Skip to content

Secret.revoked

Emitted each time a Secret is revoked.

Secret.revoke emits Secret.revoked when it completes on a Secret.

PropertyValue
Emitted bySecret.revoke
NounSecret
WakesNone.

Payload

Each delivery is an Event record. data holds what Secret.revoke returns.

FieldTypeRequiredDescription
namestringrequiredSecret.revoked.
atdatetimerequiredWhen it happened.
seqintegerIts position in the namespace, one more than the Event before; any seq is a cursor into the history.
datajsonrequiredThe Thing as the Action left it.
data.secretSecretrequiredThe revoked Secret.
data.secret.namestringrequiredThe name a Function declares, such as MAPS_KEY; list returns names only.
data.secret.environmentstringrequiredThe environment that holds this value; a Function deploys to live only when every declared Secret exists there.
data.secret.scopestringrequiredWhether the whole Startup or one Tenant holds it.
data.secret.rotatedAtdatetimeWhen the value last changed.

Example

JSON
{
  "$id": "https://api.sb/kilnbakery.com/events/event_1",
  "$type": "Event",
  "name": "Secret.revoked",
  "at": "2026-10-22T12:00:00Z",
  "data": {
    "secret": {
      "$id": "https://api.sb/kilnbakery.com/secrets/secret_1",
      "$type": "Secret",
      "name": "MAPS_KEY",
      "environment": "test",
      "scope": "startup",
      "rotatedAt": "2026-10-22T12:00:00Z"
    }
  },
  "seq": 1
}