Doppler for env, agent-friendly 'tron <url>', copyright footer

- Doppler CLI manages secrets (project tronbrowser); doppler.yaml scopes the repo
  to dev; Turso DB secrets loaded into Doppler dev+prd; README/.env.example note
  Doppler as source of truth (cloud AI keys stay in DB)
- tron CLI: agent-friendly 'tron <url>' / 'tron open <url>' to open URLs
- homepage: '© 2026 Profullstack, Inc. · MIT License' footer + tron <url> copy

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: ralyodio

.env.example

@@ -1,4 +1,7 @@
-# Copy to .env and fill in. .env is gitignored.
+# Secrets are managed with Doppler (project: tronbrowser). Prefer:
+#   doppler run -- pnpm <script>
+# This file documents the variables and is a fallback for local .env use
+# (copy to .env and fill in; .env is gitignored). Doppler is the source of truth.
 #
 # --- Storage ---------------------------------------------------------------
 # Option A: managed cloud database (Turso) — has managed backups.

README.md

@@ -30,6 +30,22 @@ pnpm test
 pnpm build
 ```
 
+## Secrets / env (Doppler)
+
+Secrets are managed with the [Doppler](https://doppler.com) CLI (project
+`tronbrowser`, config `dev`). After `doppler login`, the repo is already scoped
+via [`doppler.yaml`](doppler.yaml) — run anything that needs env through Doppler:
+
+```bash
+doppler setup            # one-time, reads doppler.yaml
+doppler run -- pnpm test
+doppler run -- node apps/...   # injects TRONBROWSER_DB_URL, _AUTH_TOKEN, …
+```
+
+[`.env.example`](.env.example) documents every variable; a local `.env`
+(gitignored) still works as a fallback, but Doppler is the source of truth.
+Cloud AI provider keys live in the DB (`ai_provider_keys`), not in env.
+
 ## Milestones
 
 | Milestone | Scope |

apps/web/public/index.html

@@ -39,6 +39,7 @@
     border-radius: 10px; padding: 14px 16px; }
   .principles b { color: var(--cyan); }
   footer { text-align: center; margin-top: 56px; color: var(--muted); }
+  .copyright { margin-top: 14px; font-size: 13px; color: var(--muted); opacity: .8; }
   a { color: var(--cyan); }
 </style>
 </head>
@@ -56,8 +57,8 @@
       <button onclick="copyCmd()">copy</button>
     </div>
     <div class="sub">
-      Then use the <code>tron</code> CLI:<br />
-      <code>tron</code> to launch &nbsp;·&nbsp;
+      Then use the agent-friendly <code>tron</code> CLI:<br />
+      <code>tron &lt;url&gt;</code> to open a URL &nbsp;·&nbsp;
       <code>tron upgrade</code> &nbsp;·&nbsp;
       <code>tron remove</code> &nbsp;·&nbsp;
       <code>tron version</code>
@@ -78,6 +79,7 @@
   <footer>
     <a href="https://github.com/profullstack/tronbrowser.dev">GitHub</a> ·
     <a href="https://github.com/profullstack/tronbrowser.dev/blob/main/docs/tronbrowser-prd.md">PRD</a>
+    <div class="copyright">© 2026 Profullstack, Inc. · MIT License</div>
   </footer>
 </div>
 <script>

apps/web/public/install.sh

@@ -70,15 +70,26 @@ usage() {
 tron — TronBrowser CLI
 
 Usage:
-  tron [url...]     Launch TronBrowser (optionally opening URLs)
-  tron upgrade      Update to the latest release
-  tron remove       Uninstall TronBrowser (keeps your profile data)
-  tron version      Print the installed version
-  tron help         Show this help
+  tron <url> [url...]   Open URL(s) in TronBrowser (agent-friendly)
+  tron open <url>       Same as above, explicit
+  tron                  Launch TronBrowser
+  tron upgrade          Update to the latest release
+  tron remove           Uninstall TronBrowser (keeps your profile data)
+  tron version          Print the installed version
+  tron help             Show this help
 USAGE
 }
 
+launch() {
+  [ -x "$CURRENT" ] || { echo "TronBrowser is not installed. Run: curl -fsSL $INSTALL_URL | sh" >&2; exit 1; }
+  exec "$CURRENT" "$@"
+}
+
 case "${1:-}" in
+  open)
+    shift
+    [ "$#" -gt 0 ] || { echo "usage: tron open <url>" >&2; exit 2; }
+    launch "$@" ;;
   upgrade|update)
     exec sh -c "curl -fsSL '$INSTALL_URL' | sh -s -- upgrade" ;;
   remove|uninstall)
@@ -90,8 +101,8 @@ case "${1:-}" in
   help|--help|-h)
     usage ;;
   *)
-    [ -x "$CURRENT" ] || { echo "TronBrowser is not installed. Run: curl -fsSL $INSTALL_URL | sh" >&2; exit 1; }
-    exec "$CURRENT" "$@" ;;
+    # Bare `tron` launches; `tron <url> [url...]` opens URLs (passthrough).
+    launch "$@" ;;
 esac
 TRON
   chmod +x "$TRON_CLI"

doppler.yaml

@@ -0,0 +1,3 @@
+setup:
+  project: tronbrowser
+  config: dev