supabase/apps/studio/data/vault/vault-secrets-query.ts

import { safeSql } from '@supabase/pg-meta'
import { Query } from '@supabase/pg-meta/src/query'
import { useQuery } from '@tanstack/react-query'

import { vaultSecretsKeys } from './keys'
import { executeSql, ExecuteSqlError } from '@/data/sql/execute-sql-query'
import type { UseCustomQueryOptions, VaultSecret } from '@/types'

export const getVaultSecretsSql = () => {
  const sql = new Query()
    .from('secrets', 'vault')
    .select(safeSql`id,name,description,secret,created_at,updated_at`)
    .toSql()

  return sql
}

export type VaultSecretsVariables = {
  projectRef?: string
  connectionString?: string | null
}

export async function getVaultSecrets(
  { projectRef, connectionString }: VaultSecretsVariables,
  signal?: AbortSignal
) {
  const sql = getVaultSecretsSql()

  const { result } = await executeSql(
    { projectRef, connectionString, sql, queryKey: ['vault-secrets'] },
    signal
  )

  return result as VaultSecret[]
}

export type VaultSecretsData = Awaited<ReturnType<typeof getVaultSecrets>>
export type VaultSecretsError = ExecuteSqlError

export const useVaultSecretsQuery = <TData = VaultSecretsData>(
  { projectRef, connectionString }: VaultSecretsVariables,
  {
    enabled = true,
    ...options
  }: UseCustomQueryOptions<VaultSecretsData, VaultSecretsError, TData> = {}
) =>
  useQuery<VaultSecretsData, VaultSecretsError, TData>({
    queryKey: vaultSecretsKeys.list(projectRef),
    queryFn: ({ signal }) => getVaultSecrets({ projectRef, connectionString }, signal),
    enabled: enabled && typeof projectRef !== 'undefined',
    ...options,
  })