Skip to content

Secret.rotated

Emitted each time a Secret is rotated.

Secret.rotate emits Secret.rotated when it completes on a Secret.

PropertyValue
Emitted bySecret.rotate
NounSecret
WakesNone.

Payload

Each delivery is an Event record. data holds what Secret.rotate returns.

FieldTypeRequiredDescription
namestringrequiredSecret.rotated.
atdatetimerequiredWhen it happened.
seqintegerIts position in the namespace, one more than the Event before; any seq is a cursor into the history.
datajsonrequiredThe Thing as the Action left it.
data.secretSecretrequiredThe Secret, with its new rotatedAt.
data.secret.namestringrequiredThe name a Function declares, such as MAPS_KEY; list returns names only.
data.secret.environmentstringrequiredThe environment that holds this value; a Function deploys to live only when every declared Secret exists there.
data.secret.scopestringrequiredWhether the whole Startup or one Tenant holds it.
data.secret.rotatedAtdatetimeWhen the value last changed.

Example

JSON
{
  "$id": "https://api.sb/kilnbakery.com/events/event_1",
  "$type": "Event",
  "name": "Secret.rotated",
  "at": "2026-10-22T12:00:00Z",
  "data": {
    "secret": {
      "$id": "https://api.sb/kilnbakery.com/secrets/secret_1",
      "$type": "Secret",
      "name": "MAPS_KEY",
      "environment": "test",
      "scope": "startup",
      "rotatedAt": "2026-10-22T12:00:00Z"
    }
  },
  "seq": 1
}