' (public — no session required)' : ''));
+    logger.info(`Enabled scaffold.${feature} = ${JSON.stringify(value)} in ${configPath}`);
 }
 export const enableRpc = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('rpc', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('rpc', logger, config),
 });
 export const enableConsole = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('console', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('console', logger, config),
 });
 export const enableScenarios = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('scenarios', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('scenarios', logger, config),
 });
 export const enableAgent = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('agent', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('agent', logger, config),
 });
 export const enableWorkflow = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('workflow', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('workflow', logger, config),
 });
 export const enableEvents = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('events', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('events', logger, config),
 });
 export const enableRemoteRpc = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('remoteRpc', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('remoteRpc', logger, config),
 });
 export const enableWebhook = pikkuVoidFunc({
-    func: async ({ logger, config }, data) => enableFeature('webhook', logger, config, data),
+    func: async ({ logger, config }) => enableFeature('webhook', logger, config),
 });

package/dist/src/functions/commands/serve.js

@@ -14,7 +14,6 @@ import { InMemorySchedulerService } from '@pikku/schedule';
 import { resolveDb, createKysely, parseDatabaseUrl, } from '../db/local-db.js';
 import { loadUserBootstrap, loadUserModule } from './load-user-project.js';
 import { registerScenarioInstrumentation } from '../wirings/scenarios/register-scenario-instrumentation.js';
-import { resolveScaffoldFeature } from '../../utils/resolve-scaffold-feature.js';
 import { createDevAgentRunner } from './dev-agent-runner.js';
 import { resolveConsoleMount } from './serve-console.js';
 import { serverReadyLine } from '../../server/server-ready.js';
@@ -42,7 +41,7 @@ export const serve = pikkuSessionlessFunc({
         // into the project — an app bootstrap is what a deployed bundle imports,
         // and coverage endpoints have no business in one.
         if (config.scaffold?.scenarios) {
-            registerScenarioInstrumentation(resolveScaffoldFeature('scenarios', config.scaffold.scenarios).auth);
+            registerScenarioInstrumentation();
         }
         const workflowService = new InMemoryWorkflowService();
         const configModule = await loadUserModule(pikkuConfigFactory.file);