SecretService
class SecretService()Project secret namespace.
SecretService.__init__
def __init__(impl: AsyncSecretService, bridge: SyncBridge) -> NoneSecretService.delete
def delete(name: str) -> NoneDelete a secret.
SecretService.get
def get(name: str) -> SecretMetaFetch one secret's metadata (never its value).
SecretService.iter
def iter(*,
cursor: Optional[str] = None,
limit: Optional[int] = None) -> Iterator[SecretDto]SecretService.list
def list(*,
cursor: Optional[str] = None,
limit: Optional[int] = None) -> ListResult[SecretDto]List secret metadata.
SecretService.set
def set(name: str,
value: str,
*,
allowed_domains: Sequence[str],
description: Optional[str] = None,
if_not_exists: bool = False) -> SecretMetaCreate or update a write-only secret.
AsyncSecretService
class AsyncSecretService()Project secret namespace.
Project-scoped secrets (PLAN-SECRETS.md): named key/value pairs stored
encrypted in the project. Attach one or more to a sandbox at creation via
the secrets create parameter (a list of names); the sandbox receives an
opaque per-VM PLACEHOLDER as an environment variable, and the platform's
egress proxy substitutes the real value into outbound HTTPS requests (a
plain http:// request carries the placeholder unchanged). The real
value NEVER enters the sandbox and is never returned by the API
(write-only).
AsyncSecretService.__init__
def __init__(transport: AsyncTransport) -> NoneAsyncSecretService.list
async def list(*,
cursor: Optional[str] = None,
limit: Optional[int] = None) -> ListResult[SecretDto]List secret metadata.
AsyncSecretService.iter
async def iter(*,
cursor: Optional[str] = None,
limit: Optional[int] = None) -> AsyncIterator[SecretDto]AsyncSecretService.get
async def get(name: str) -> SecretMetaFetch one secret's metadata (never its value).
AsyncSecretService.set
async def set(name: str,
value: str,
*,
allowed_domains: Sequence[str],
description: Optional[str] = None,
if_not_exists: bool = False) -> SecretMetaCreate or update a write-only secret.
allowed_domains: The hosts where this secret's value may be sent
(exact or *. wildcard), or ["*"] for any verified host.
"*" lets the value reach any HTTPS host, including one a
compromised sandbox controls.
AsyncSecretService.delete
async def delete(name: str) -> NoneDelete a secret.
SecretDto
SecretDto = _gen.api.SecretSecretMeta
SecretMeta = _gen.api.Secret