@pikku/cli 0.12.71 → 0.12.72

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { CoreAIAgent, PikkuAIMiddlewareHooks } from '@pikku/core/ai-agent';
 import type { PikkuPermission, PikkuMiddleware, Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';

package/dist/.pikku/channel/pikku-channel-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/channel/pikku-channel-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/cli/pikku-cli-channel.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * WebSocket channel backend for 'pikku' CLI commands

package/dist/.pikku/cli/pikku-cli-client.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import '../pikku-bootstrap.gen.js';
 /**

package/dist/.pikku/cli/pikku-cli-client.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { executeCLIViaChannel } from '@pikku/core/cli/channel';
 import { CorePikkuWebsocket } from '@pikku/websocket';

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json';
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json' with { type: 'json' };
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-cli-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/cli/pikku-cli-wirings.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import '../../src/cli.wiring.js';
 import '../../src/services.js';

package/dist/.pikku/cli/pikku-cli-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /* The files with an wireCLI function call */
 import '../../src/cli.wiring.js';

package/dist/.pikku/cli/pikku-cli.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import '../pikku-bootstrap.gen.js';
 export declare function PikkuCLI(args: string[]): Promise<void>;

package/dist/.pikku/cli/pikku-cli.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { executeCLI, CLIError } from '@pikku/core/cli';
 import { createConfig as createConfig } from '../../src/services.js';

package/dist/.pikku/console/pikku-node-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.js';
 export type NodeCategory = never;

package/dist/.pikku/function/pikku-function-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-function-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-functions-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-functions-meta.gen.json' with { type: 'json' };

package/dist/.pikku/function/pikku-functions-meta.gen.json

@@ -1688,7 +1688,7 @@
             "PikkuAuthInput"
         ],
         "outputs": [],
-        "implementationHash": "53fd2b900f3bbc28",
+        "implementationHash": "576e648aba1176ce",
         "middleware": [
             {
                 "type": "wire",

package/dist/.pikku/function/pikku-functions.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /* Import and register functions used by RPCs */
 import { addFunction } from '@pikku/core/function';

package/dist/.pikku/http/pikku-http-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-http-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/http/pikku-http-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/http/pikku-http-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /* The files with an wireHTTP function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/mcp/pikku-mcp-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/mcp/pikku-mcp-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/pikku-bootstrap.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-bootstrap.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-services.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import type { SingletonServices } from '../types/application-types.d.js';
 import type { Services } from '../types/application-types.d.js';

package/dist/.pikku/pikku-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/pikku-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/queue/pikku-queue-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-workers-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-queue-workers-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /* The files with an addQueueWorkers function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-rpc-wirings-meta.internal.gen.json' with { type: 'json' };

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { addSchema } from '@pikku/core/schema';
 import * as BinaryInput from './schemas/BinaryInput.schema.json' with { type: 'json' };

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 export { wireSecret } from '@pikku/core/secret';
 export type { CoreSecret, SecretDefinitionMeta, SecretDefinitionsMeta } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 export { wireSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 const CREDENTIALS_META = {};

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 export { wireVariable } from '@pikku/core/variable';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitionsMeta } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 export { wireVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 const VARIABLES_META = {};

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { pikkuState } from '@pikku/core/internal';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.72
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.71') {
-      process.stderr.write(`\n  Update available  0.12.71 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.72') {
+      process.stderr.write(`\n  Update available  0.12.72 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/functions/wirings/auth/pikku-command-auth.js

@@ -30,7 +30,7 @@ export const pikkuAuth = pikkuSessionlessFunc({
         // has no OAuth providers — still generates its /auth/* wiring.
         if (!state.auth.definition)
             return;
-        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {}, state.auth.hasUserSessionMiddleware ?? false);
+        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {}, state.auth.hasUserSessionMiddleware ?? false, Boolean(config.scaffold?.console));
         // The secrets file sits alongside authFile so re-inspection rediscovers it.
         // It is kept separate from the wiring file because the CLI forbids Zod
         // schemas and HTTP wiring (wireHTTPRoutes) in the same file (PKU490).

package/dist/src/functions/wirings/auth/serialize-auth-gen.d.ts

@@ -18,19 +18,4 @@ export interface AuthGenOutput {
      * `session.cookieCache` is enabled (stateless path); undefined otherwise. */
     middleware?: string;
 }
-/**
- * Generates the `auth.gen.ts` (HTTP wiring) and `auth-secrets.gen.ts` (schemas +
- * secret/variable wiring) files from a `pikkuBetterAuth((services) => betterAuth(...))`
- * export.
- *
- * The wiring file side-effect imports the user's auth file (so `pikkuBetterAuth`
- * registers its factory), builds ONE shared sessionless handler that reads the
- * resolved `services.auth` and delegates to better-auth's fetch handler, wires a
- * catch-all `${basePath}{/*splat}` route per method to it, and registers the
- * better-auth session-bridge middleware globally. Provider/plugin metadata for
- * the console is emitted separately as `auth-meta.gen.json` (see
- * serializeAuthMeta). Because this is normal, statically inspectable HTTP
- * wiring, the routes flow through inspection into the deploy manifest (one
- * worker for all auth routes).
- */
-export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>, hasUserSessionMiddleware?: boolean) => AuthGenOutput;
+export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>, hasUserSessionMiddleware?: boolean, includeConsoleToken?: boolean) => AuthGenOutput;

package/dist/src/functions/wirings/auth/serialize-auth-gen.js

@@ -33,7 +33,22 @@ function variableSchemaName(name, field) {
  * wiring, the routes flow through inspection into the deploy manifest (one
  * worker for all auth routes).
  */
-export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings, hasUserSessionMiddleware = false) => {
+// External consoles (served from another origin) cannot carry the session
+// cookie, so they authenticate with 'Authorization: Bearer <PIKKU_CONSOLE_TOKEN>'.
+// The expected token resolves through the secrets service per request and the
+// middleware is a no-op while the secret is unset. Emitted into the same
+// addHTTPMiddleware('*') call as the session middleware: the inspector keys
+// route-middleware groups by pattern, so a second '*' registration from another
+// file would silently displace this one in deployed units.
+const consoleTokenMiddlewareLines = () => [
+    `  authBearer({`,
+    `    token: {`,
+    `      secretId: 'PIKKU_CONSOLE_TOKEN',`,
+    `      userSession: { userId: 'pikku-console-token' },`,
+    `    },`,
+    `  }),`,
+];
+export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings, hasUserSessionMiddleware = false, includeConsoleToken = false) => {
     const known = providers.filter((p) => p in PROVIDER_REGISTRY);
     const basePath = definition.basePath;
     // Side-effect import of the user's auth file so `pikkuBetterAuth` runs and
@@ -132,6 +147,9 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
         emitStatefulSession
             ? `import { createAuthHandler, betterAuthSession } from '@pikku/better-auth'`
             : `import { createAuthHandler } from '@pikku/better-auth'`,
+        ...(emitStatefulSession && includeConsoleToken
+            ? [`import { authBearer } from '@pikku/core/middleware'`]
+            : []),
         `import '${configImportPath}'`,
         '',
         // createAuthHandler is called once at module load; the exported handler is a
@@ -148,7 +166,12 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
     if (emitStatefulSession) {
         // Stateful: betterAuthSession calls services.auth(), so it stays here with
         // the auth.wiring import.
-        wiring.push(`addHTTPMiddleware('*', [betterAuthSession()])`, '');
+        if (includeConsoleToken) {
+            wiring.push(`addHTTPMiddleware('*', [`, `  betterAuthSession(),`, ...consoleTokenMiddlewareLines(), `])`, '');
+        }
+        else {
+            wiring.push(`addHTTPMiddleware('*', [betterAuthSession()])`, '');
+        }
     }
     wiring.push(`wireHTTPRoutes({`, `  routes: {`);
     // One catch-all route per method. `{/*splat}` matches both the bare basePath
@@ -172,8 +195,18 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
             '',
             `import { addHTTPMiddleware } from '${pikkuTypesImportPath}'`,
             `import { betterAuthStatelessSession } from '@pikku/better-auth'`,
+            ...(includeConsoleToken
+                ? [`import { authBearer } from '@pikku/core/middleware'`]
+                : []),
             '',
-            `addHTTPMiddleware('*', [betterAuthStatelessSession()])`,
+            ...(includeConsoleToken
+                ? [
+                    `addHTTPMiddleware('*', [`,
+                    `  betterAuthStatelessSession(),`,
+                    ...consoleTokenMiddlewareLines(),
+                    `])`,
+                ]
+                : [`addHTTPMiddleware('*', [betterAuthStatelessSession()])`]),
             '',
         ];
         output.middleware = middleware.join('\n');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/cli",
-  "version": "0.12.71",
+  "version": "0.12.72",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
   "imports": {
@@ -59,10 +59,10 @@
     "zod-to-ts": "^2.1.0"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.54"
+    "@pikku/core": "^0.12.55"
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.54",
+    "@pikku/core": "^0.12.55",
     "@types/istanbul-lib-instrument": "^1.7.7",
     "@types/node": "^24.11.0",
     "@types/pg": "^8.11.0",