@pikku/cli 0.12.51 → 0.12.52

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { CoreAIAgent, PikkuAIMiddlewareHooks } from '@pikku/core/ai-agent';
 import type { PikkuPermission, PikkuMiddleware, Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';

package/dist/.pikku/channel/pikku-channel-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/channel/pikku-channel-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/cli/pikku-cli-channel.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * WebSocket channel backend for 'pikku' CLI commands

package/dist/.pikku/cli/pikku-cli-client.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import '../pikku-bootstrap.gen.js';
 /**

package/dist/.pikku/cli/pikku-cli-client.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { executeCLIViaChannel } from '@pikku/core/cli/channel';
 import { CorePikkuWebsocket } from '@pikku/websocket';

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json';
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json' with { type: 'json' };
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-cli-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/cli/pikku-cli-wirings.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import '../../src/cli.wiring.js';
 import '../../src/services.js';

package/dist/.pikku/cli/pikku-cli-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /* The files with an wireCLI function call */
 import '../../src/cli.wiring.js';

package/dist/.pikku/cli/pikku-cli.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import '../pikku-bootstrap.gen.js';
 export declare function PikkuCLI(args: string[]): Promise<void>;

package/dist/.pikku/cli/pikku-cli.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { executeCLI, CLIError } from '@pikku/core/cli';
 import { createConfig as createConfig } from '../../src/services.js';

package/dist/.pikku/console/pikku-node-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.js';
 export type NodeCategory = never;

package/dist/.pikku/function/pikku-function-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-function-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-functions-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-functions-meta.gen.json' with { type: 'json' };

package/dist/.pikku/function/pikku-functions-meta.gen.json

@@ -1882,7 +1882,7 @@
         "outputSchemaName": null,
         "inputs": [],
         "outputs": [],
-        "implementationHash": "1f7044dc9aa598b8",
+        "implementationHash": "87f0e80b39a33995",
         "middleware": [
             {
                 "type": "wire",
@@ -2772,28 +2772,6 @@
         "inputHash": "835d9763",
         "outputHash": "b9430fb9"
     },
-    "pikkuSecrets": {
-        "pikkuFuncId": "pikkuSecrets",
-        "functionType": "user",
-        "funcWrapper": "pikkuSessionlessFunc",
-        "sessionless": true,
-        "name": "pikkuSecrets",
-        "inputSchemaName": null,
-        "outputSchemaName": null,
-        "inputs": [],
-        "outputs": [],
-        "implementationHash": "0c90e1e1b970f27c",
-        "middleware": [
-            {
-                "type": "wire",
-                "name": "logCommandInfoAndTime",
-                "inline": false
-            }
-        ],
-        "contractHash": "79cd70de0e09d5bc",
-        "inputHash": "838055cb",
-        "outputHash": "c749587a"
-    },
     "pikkuSchedulerTypes": {
         "pikkuFuncId": "pikkuSchedulerTypes",
         "functionType": "user",
@@ -2840,6 +2818,28 @@
         "inputHash": "dda1c6aa",
         "outputHash": "1f0f0345"
     },
+    "pikkuSecrets": {
+        "pikkuFuncId": "pikkuSecrets",
+        "functionType": "user",
+        "funcWrapper": "pikkuSessionlessFunc",
+        "sessionless": true,
+        "name": "pikkuSecrets",
+        "inputSchemaName": null,
+        "outputSchemaName": null,
+        "inputs": [],
+        "outputs": [],
+        "implementationHash": "0c90e1e1b970f27c",
+        "middleware": [
+            {
+                "type": "wire",
+                "name": "logCommandInfoAndTime",
+                "inline": false
+            }
+        ],
+        "contractHash": "79cd70de0e09d5bc",
+        "inputHash": "838055cb",
+        "outputHash": "c749587a"
+    },
     "pikkuTriggerTypes": {
         "pikkuFuncId": "pikkuTriggerTypes",
         "functionType": "user",

package/dist/.pikku/function/pikku-functions.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /* Import and register functions used by RPCs */
 import { addFunction } from '@pikku/core/function';

package/dist/.pikku/http/pikku-http-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-http-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/http/pikku-http-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/http/pikku-http-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /* The files with an wireHTTP function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/mcp/pikku-mcp-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/mcp/pikku-mcp-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/pikku-bootstrap.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-bootstrap.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-services.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import type { SingletonServices } from '../types/application-types.d.js';
 import type { Services } from '../types/application-types.d.js';

package/dist/.pikku/pikku-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/pikku-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/queue/pikku-queue-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-workers-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-queue-workers-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /* The files with an addQueueWorkers function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-rpc-wirings-meta.internal.gen.json' with { type: 'json' };

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { addSchema } from '@pikku/core/schema';
 import * as PikkuSchemasOutput from './schemas/PikkuSchemasOutput.schema.json' with { type: 'json' };

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 export { wireSecret } from '@pikku/core/secret';
 export type { CoreSecret, SecretDefinitionMeta, SecretDefinitionsMeta } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 export { wireSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 const CREDENTIALS_META = {};

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 export { wireVariable } from '@pikku/core/variable';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitionsMeta } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 export { wireVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 const VARIABLES_META = {};

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { pikkuState } from '@pikku/core/internal';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.51') {
-      process.stderr.write(`\n  Update available  0.12.51 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.52') {
+      process.stderr.write(`\n  Update available  0.12.52 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/functions/wirings/auth/pikku-command-auth.js

@@ -18,7 +18,7 @@ export const pikkuAuth = pikkuSessionlessFunc({
         // has no OAuth providers — still generates its /auth/* wiring.
         if (!state.auth.definition)
             return;
-        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {});
+        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {}, state.auth.hasUserSessionMiddleware ?? false);
         // The secrets file sits alongside authFile so re-inspection rediscovers it.
         // It is kept separate from the wiring file because the CLI forbids Zod
         // schemas and HTTP wiring (wireHTTPRoutes) in the same file (PKU490).

package/dist/src/functions/wirings/auth/serialize-auth-gen.d.ts

@@ -33,4 +33,4 @@ export interface AuthGenOutput {
  * wiring, the routes flow through inspection into the deploy manifest (one
  * worker for all auth routes).
  */
-export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>) => AuthGenOutput;
+export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>, hasUserSessionMiddleware?: boolean) => AuthGenOutput;

package/dist/src/functions/wirings/auth/serialize-auth-gen.js

@@ -33,7 +33,7 @@ function variableSchemaName(name, field) {
  * wiring, the routes flow through inspection into the deploy manifest (one
  * worker for all auth routes).
  */
-export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings) => {
+export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings, hasUserSessionMiddleware = false) => {
     const known = providers.filter((p) => p in PROVIDER_REGISTRY);
     const basePath = definition.basePath;
     // Side-effect import of the user's auth file so `pikkuBetterAuth` runs and
@@ -116,15 +116,22 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
     // file's auth.wiring import (the full better-auth server) isn't dragged into
     // every unit — only the auth unit bundles it.
     const stateless = definition.cookieCache;
+    // Emit the generated global betterAuthSession() only when it's the stateful
+    // path AND the user hasn't registered their own global betterAuthSession(...).
+    // A user registration means they want to customize it (mapSession/impersonation/
+    // apiKey); the generated default-map one would run first and pre-empt theirs via
+    // the `if (session) next()` short-circuit, so we step aside. Mirrors the
+    // stateless skip (state.auth.userStatelessSession, pikkujs/pikku#754).
+    const emitStatefulSession = !stateless && !hasUserSessionMiddleware;
     const wiring = [
         '// AUTO-GENERATED by pikku CLI — do not edit',
         '',
-        stateless
-            ? `import { pikkuSessionlessFunc, wireHTTPRoutes } from '${pikkuTypesImportPath}'`
-            : `import { pikkuSessionlessFunc, wireHTTPRoutes, addHTTPMiddleware } from '${pikkuTypesImportPath}'`,
-        stateless
-            ? `import { createAuthHandler } from '@pikku/better-auth'`
-            : `import { createAuthHandler, betterAuthSession } from '@pikku/better-auth'`,
+        emitStatefulSession
+            ? `import { pikkuSessionlessFunc, wireHTTPRoutes, addHTTPMiddleware } from '${pikkuTypesImportPath}'`
+            : `import { pikkuSessionlessFunc, wireHTTPRoutes } from '${pikkuTypesImportPath}'`,
+        emitStatefulSession
+            ? `import { createAuthHandler, betterAuthSession } from '@pikku/better-auth'`
+            : `import { createAuthHandler } from '@pikku/better-auth'`,
         `import '${configImportPath}'`,
         '',
         // createAuthHandler is called once at module load; the exported handler is a
@@ -138,7 +145,7 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
         `})`,
         '',
     ];
-    if (!stateless) {
+    if (emitStatefulSession) {
         // Stateful: betterAuthSession calls services.auth(), so it stays here with
         // the auth.wiring import.
         wiring.push(`addHTTPMiddleware('*', [betterAuthSession()])`, '');

package/dist/src/scaffold/rpc-remote.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.51
+ * This file was generated by @pikku/cli@0.12.52
  */
 /**
  * Auto-generated remote internal RPC queue worker and HTTP endpoint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/cli",
-  "version": "0.12.51",
+  "version": "0.12.52",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
   "imports": {
@@ -27,11 +27,11 @@
   "dependencies": {
     "@electric-sql/pglite": "^0.5.1",
     "@openapi-contrib/json-schema-to-openapi-schema": "^4.3.1",
-    "@pikku/better-auth": "^0.12.11",
+    "@pikku/better-auth": "^0.12.12",
     "@pikku/core": "^0.12.37",
     "@pikku/deploy-cloudflare": "^0.12.5",
     "@pikku/fetch": "^0.12.5",
-    "@pikku/inspector": "^0.12.25",
+    "@pikku/inspector": "^0.12.26",
     "@pikku/kysely": "^0.12.16",
     "@pikku/kysely-node-sqlite": "^0.12.2",
     "@pikku/node-http-server": "^0.12.2",

package/skills/pikku-better-auth/SKILL.md

@@ -101,9 +101,14 @@ Enabling `session: { cookieCache: { enabled: true } }` makes the CLI split out a
 
 **Tradeoff:** server-side session revocation isn't seen until the cookie cache expires (sign-out is still immediate — it deletes the cookie).
 
-**Do NOT also hand-write a global `addHTTPMiddleware('*', [betterAuthSession()])`** — that re-drags the stateful server into every unit and defeats the split (validate flags it as `better-auth-stateful-session-global`). The generated middleware is enough.
+**Don't add a redundant default `addHTTPMiddleware('*', [betterAuthSession()])`** — with cookieCache on, that re-drags the stateful server into every unit and defeats the split (validate flags it as `better-auth-stateful-session-global`). If you don't need to customize the session, the generated middleware is enough.
 
-**Custom session fields (`role`, `locale`, …):** the generated stateless middleware uses the default map (`{ userId }` only). To use a custom map, register your own `betterAuthStatelessSession({ mapSession })` **globally** — `addHTTPMiddleware('*', [...])` or `addGlobalMiddleware([...])`. The CLI detects a global user registration and skips generating its own (pikkujs/pikku#754), so you keep cookieCache's lean bundles *and* your custom fields. A route-scoped registration (`addHTTPMiddleware('/some/path', [...])`) does not count — the generated global middleware is still emitted.
+**Customizing the session bridge (`mapSession`, `impersonation`, `apiKey`, …):** you do NOT chain a second middleware on top of the generated one — register your OWN global session middleware and the CLI steps aside (it stops generating its default). This works on both paths and is detected the same way:
+
+- **Stateless (cookieCache on):** register `betterAuthStatelessSession({ mapSession })` **globally** — `addHTTPMiddleware('*', [...])` or `addGlobalMiddleware([...])`. The CLI sees the global registration and skips emitting `auth-middleware.gen.ts` (pikkujs/pikku#754), so you keep cookieCache's lean bundles *and* your custom fields.
+- **Stateful (cookieCache off):** register `betterAuthSession({ mapSession, impersonation })` **globally**. The CLI detects it (`hasUserSessionMiddleware`) and omits its own `addHTTPMiddleware('*', [betterAuthSession()])` from `auth.gen.ts` — so there's exactly one session bridge in the chain, yours.
+
+In both cases a **route-scoped** registration (`addHTTPMiddleware('/some/path', [...])`) does NOT count — only a global one suppresses the generated default. The generated middleware in a `.gen.ts` file is also ignored by the detector, so regeneration never self-suppresses.
 
 ### 2. Production database adapter