feat(api): add source metadata for env var imports

Add an optional discriminated `source` field to the import request schema
to capture whether variables are imported by a user or an integration and to
include the corresponding identifier (userId or integration). Propagate this
source into the database payloads (`lastUpdatedBy`) when creating or
syncing environment variables so the system records who/what initiated the
import.

Author: 0ski

apps/webapp/app/routes/api.v1.projects.$projectRef.envvars.$slug.import.ts

@@ -47,6 +47,7 @@ export async function action({ params, request }: ActionFunctionArgs) {
       key,
       value,
     })),
+    lastUpdatedBy: body.source,
   });
 
   // Only sync parent variables if this is a branch environment
@@ -58,6 +59,7 @@ export async function action({ params, request }: ActionFunctionArgs) {
         key,
         value,
       })),
+      lastUpdatedBy: body.source,
     });
 
     let childFailure = !result.success ? result : undefined;

packages/core/src/v3/schemas/api.ts

@@ -1152,6 +1152,12 @@ export const ImportEnvironmentVariablesRequestBody = z.object({
   variables: z.record(z.string()),
   parentVariables: z.record(z.string()).optional(),
   override: z.boolean().optional(),
+  source: z
+    .discriminatedUnion("type", [
+      z.object({ type: z.literal("user"), userId: z.string() }),
+      z.object({ type: z.literal("integration"), integration: z.string() }),
+    ])
+    .optional(),
 });
 
 export type ImportEnvironmentVariablesRequestBody = z.infer<