AGX CLI nits: functions:update-function hint, functions:set-secret shortcut

[etbyrd]

Summary

Two CLI ergonomic findings from the email-summarizer AGX run, both in one PR.

1. functions:redeploy discoverability

The AGX agent reached for the auto-generated functions:update-function command for redeploys, missed functions:redeploy --file entirely, and ended up hand-rolling a JSON wrapper with the bundle as a string. Added an OPERATION_HINTS map keyed by sdkName in api-command.ts, appended to operation descriptions in createOperationCommand. Hints point users from functions:update-function, functions:create-function, functions:set-function-secret, and functions:create-function-secret to the file-input / convenience wrappers.

2. functions:set-secret with optional --redeploy

New hand-rolled command at sdk-node/src/oclif/commands/functions-set-secret.ts. Flags: --id, --key, --value, --redeploy. With --redeploy, after the secret upsert succeeds, the command calls getFunction then updateFunction with the same code to roll the binding into the running handler in one shell invocation. Pure runSetSecret(api, params) is exported for testing. Stage-tagged discriminated-union result lets the CLI frame errors as 'secret landed, deploy did not' when only the redeploy fails. Registered as functions:set-secret in src/oclif/index.ts. Topic description in package.json updated to mention it.

Test plan

• make node-check (vitest 666 tests pass, biome lint clean, tsc --noEmit clean)
• make node-check-generated (exit 0)
• live --help smoke tests confirming hints render on the four generated commands and functions:set-secret --help documents the new flags

Paired

• mono-repo PR #499: trim PUT response code, full webhook delivery body. The new getDelivery operation will want an SDK regeneration follow-up after the openapi spec catches up.

[greptile-apps]

Greptile Summary

This PR adds two CLI ergonomic improvements to the functions command group: discoverability hints on four generated commands (via OPERATION_HINTS in api-command.ts) and a new functions:set-secret hand-rolled command that wraps the secret-upsert + optional redeploy into a single invocation.

• OPERATION_HINTS appends a "prefer this shortcut" tip to the --help description of functions:create-function, functions:update-function, functions:create-function-secret, and functions:set-function-secret, steering agents and users toward the file-input ergonomics.
• functions:set-secret wraps setFunctionSecret + an optional getFunction/updateFunction redeploy cycle, with a discriminated-union result type that lets the CLI distinguish "secret landed, deploy did not" at the error-message layer. The source-map caveat for --redeploy is documented in both the code comments and the flag description.
• Test coverage is thorough: all error stages (set-secret, get-function, redeploy) and empty-data 2xx edge cases are exercised against a fake SetSecretApiSurface, and the OPERATION_HINTS contents are pinned by tests to guard against silent renames.

Confidence Score: 5/5

Safe to merge — the changes are additive, well-tested, and the new --redeploy path correctly uses the required code field from FunctionDetail.

All changed code paths are covered by unit tests. FunctionDetail.code is a required string in the generated type, so the redeploy step has no null/undefined risk. The discriminated-union result and stage-specific stderr messages handle partial-failure cases cleanly. No existing behavior is modified — the OPERATION_HINTS insertion is purely additive to --help output.

No files require special attention.

Important Files Changed

Filename	Overview
sdk-node/src/oclif/commands/functions-set-secret.ts	New hand-rolled command implementing the functions:set-secret shortcut with optional --redeploy; discriminated-union result type, stage-specific stderr hints, and source-map caveat are all well-handled.
sdk-node/src/oclif/api-command.ts	Adds OPERATION_HINTS map and appends matching hint to the --help description in createOperationCommand; change is minimal and isolated to description rendering.
sdk-node/tests/oclif/functions-set-secret.test.ts	Comprehensive unit tests cover the happy path, each error stage (set-secret, get-function, redeploy), and empty-data 2xx edge cases using a fake SetSecretApiSurface.
sdk-node/tests/oclif/api-command.test.ts	Adds tests that pin OPERATION_HINTS contents to known shortcut commands and verify hint injection/omission in createOperationCommand description output.
sdk-node/src/oclif/index.ts	Registers functions:set-secret in the COMMANDS map alongside the existing functions:deploy / functions:redeploy shortcuts.
sdk-node/package.json	Updates the functions oclif topic description to reference the new functions:set-secret shortcut and functions:redeploy.

_{Reviews (2): Last reviewed commit: "Document source-map drop on functions:se..." | Re-trigger Greptile}