@pikku/cli 0.12.71 → 0.12.74

package/dist/.pikku/agent/pikku-agent-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { CoreAIAgent, PikkuAIMiddlewareHooks } from '@pikku/core/ai-agent';
 import type { PikkuPermission, PikkuMiddleware, Services, PikkuFunctionConfig } from '../function/pikku-function-types.gen.js';

package/dist/.pikku/channel/pikku-channel-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/channel/pikku-channel-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Channel-specific type definitions for tree-shaking optimization

package/dist/.pikku/cli/pikku-cli-channel.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * WebSocket channel backend for 'pikku' CLI commands

package/dist/.pikku/cli/pikku-cli-client.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import '../pikku-bootstrap.gen.js';
 /**

package/dist/.pikku/cli/pikku-cli-client.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { executeCLIViaChannel } from '@pikku/core/cli/channel';
 import { CorePikkuWebsocket } from '@pikku/websocket';

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json';
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-contracts-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import contractsMeta from './pikku-cli-contracts-meta.gen.json' with { type: 'json' };
 export default contractsMeta;

package/dist/.pikku/cli/pikku-cli-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
 

package/dist/.pikku/cli/pikku-cli-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-cli-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/cli/pikku-cli-wirings.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import '../../src/cli.wiring.js';
 import '../../src/services.js';

package/dist/.pikku/cli/pikku-cli-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /* The files with an wireCLI function call */
 import '../../src/cli.wiring.js';

package/dist/.pikku/cli/pikku-cli.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import '../pikku-bootstrap.gen.js';
 export declare function PikkuCLI(args: string[]): Promise<void>;

package/dist/.pikku/cli/pikku-cli.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { executeCLI, CLIError } from '@pikku/core/cli';
 import { createConfig as createConfig } from '../../src/services.js';

package/dist/.pikku/console/pikku-node-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import type { FlattenedRPCMap } from '../rpc/pikku-rpc-wirings-map.internal.gen.js';
 export type NodeCategory = never;

package/dist/.pikku/function/pikku-function-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-function-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Core function, middleware, and permission types for all wirings

package/dist/.pikku/function/pikku-functions-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-functions-meta.gen.json' with { type: 'json' };

package/dist/.pikku/function/pikku-functions-meta.gen.json

@@ -671,7 +671,7 @@
         ],
         "outputs": [],
         "remote": true,
-        "implementationHash": "a67f723a404ba236"
+        "implementationHash": "c0b7fbab3731d8b6"
     },
     "pikkuEmailsInit": {
         "pikkuFuncId": "pikkuEmailsInit",
@@ -1688,7 +1688,7 @@
             "PikkuAuthInput"
         ],
         "outputs": [],
-        "implementationHash": "53fd2b900f3bbc28",
+        "implementationHash": "576e648aba1176ce",
         "middleware": [
             {
                 "type": "wire",

package/dist/.pikku/function/pikku-functions.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /* Import and register functions used by RPCs */
 import { addFunction } from '@pikku/core/function';

package/dist/.pikku/http/pikku-http-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * HTTP-specific type definitions for tree-shaking optimization

package/dist/.pikku/http/pikku-http-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-http-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/http/pikku-http-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/http/pikku-http-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /* The files with an wireHTTP function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/mcp/pikku-mcp-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/mcp/pikku-mcp-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * MCP-specific type definitions for tree-shaking optimization

package/dist/.pikku/pikku-bootstrap.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-bootstrap.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import './rpc/pikku-rpc-wirings-meta.internal.gen.js';
 import './http/pikku-http-wirings-meta.gen.js';

package/dist/.pikku/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/pikku-services.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import type { SingletonServices } from '../types/application-types.d.js';
 import type { Services } from '../types/application-types.d.js';

package/dist/.pikku/pikku-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/pikku-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Main type export hub - re-exports all wiring-specific types

package/dist/.pikku/queue/pikku-queue-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Queue-specific type definitions for tree-shaking optimization

package/dist/.pikku/queue/pikku-queue-workers-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-queue-workers-wirings-meta.gen.json' with { type: 'json' };

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/queue/pikku-queue-workers-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /* The files with an addQueueWorkers function call */
 import '../../src/scaffold/rpc-remote.gen.js';

package/dist/.pikku/rpc/pikku-rpc-wirings-meta.internal.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import metaData from './pikku-rpc-wirings-meta.internal.gen.json' with { type: 'json' };

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/scheduler/pikku-scheduler-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Scheduler-specific type definitions for tree-shaking optimization

package/dist/.pikku/schemas/register.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { addSchema } from '@pikku/core/schema';
 import * as BinaryInput from './schemas/BinaryInput.schema.json' with { type: 'json' };

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 export { wireSecret } from '@pikku/core/secret';
 export type { CoreSecret, SecretDefinitionMeta, SecretDefinitionsMeta } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 export { wireSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 const CREDENTIALS_META = {};

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 export { wireVariable } from '@pikku/core/variable';
 export type { CoreVariable, VariableDefinitionMeta, VariableDefinitionsMeta } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 export { wireVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 const VARIABLES_META = {};

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { template } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { pikkuState } from '@pikku/core/internal';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.71
+ * This file was generated by @pikku/cli@0.12.74
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.71') {
-      process.stderr.write(`\n  Update available  0.12.71 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.74') {
+      process.stderr.write(`\n  Update available  0.12.74 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/functions/commands/bun-coverage-loader.js

@@ -31,11 +31,14 @@ export async function registerBunCoverageLoader({ rootDir, }) {
         name: 'pikku-istanbul-coverage',
         setup(build) {
             build.onLoad({ filter }, async (args) => {
-                if (!shouldInstrument(args.path))
-                    return undefined;
+                // Bun (≥1.3.14) rejects `return undefined` from onLoad with
+                // "onLoad() expects an object returned", so non-instrumented files
+                // (.gen/.test/.d, node_modules) pass through as an object instead.
                 const source = await readFile(args.path, 'utf-8');
-                const contents = instrumenter.instrumentSync(source, args.path);
-                return { contents, loader: args.path.endsWith('.tsx') ? 'tsx' : 'ts' };
+                const loader = args.path.endsWith('.tsx') ? 'tsx' : 'ts';
+                if (!shouldInstrument(args.path))
+                    return { contents: source, loader };
+                return { contents: instrumenter.instrumentSync(source, args.path), loader };
             });
         },
     });

package/dist/src/functions/commands/dev.js

@@ -1,7 +1,7 @@
 import { join, resolve } from 'path';
 import { pikkuSessionlessFunc } from '#pikku';
 import chokidar from 'chokidar';
-import { pikkuDevReloader } from '@pikku/core/dev';
+import { pikkuDevReloader, reloadGeneratedMeta } from '@pikku/core/dev';
 import { ConsoleLogger, LocalEmailService, spy, InMemoryQueueService, InMemoryWorkflowService, InMemoryTriggerService, InMemoryAIRunStateService, } from '@pikku/core/services';
 import { KyselyAIStorageService, KyselyAIRunStateService, KyselyAgentRunService, } from '@pikku/kysely';
 import { stopSingletonServices } from '@pikku/core';
@@ -252,12 +252,12 @@ export const dev = pikkuSessionlessFunc({
                 process.exit(0);
             }
         });
-        if (enableHmr) {
-            await pikkuDevReloader({
+        const devReloader = enableHmr
+            ? await pikkuDevReloader({
                 srcDirectories: watchDirectories,
                 logger,
-            });
-        }
+            })
+            : undefined;
         if (enableWatch) {
             const genIgnore = /\.gen\.tsx?$/;
             configWatcher = chokidar.watch(watchDirectories, {
@@ -278,6 +278,20 @@ export const dev = pikkuSessionlessFunc({
                             invalidateInspectorState();
                             await runAllWithCommandState();
                             workflowService.wireQueueWorkers();
+                            // Pull the regenerated meta + JSON schemas into the running
+                            // process so new/changed functions are callable without a
+                            // restart (the hot-reloader registers their implementations).
+                            await reloadGeneratedMeta({
+                                pikkuDir,
+                                logger,
+                                schemaService: resolvedServices.schema,
+                            });
+                            // Re-import recently changed files now that the fresh meta is
+                            // in state: wire* calls skip routes whose meta doesn't exist,
+                            // so a NEW route in a changed wiring file only registers on
+                            // this post-codegen pass (the reloader's instant pass ran too
+                            // early to see it).
+                            await devReloader?.reimportPending();
                             logger.info({
                                 message: `✓ Generated in ${Date.now() - start}ms`,
                                 type: 'timing',

package/dist/src/functions/wirings/auth/pikku-command-auth.js

@@ -30,7 +30,7 @@ export const pikkuAuth = pikkuSessionlessFunc({
         // has no OAuth providers — still generates its /auth/* wiring.
         if (!state.auth.definition)
             return;
-        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {}, state.auth.hasUserSessionMiddleware ?? false);
+        const { wiring, secrets, middleware } = serializeAuthGen(state.auth.definition, state.auth.providers, authFile, typesDeclarationFile, packageMappings ?? {}, state.auth.hasUserSessionMiddleware ?? false, Boolean(config.scaffold?.console));
         // The secrets file sits alongside authFile so re-inspection rediscovers it.
         // It is kept separate from the wiring file because the CLI forbids Zod
         // schemas and HTTP wiring (wireHTTPRoutes) in the same file (PKU490).

package/dist/src/functions/wirings/auth/serialize-auth-gen.d.ts

@@ -18,19 +18,4 @@ export interface AuthGenOutput {
      * `session.cookieCache` is enabled (stateless path); undefined otherwise. */
     middleware?: string;
 }
-/**
- * Generates the `auth.gen.ts` (HTTP wiring) and `auth-secrets.gen.ts` (schemas +
- * secret/variable wiring) files from a `pikkuBetterAuth((services) => betterAuth(...))`
- * export.
- *
- * The wiring file side-effect imports the user's auth file (so `pikkuBetterAuth`
- * registers its factory), builds ONE shared sessionless handler that reads the
- * resolved `services.auth` and delegates to better-auth's fetch handler, wires a
- * catch-all `${basePath}{/*splat}` route per method to it, and registers the
- * better-auth session-bridge middleware globally. Provider/plugin metadata for
- * the console is emitted separately as `auth-meta.gen.json` (see
- * serializeAuthMeta). Because this is normal, statically inspectable HTTP
- * wiring, the routes flow through inspection into the deploy manifest (one
- * worker for all auth routes).
- */
-export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>, hasUserSessionMiddleware?: boolean) => AuthGenOutput;
+export declare const serializeAuthGen: (definition: AuthDefinition, providers: string[], authFile: string, typesDeclarationFile: string, packageMappings: Record<string, string>, hasUserSessionMiddleware?: boolean, includeConsoleToken?: boolean) => AuthGenOutput;

package/dist/src/functions/wirings/auth/serialize-auth-gen.js

@@ -33,7 +33,22 @@ function variableSchemaName(name, field) {
  * wiring, the routes flow through inspection into the deploy manifest (one
  * worker for all auth routes).
  */
-export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings, hasUserSessionMiddleware = false) => {
+// External consoles (served from another origin) cannot carry the session
+// cookie, so they authenticate with 'Authorization: Bearer <PIKKU_CONSOLE_TOKEN>'.
+// The expected token resolves through the secrets service per request and the
+// middleware is a no-op while the secret is unset. Emitted into the same
+// addHTTPMiddleware('*') call as the session middleware: the inspector keys
+// route-middleware groups by pattern, so a second '*' registration from another
+// file would silently displace this one in deployed units.
+const consoleTokenMiddlewareLines = () => [
+    `  authBearer({`,
+    `    token: {`,
+    `      secretId: 'PIKKU_CONSOLE_TOKEN',`,
+    `      userSession: { userId: 'pikku-console-token' },`,
+    `    },`,
+    `  }),`,
+];
+export const serializeAuthGen = (definition, providers, authFile, typesDeclarationFile, packageMappings, hasUserSessionMiddleware = false, includeConsoleToken = false) => {
     const known = providers.filter((p) => p in PROVIDER_REGISTRY);
     const basePath = definition.basePath;
     // Side-effect import of the user's auth file so `pikkuBetterAuth` runs and
@@ -132,6 +147,9 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
         emitStatefulSession
             ? `import { createAuthHandler, betterAuthSession } from '@pikku/better-auth'`
             : `import { createAuthHandler } from '@pikku/better-auth'`,
+        ...(emitStatefulSession && includeConsoleToken
+            ? [`import { authBearer } from '@pikku/core/middleware'`]
+            : []),
         `import '${configImportPath}'`,
         '',
         // createAuthHandler is called once at module load; the exported handler is a
@@ -148,7 +166,12 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
     if (emitStatefulSession) {
         // Stateful: betterAuthSession calls services.auth(), so it stays here with
         // the auth.wiring import.
-        wiring.push(`addHTTPMiddleware('*', [betterAuthSession()])`, '');
+        if (includeConsoleToken) {
+            wiring.push(`addHTTPMiddleware('*', [`, `  betterAuthSession(),`, ...consoleTokenMiddlewareLines(), `])`, '');
+        }
+        else {
+            wiring.push(`addHTTPMiddleware('*', [betterAuthSession()])`, '');
+        }
     }
     wiring.push(`wireHTTPRoutes({`, `  routes: {`);
     // One catch-all route per method. `{/*splat}` matches both the bare basePath
@@ -172,8 +195,18 @@ export const serializeAuthGen = (definition, providers, authFile, typesDeclarati
             '',
             `import { addHTTPMiddleware } from '${pikkuTypesImportPath}'`,
             `import { betterAuthStatelessSession } from '@pikku/better-auth'`,
+            ...(includeConsoleToken
+                ? [`import { authBearer } from '@pikku/core/middleware'`]
+                : []),
             '',
-            `addHTTPMiddleware('*', [betterAuthStatelessSession()])`,
+            ...(includeConsoleToken
+                ? [
+                    `addHTTPMiddleware('*', [`,
+                    `  betterAuthStatelessSession(),`,
+                    ...consoleTokenMiddlewareLines(),
+                    `])`,
+                ]
+                : [`addHTTPMiddleware('*', [betterAuthStatelessSession()])`]),
             '',
         ];
         output.middleware = middleware.join('\n');

package/dist/src/utils/tsc-check.js

@@ -1,6 +1,20 @@
 import ts from 'typescript';
-import { dirname, isAbsolute, relative } from 'node:path';
+import { dirname, isAbsolute, join, relative } from 'node:path';
+import { createRequire } from 'node:module';
 import { PikkuError } from '@pikku/core';
+// Type-check with the PROJECT's own TypeScript when it has one — the CLI's
+// bundled compiler can be a different major (e.g. TS 6 vs a project on TS 5)
+// and produce diagnostics the project's real `tsc` never would (seen as
+// phantom TS2591 "Cannot find name 'process'" on a tsconfig that is clean
+// under the project's compiler). Falls back to the CLI's typescript.
+const loadProjectTs = (rootDir) => {
+    try {
+        return createRequire(join(rootDir, 'noop.cjs'))('typescript');
+    }
+    catch {
+        return ts;
+    }
+};
 // A type-check failure is expected (the --tsc gate did its job) — throw a
 // PikkuError so the runner logs the message alone, not a stack trace.
 export class PikkuTypecheckFailedError extends PikkuError {
@@ -108,12 +122,13 @@ export const renderTscFull = (diagnostics, rootDir, formatHost) => {
  * so the caller can pick the compact (`--tsc-summary`) or full (`--tsc`) render.
  */
 export const runProjectTypecheck = (tsconfigPath, rootDir) => {
+    const tsImpl = loadProjectTs(rootDir);
     const formatHost = {
         getCanonicalFileName: (f) => f,
         getCurrentDirectory: () => rootDir,
-        getNewLine: () => ts.sys.newLine,
+        getNewLine: () => tsImpl.sys.newLine,
     };
-    const configFile = ts.readConfigFile(tsconfigPath, ts.sys.readFile);
+    const configFile = tsImpl.readConfigFile(tsconfigPath, tsImpl.sys.readFile);
     if (configFile.error) {
         const diagnostics = [configFile.error];
         return {
@@ -122,8 +137,8 @@ export const runProjectTypecheck = (tsconfigPath, rootDir) => {
             formatHost,
         };
     }
-    const parsed = ts.parseJsonConfigFileContent(configFile.config, ts.sys, dirname(tsconfigPath));
-    const program = ts.createProgram({
+    const parsed = tsImpl.parseJsonConfigFileContent(configFile.config, tsImpl.sys, dirname(tsconfigPath));
+    const program = tsImpl.createProgram({
         rootNames: parsed.fileNames,
         options: {
             ...parsed.options,
@@ -132,7 +147,10 @@ export const runProjectTypecheck = (tsconfigPath, rootDir) => {
             tsBuildInfoFile: undefined,
         },
     });
-    const diagnostics = [...parsed.errors, ...ts.getPreEmitDiagnostics(program)];
+    const diagnostics = [
+        ...parsed.errors,
+        ...tsImpl.getPreEmitDiagnostics(program),
+    ];
     return {
         result: collectTscDiagnostics(diagnostics, rootDir),
         diagnostics,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/cli",
-  "version": "0.12.71",
+  "version": "0.12.74",
   "author": "yasser.fadl@gmail.com",
   "license": "BUSL-1.1",
   "imports": {
@@ -59,10 +59,10 @@
     "zod-to-ts": "^2.1.0"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.54"
+    "@pikku/core": "^0.12.57"
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.54",
+    "@pikku/core": "^0.12.57",
     "@types/istanbul-lib-instrument": "^1.7.7",
     "@types/node": "^24.11.0",
     "@types/pg": "^8.11.0",