feat(cli): add project and function secrets commands

[AzamAbdul]

why

Browse needs commands to manage project secrets and attach them to Functions. The seven component PRs were merged into agent/browse-v4-7-context-names; this PR brings those changes onto current main at fbcdf61.

what changed

• Add browse cloud secrets commands to list, get, create, update, and delete secrets, including client-side encryption for create/update and password input support.
• Add browse functions secrets commands to attach, detach, and list secrets for a function.
• Include API helpers, command contract tests, dependencies, and the seven Browse changesets.

Cherry-picked in order from #2946, #2949, #2967, #2990, #3006, #3007, and #3009. All seven applied without conflicts. The secrets implementation is unchanged from the original branch. This branch retains main's Browse 0.10.0 release and excludes the old parent branch's context-name and eval changes.

test plan

Validated locally on macOS with Node 24.18.0 and pnpm 11.23.0:

• pnpm install --frozen-lockfile — passed.
• pnpm exec turbo run build --filter=browse — all four tasks passed (protocol, extension, SDK, CLI).
• pnpm --filter browse lint — formatting, ESLint, and TypeScript passed.
• pnpm --filter browse test:cli — 36 files / 471 tests passed, using an isolated daemon directory and umask 022.
• pnpm exec node --import tsx scripts/release/check-changesets.ts and git diff --check — passed.

Validation covers the built CLI and local contract fixtures; no production secrets were created or modified.

[changeset-bot]

🦋 Changeset detected

Latest commit: c874d61

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
browse	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​hpke/​core@​1.9.0
	npm/​@​hpke/​dhkem-x25519@​1.8.0

View full report

[cubic-dev-ai]

All reported issues were addressed across 33 files

Architecture diagram

sequenceDiagram
    participant U as User/CLI
    participant C as Command Handler
    participant I as Secret Input
    participant S as Seal Service
    participant A as API Helper
    participant B as Browserbase API
    participant F as Function API

    Note over U,B: Secret Management Flow (Create/Update)
    
    U->>C: Browse command with args/flags
    alt Create or Update
        C->>I: readSecretValue()
        alt --env flag
            I->>I: Read from process.env
        else --stdin flag
            I->>I: Read stream from stdin
        else Interactive TTY
            I->>I: Hidden prompt via @inquirer/password
        end
        I-->>C: Uint8Array value
        C->>A: create/updateSecret()
        A->>B: GET /v1/secrets/keypair
        B-->>A: { keypairId, publicKey }
        A->>S: sealSecret(publicKey, value)
        S->>S: Validate public key (32-byte X25519)
        S->>S: HPKE seal with AES-256-GCM
        S-->>A: sealedSecretValue (base64)
        alt Create
            A->>B: POST /v1/secrets {secretKey, keypairId, sealedSecretValue}
        else Update
            A->>B: PATCH /v1/secrets/{id} {keypairId, sealedSecretValue}
        end
        B-->>A: Secret metadata
        A-->>C: Secret object
        C-->>U: JSON output
        C->>C: Zeroize Uint8Array buffer
    end

    Note over U,F: Function Secret Attachment Flow
    
    alt Attach
        U->>C: functions secrets attach <functionId> <secretId>
        C->>A: attachFunctionSecret()
        A->>F: POST /v1/functions/{id}/secrets
        F-->>A: 204
        A-->>C: void
    else Detach
        U->>C: functions secrets detach <functionId> <secretId>
        C->>A: detachFunctionSecret()
        A->>F: DELETE /v1/functions/{id}/secrets/{secretId}
        F-->>A: 204
        A-->>C: void
    end

    Note over U,B: List/Get/Delete Metadata Flow (No Decryption)
    
    alt List project secrets
        U->>C: cloud secrets list [--limit --cursor --start-at --end-at]
        C->>A: listSecrets() with query params
        A->>B: GET /v1/secrets?{pagination}
        B-->>A: { data, limit, nextCursor }
        A-->>C: SecretPage
        C-->>U: JSON output
    else Get secret
        U->>C: cloud secrets get <secretId>
        C->>A: getSecret()
        A->>B: GET /v1/secrets/{id}
        B-->>A: { id, secretKey }
        A-->>C: Secret metadata
        C-->>U: JSON output
    else Delete secret
        U->>C: cloud secrets delete <secretId>
        C->>A: deleteSecret()
        A->>B: DELETE /v1/secrets/{id}
        B-->>A: 204
        A-->>C: void
    else List function secrets
        U->>C: functions secrets list <functionId> [--limit --cursor --start-at --end-at]
        C->>A: listFunctionSecrets()
        A->>F: GET /v1/functions/{id}/secrets?{pagination}
        F-->>A: { data, limit, nextCursor }
        A-->>C: SecretPage
        C-->>U: JSON output
    end

    Note over B: API Error Handling
    B-->>A: Error response (400/403/404/409)
    A-->>C: Throw error
    C-->>U: Non-zero exit + stderr message

Loading

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>