@pikku/cli 0.12.120 → 0.12.122

package/dist/.pikku/scopes/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/scopes` resolves here.

package/dist/.pikku/scopes/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/scopes` resolves here.

package/dist/.pikku/scopes/pikku-personas.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-roles.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/scopes/pikku-scope-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scope-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineScope } from '@pikku/core/scope';
 export { defineSystemRole } from '@pikku/core/role';

package/dist/.pikku/scopes/pikku-scopes.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * This file was generated by the @pikku/cli

package/dist/.pikku/secrets/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/secrets` resolves here.

package/dist/.pikku/secrets/pikku-secret-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secret-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineSecret } from '@pikku/core/secret';

package/dist/.pikku/secrets/pikku-secrets.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 import type { SecretService } from '@pikku/core/services';

package/dist/.pikku/secrets/pikku-secrets.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { TypedSecretService as CoreTypedSecretService } from '@pikku/core/services';
 /**

package/dist/.pikku/services/pikku-meta-service.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export declare class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/services/pikku-meta-service.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { LocalMetaService } from '@pikku/core/services/local-meta';
 export class PikkuMetaService extends LocalMetaService {

package/dist/.pikku/setup/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/setup` resolves here.

package/dist/.pikku/setup/pikku-setup-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/setup/pikku-setup-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Config and service factory definitions, declared once per application

package/dist/.pikku/trigger/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/trigger` resolves here.

package/dist/.pikku/trigger/pikku-trigger-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/trigger/pikku-trigger-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Trigger-specific type definitions for tree-shaking optimization

package/dist/.pikku/variables/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/variables` resolves here.

package/dist/.pikku/variables/pikku-variable-types.gen.d.ts

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variable-types.gen.js

@@ -1,4 +1,4 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 export { defineVariable } from '@pikku/core/variable';

package/dist/.pikku/variables/pikku-variables.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { TypedVariablesService as CoreTypedVariablesService } from '@pikku/core/services';
 import type { VariablesService } from '@pikku/core/services';

package/dist/.pikku/variables/pikku-variables.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { TypedVariablesService as CoreTypedVariablesService, } from '@pikku/core/services';
 /**

package/dist/.pikku/workflow/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/index.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 /**
  * Subpath entry — `#pikku/workflow` resolves here.

package/dist/.pikku/workflow/pikku-workflow-types.gen.d.ts

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import type { PikkuWorkflowGraphConfig, PikkuWorkflowGraphResult } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-types.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { WorkflowCancelledException } from '@pikku/core/workflow';
 import { pikkuWorkflowGraph as corePikkuWorkflowGraph } from '@pikku/core/workflow';

package/dist/.pikku/workflow/pikku-workflow-wirings-meta.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { pikkuState } from '@pikku/core/state';
 import allWorkflowMeta from './meta/allWorkflow.gen.json' with { type: 'json' };

package/dist/.pikku/workflow/pikku-workflow-wirings.gen.js

@@ -1,5 +1,5 @@
 /**
- * This file was generated by @pikku/cli@0.12.120
+ * This file was generated by @pikku/cli@0.12.122
  */
 import { addWorkflow } from '@pikku/core/workflow';
 import './pikku-workflow-wirings-meta.gen.js';

package/dist/bin/pikku-bin.mjs

@@ -11,8 +11,8 @@ async function checkForUpdate() {
     })
     if (!res.ok) return
     const { version: latest } = await res.json()
-    if (latest !== '0.12.120') {
-      process.stderr.write(`\n  Update available  0.12.120 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
+    if (latest !== '0.12.122') {
+      process.stderr.write(`\n  Update available  0.12.122 → ${latest}\n  brew upgrade pikku  or  npm install -g @pikku/cli\n\n`)
     }
   } catch {}
 }

package/dist/src/fabric/fabric-commands.d.ts

@@ -629,6 +629,58 @@ export declare const fabricCommands: {
             }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>, import("../../.pikku/middleware/pikku-middleware-types.gen.js").PikkuMiddleware, (services: import("../../types/application-types.js").SingletonServices, data: any, session?: import("../../types/application-types.js").UserSession | undefined) => void | Promise<void>, string>;
         };
     };
+    variables: {
+        description: string;
+        subcommands: {
+            set: import("@pikku/core/cli").CoreCLICommandConfig<import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionConfig<{
+                name: string;
+                branch: string;
+                value: string;
+            }, {
+                name: string;
+                success: boolean;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
+                name: string;
+                branch: string;
+                value: string;
+            }, {
+                name: string;
+                success: boolean;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").WiredServices, unknown> | import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunction<{
+                name: string;
+                branch: string;
+                value: string;
+            }, {
+                name: string;
+                success: boolean;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>, import("../../.pikku/middleware/pikku-middleware-types.gen.js").PikkuMiddleware, (services: import("../../types/application-types.js").SingletonServices, data: any, session?: import("../../types/application-types.js").UserSession | undefined) => void | Promise<void>, string>;
+            get: import("@pikku/core/cli").CoreCLICommandConfig<import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionConfig<{
+                name: string;
+                branch: string;
+                json?: boolean | undefined;
+            }, {
+                name: string;
+                exists: boolean;
+                value: unknown;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
+                name: string;
+                branch: string;
+                json?: boolean | undefined;
+            }, {
+                name: string;
+                exists: boolean;
+                value: unknown;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").WiredServices, unknown> | import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunction<{
+                name: string;
+                branch: string;
+                json?: boolean | undefined;
+            }, {
+                name: string;
+                exists: boolean;
+                value: unknown;
+            }, "rpc" | "session", import("../../.pikku/function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>, import("../../.pikku/middleware/pikku-middleware-types.gen.js").PikkuMiddleware, (services: import("../../types/application-types.js").SingletonServices, data: any, session?: import("../../types/application-types.js").UserSession | undefined) => void | Promise<void>, string>;
+        };
+    };
     logs: import("@pikku/core/cli").CoreCLICommandConfig<import("../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionConfig<{
         branch?: string | undefined;
         deployment?: string | undefined;

package/dist/src/fabric/fabric-commands.js

@@ -32,6 +32,8 @@ import { FabricRollback } from './functions/rollback.function.js';
 import { FabricSecretsSet } from './functions/secrets-set.function.js';
 import { FabricSecretsList } from './functions/secrets-list.function.js';
 import { FabricSecretsRotate } from './functions/secrets-rotate.function.js';
+import { FabricVariablesSet } from './functions/variables-set.function.js';
+import { FabricVariablesGet } from './functions/variables-get.function.js';
 import { FabricLogs } from './functions/logs.function.js';
 import { FabricMetrics } from './functions/metrics.function.js';
 import { FabricTrace } from './functions/trace.function.js';
@@ -260,6 +262,29 @@ export const fabricCommands = defineCLICommands({
             }),
         },
     },
+    variables: {
+        description: 'Manage stage-scoped variables',
+        subcommands: {
+            set: pikkuCLICommand({
+                parameters: '<name>',
+                func: FabricVariablesSet,
+                description: 'Set a stage-scoped variable',
+                options: {
+                    branch: { description: 'Target branch', short: 'b' },
+                    value: { description: 'Variable value, read as JSON when it parses' },
+                },
+            }),
+            get: pikkuCLICommand({
+                parameters: '<name>',
+                func: FabricVariablesGet,
+                description: 'Read a stage-scoped variable back',
+                options: {
+                    branch: { description: 'Target branch', short: 'b' },
+                    json: { description: 'Machine-readable output', default: false },
+                },
+            }),
+        },
+    },
     logs: pikkuCLICommand({
         func: FabricLogs,
         description: 'Stream or fetch logs',

package/dist/src/fabric/functions/validate.function.js

@@ -1143,10 +1143,30 @@ export async function runValidate(startDir = process.cwd(), opts = {}) {
                 if (!ent.isDirectory())
                     continue;
                 const appPath = join(appsRoot, ent.name);
-                const settings = await readJsonSafe(join(appPath, 'project.inlang', 'settings.json'));
+                const settingsPath = join(appPath, 'project.inlang', 'settings.json');
+                const settings = await readJsonSafe(settingsPath);
                 if (!settings)
                     continue;
-                const catalogue = await readJsonSafe(join(appPath, 'messages', `${settings.baseLocale ?? 'en'}.json`));
+                // `baseLocale` names the message SOURCE — the catalogue every other
+                // locale is cloned from and translated against — not the language the
+                // app is served in. Pointing it at the product's language looks right,
+                // because the app does come up in that language, and quietly makes the
+                // project single-language forever: there is no en.json to add a locale
+                // from, and repointing it later re-authors every key. The setting that
+                // decides what a first-time visitor opens in is active.json's
+                // defaultLocale, which is a separate file for exactly this reason.
+                const baseLocale = settings.baseLocale ?? 'en';
+                if (baseLocale !== 'en') {
+                    const declared = Array.isArray(settings.locales)
+                        ? settings.locales.filter((l) => typeof l === 'string')
+                        : [];
+                    w(`app-base-locale-not-english-${ent.name}`, `apps/${ent.name}/project.inlang/settings.json sets baseLocale to "${baseLocale}" — that names the message source, not the language the app is served in, so this app has no English catalogue to add a second language from`, settingsPath, lines('Serving the app in a language is a different setting from authoring the messages in one:', `  1. settings.json: { "baseLocale": "en", "locales": ["en", "${baseLocale}"] }`, `  2. src/i18n/active.json: { "defaultLocale": "${baseLocale}" }  (or: fabric i18n --default-locale ${baseLocale})`, `Keys and their English values stay in messages/en.json; messages/${baseLocale}.json holds the ${baseLocale} values.`, ...(declared.length && !declared.includes('en')
+                        ? [
+                            `Note this is a re-key, not a rename: messages/${baseLocale}.json is currently the source, so its keys have to survive the move.`,
+                        ]
+                        : []), 'Identifiers are unaffected either way — functions, components, types, tables and columns are English in every project.'));
+                }
+                const catalogue = await readJsonSafe(join(appPath, 'messages', `${baseLocale}.json`));
                 if (!catalogue)
                     continue;
                 for (const [key, value] of Object.entries(catalogue)) {

package/dist/src/fabric/functions/variables-get.function.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const FabricVariablesGetInput: z.ZodObject<{
+    name: z.ZodString;
+    branch: z.ZodString;
+    json: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const FabricVariablesGetOutput: z.ZodObject<{
+    name: z.ZodString;
+    exists: z.ZodBoolean;
+    value: z.ZodUnknown;
+}, z.core.$strip>;
+export declare const FabricVariablesGet: import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionConfig<{
+    name: string;
+    branch: string;
+    json?: boolean | undefined;
+}, {
+    name: string;
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
+    name: string;
+    branch: string;
+    json?: boolean | undefined;
+}, {
+    name: string;
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").WiredServices, unknown> | import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunction<{
+    name: string;
+    branch: string;
+    json?: boolean | undefined;
+}, {
+    name: string;
+    exists: boolean;
+    value: unknown;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;

package/dist/src/fabric/functions/variables-get.function.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { pikkuSessionlessFunc } from '../../../.pikku/function/index.js';
+import { resolveApiContext } from '../lib/config.js';
+import { getFabricRPC } from '../lib/http.js';
+import { resolveStageId } from '../lib/stage.js';
+export const FabricVariablesGetInput = z.object({
+    name: z.string(),
+    branch: z.string(),
+    json: z.boolean().optional(),
+});
+export const FabricVariablesGetOutput = z.object({
+    name: z.string(),
+    exists: z.boolean(),
+    value: z.unknown(),
+});
+export const FabricVariablesGet = pikkuSessionlessFunc({
+    description: 'Read a stage-scoped variable back, so you can see the shape it was stored in rather than the shape you meant.',
+    input: FabricVariablesGetInput,
+    output: FabricVariablesGetOutput,
+    func: async (_services, { name, branch, json }) => {
+        const ctx = await resolveApiContext();
+        if (!ctx.token)
+            throw new Error('Not logged in. Run `pikku fabric login` first.');
+        if (!ctx.projectId)
+            throw new Error('No fabric project linked. Run `pikku fabric link` first.');
+        const rpc = getFabricRPC({ apiUrl: ctx.apiUrl, token: ctx.token });
+        const stageId = await resolveStageId(rpc, ctx.projectId, branch);
+        const { exists, value } = await rpc.invoke('getStageConsoleVariable', {
+            stageId,
+            variableId: name,
+        });
+        if (json) {
+            console.log(JSON.stringify({ branch, name, exists, value }, null, 2));
+        }
+        else if (!exists) {
+            console.log(`[fabric] ${name} is not set on ${branch}`);
+        }
+        else {
+            // `JSON.stringify` rather than the bare value, because the shape is the
+            // thing worth seeing: `true` and `"true"` print identically otherwise, and
+            // telling them apart is usually why you are looking.
+            console.log(JSON.stringify(value));
+        }
+        return { name, exists, value };
+    },
+});

package/dist/src/fabric/functions/variables-set.function.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+export declare const FabricVariablesSetInput: z.ZodObject<{
+    name: z.ZodString;
+    branch: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strip>;
+export declare const FabricVariablesSetOutput: z.ZodObject<{
+    name: z.ZodString;
+    success: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const FabricVariablesSet: import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionConfig<{
+    name: string;
+    branch: string;
+    value: string;
+}, {
+    name: string;
+    success: boolean;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunctionSessionless<{
+    name: string;
+    branch: string;
+    value: string;
+}, {
+    name: string;
+    success: boolean;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").WiredServices, unknown> | import("../../../.pikku/function/pikku-function-types.gen.js").PikkuFunction<{
+    name: string;
+    branch: string;
+    value: string;
+}, {
+    name: string;
+    success: boolean;
+}, "rpc" | "session", import("../../../.pikku/function/pikku-function-types.gen.js").WiredServices>, undefined, undefined>;

package/dist/src/fabric/functions/variables-set.function.js

@@ -0,0 +1,41 @@
+import { z } from 'zod';
+import { pikkuSessionlessFunc } from '../../../.pikku/function/index.js';
+import { resolveApiContext } from '../lib/config.js';
+import { getFabricRPC } from '../lib/http.js';
+import { resolveStageId } from '../lib/stage.js';
+import { parseVariableValue } from '../lib/variable-value.js';
+export const FabricVariablesSetInput = z.object({
+    name: z.string(),
+    branch: z.string(),
+    value: z.string(),
+});
+export const FabricVariablesSetOutput = z.object({
+    name: z.string(),
+    success: z.boolean(),
+});
+export const FabricVariablesSet = pikkuSessionlessFunc({
+    description: 'Set a stage-scoped variable — the deployed counterpart of a line in .env. Not a secret: the value is stored in plain form and is readable back.',
+    input: FabricVariablesSetInput,
+    output: FabricVariablesSetOutput,
+    func: async (_services, { name, branch, value }) => {
+        const ctx = await resolveApiContext();
+        if (!ctx.token)
+            throw new Error('Not logged in. Run `pikku fabric login` first.');
+        if (!ctx.projectId)
+            throw new Error('No fabric project linked. Run `pikku fabric link` first.');
+        const rpc = getFabricRPC({ apiUrl: ctx.apiUrl, token: ctx.token });
+        const stageId = await resolveStageId(rpc, ctx.projectId, branch);
+        // Deliberately not sealed, and deliberately not prompted for. A variable is
+        // configuration — a port, a URL, a feature switch — and treating it like a
+        // secret would mean it could not be read back, which is most of the value of
+        // having it separate from `secrets` in the first place. Anything that would
+        // hurt to print belongs in `pikku fabric secrets set`.
+        const { success } = await rpc.invoke('setStageConsoleVariable', {
+            stageId,
+            variableId: name,
+            value: parseVariableValue(value),
+        });
+        console.log(`[fabric] ${name} set on ${branch}.`);
+        return { name, success };
+    },
+});

package/dist/src/fabric/lib/variable-value.d.ts

@@ -0,0 +1,15 @@
+/**
+ * How a `--value` typed at a shell prompt becomes the value a running stage sees.
+ *
+ * `setStageConsoleVariable` takes `unknown`, so the choice of what to store is
+ * the CLI's to make, and the only defensible answer is whatever
+ * `LocalVariablesService` would have produced from the same text in a `.env`
+ * file. That service reads `JSON.parse(raw)` and falls back to the raw string
+ * when the parse throws, so this does the same.
+ *
+ * The alternative — store every value as a string — is what makes a variable
+ * behave differently in a deploy than it does locally, and the failure it causes
+ * is silent: `DEMO_ACCESS=true` compared against the boolean `true` is simply
+ * false, and the feature it gates stays off with nothing in the log to say why.
+ */
+export declare const parseVariableValue: (raw: string) => unknown;

package/dist/src/fabric/lib/variable-value.js

@@ -0,0 +1,22 @@
+/**
+ * How a `--value` typed at a shell prompt becomes the value a running stage sees.
+ *
+ * `setStageConsoleVariable` takes `unknown`, so the choice of what to store is
+ * the CLI's to make, and the only defensible answer is whatever
+ * `LocalVariablesService` would have produced from the same text in a `.env`
+ * file. That service reads `JSON.parse(raw)` and falls back to the raw string
+ * when the parse throws, so this does the same.
+ *
+ * The alternative — store every value as a string — is what makes a variable
+ * behave differently in a deploy than it does locally, and the failure it causes
+ * is silent: `DEMO_ACCESS=true` compared against the boolean `true` is simply
+ * false, and the feature it gates stays off with nothing in the log to say why.
+ */
+export const parseVariableValue = (raw) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+};