feat: add SecretsConfig proto for encrypted env vars

apps/dashboard/gen/proto/ctrl/v1/secrets_pb.ts

@@ -0,0 +1,39 @@
+// @generated by protoc-gen-es v2.8.0 with parameter "target=ts"
+// @generated from file ctrl/v1/secrets.proto (package ctrl.v1, syntax proto3)
+/* eslint-disable */
+
+import type { Message } from "@bufbuild/protobuf";
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
+
+/**
+ * Describes the file ctrl/v1/secrets.proto.
+ */
+export const file_ctrl_v1_secrets: GenFile =
+  /*@__PURE__*/
+  fileDesc(
+    "ChVjdHJsL3YxL3NlY3JldHMucHJvdG8SB2N0cmwudjEidQoNU2VjcmV0c0NvbmZpZxI0CgdzZWNyZXRzGAEgAygLMiMuY3RybC52MS5TZWNyZXRzQ29uZmlnLlNlY3JldHNFbnRyeRouCgxTZWNyZXRzRW50cnkSCwoDa2V5GAEgASgJEg0KBXZhbHVlGAIgASgJOgI4AUKOAQoLY29tLmN0cmwudjFCDFNlY3JldHNQcm90b1ABWjRnaXRodWIuY29tL3Vua2V5ZWQvdW5rZXkvZ28vZ2VuL3Byb3RvL2N0cmwvdjE7Y3RybHYxogIDQ1hYqgIHQ3RybC5WMcoCB0N0cmxcVjHiAhNDdHJsXFYxXEdQQk1ldGFkYXRh6gIIQ3RybDo6VjFiBnByb3RvMw",
+  );
+
+/**
+ * SecretsConfig is stored in the deployments table
+ * Contains encrypted environment variables snapshotted at deploy time
+ *
+ * @generated from message ctrl.v1.SecretsConfig
+ */
+export type SecretsConfig = Message<"ctrl.v1.SecretsConfig"> & {
+  /**
+   * key -> encrypted value
+   *
+   * @generated from field: map<string, string> secrets = 1;
+   */
+  secrets: { [key: string]: string };
+};
+
+/**
+ * Describes the message ctrl.v1.SecretsConfig.
+ * Use `create(SecretsConfigSchema)` to create a new message.
+ */
+export const SecretsConfigSchema: GenMessage<SecretsConfig> =
+  /*@__PURE__*/
+  messageDesc(file_ctrl_v1_secrets, 0);

go/proto/ctrl/v1/secrets.proto

@@ -0,0 +1,11 @@
+syntax = "proto3";
+package ctrl.v1;
+
+option go_package = "github.com/unkeyed/unkey/go/gen/proto/ctrl/v1;ctrlv1";
+
+// SecretsConfig is stored in the deployments table
+// Contains encrypted environment variables snapshotted at deploy time
+message SecretsConfig {
+  // key -> encrypted value
+  map<string, string> secrets = 1;
+}