feat(server): support duckb's CREATE SECRET

Author: tekumara

fakesnow/cursor.py

@@ -43,6 +43,7 @@
 SQL_SUCCESS = "SELECT 'Statement executed successfully.' as 'status'"
 SQL_CREATED_DATABASE = Template("SELECT 'Database ${name} successfully created.' as 'status'")
 SQL_CREATED_SCHEMA = Template("SELECT 'Schema ${name} successfully created.' as 'status'")
+SQL_CREATED_SECRET = Template("SELECT 'Secret ${name} successfully created.' as 'status'")
 SQL_CREATED_TABLE = Template("SELECT 'Table ${name} successfully created.' as 'status'")
 SQL_CREATED_VIEW = Template("SELECT 'View ${name} successfully created.' as 'status'")
 SQL_CREATED_STAGE = Template("SELECT 'Stage area ${name} successfully created.' as status")
@@ -410,6 +411,15 @@ def _execute(self, transformed: exp.Expression, params: MutableParams | None = N
 
                 elif cmd == "DROP SCHEMA" and ident == self._conn.schema:
                     self._conn._schema = None  # noqa: SLF001
+        elif (
+            cmd == "CREATE"
+            and isinstance(transformed, exp.Command)
+            and isinstance(transformed.expression, str)
+            and transformed.expression.upper().startswith(" SECRET")
+        ):
+            match = re.search(r"SECRET\s+(\w+)\s*\(", transformed.expression, re.IGNORECASE)
+            secret_name = match[1].upper() if match else "UNKNOWN"
+            result_sql = SQL_CREATED_SECRET.substitute(name=secret_name)
 
         if table_comment := cast(tuple[exp.Table, str], transformed.args.get("table_comment")):
             # record table comment

tests/test_copy_into.py

@@ -304,6 +304,19 @@ def test_copy_no_files(dcur: snowflake.connector.cursor.DictCursor, s3_client: S
     assert dcur.fetchall() == [{"status": "Copy executed with 0 files processed."}]
 
 
+def test_description_create_secret(dcur: snowflake.connector.cursor.DictCursor):
+    # NB: this is NOT a Snowflake object, it's a DuckDB secret, and will fail on Snowflake
+    # but we want to ensure that the description works so that CREATE SECRET works from the server
+    dcur.execute("""
+        CREATE SECRET my_secret (
+            TYPE s3,
+            KEY_ID 'my_secret_key',
+            SECRET 'my_secret_value'
+        )""")
+    assert dcur.fetchall() == [{"status": "Secret MY_SECRET successfully created."}]
+    assert dcur.description
+
+
 def test_errors(dcur: snowflake.connector.cursor.DictCursor, s3_client: S3Client) -> None:
     create_table(dcur)