feat: add ability to attach source to an environment (#809)

Allows attaching environments to sources for all callers.

This introduces the distinction between a System Environment and User
Configuration to the system. These names might be stupid but they
attempt to get around the idea that Headers are more of an
implementation detail and the rules associated with how you merge these
things should be derived from their provenance rather than how they were
supplied.

We make some decisions. First off, we complect the call sites of tool
proxies by placing the onus of loading on them. This was more or less in
the name of purity of the tools proxy. But might be a mistake because it
forces the onus of reading system environments to a bunch of places in
our code base. It's possible it's a little bug-prone to do this nonsense
in a bunch of places.

The other decision, which I feel a little better about is to provide
both environments to each tool type and leave the responsibility of
merging them at the call site. Even though we aim for consistent
behavior (ie. preferring user config over system environment), leaving
the flexibility on how to merge each tool type seems healthy.

## UX

A dialog attached to source cards. Not good.

Affordance to access functionality is currently buried behind:

<img width="720" height="391" alt="image"
src="https://github.com/user-attachments/assets/fce5cd45-7b45-4485-a26a-346c44e817a5"
/>

The interface for attaching an environment is implemented in this modal:

<img width="779" height="356" alt="image"
src="https://github.com/user-attachments/assets/89de283e-d412-44a8-b15b-276002762419"
/>

* We use a combobox
* We try to preview what variables will be set to make more mistakes
more obvious
* Currently pretty ugly, but banking on the UX moving to a new location
shortly before I figure out a good hierarchy for presenting. Happy to
knock any quick fixes to make this present better if people feel
strongly

## Things to pay Attention To

* Moved sources components to new directory, but also changed the modal
paradigm (separate content components, used `zustand` for state
management)
* I ported all of the `Dialog`s and Dropdown Menu's to the moonshine
versions of those components. I couldn't visually tell the difference
and there were some really nasty interplay issues. Hoping this is a nice
stability move

## Considerations

* Might consider adding a confirmation button considering this action is
a pretty serious one
* UX is quite ugly at the moment. Preferring to follow up with a
dedicated sources page instead of burying behind a dialog
* Blocked on this moonshine PR:
speakeasy-api/moonshine#319

Author: qstearns

.changeset/mighty-sheep-sip.md

@@ -0,0 +1,6 @@
+---
+"dashboard": minor
+"server": minor
+---
+
+Adds the ability to attach an environment to a source such that all tool calls originating from that source will have those environment variables apply

.mise-tasks/infra/stop.sh

@@ -3,4 +3,4 @@
 
 set -e
 
-docker compose --profile "*" down --remove-orphans
+docker compose --profile "*" down --remove-orphans

.speakeasy/out.openapi.yaml

@@ -3002,6 +3002,220 @@ paths:
       x-speakeasy-name-override: deleteBySlug
       x-speakeasy-react-hook:
         name: DeleteEnvironment
+  /rpc/environments.deleteSourceLink:
+    delete:
+      description: Delete a link between a source and an environment
+      operationId: deleteSourceEnvironmentLink
+      parameters:
+        - allowEmptyValue: true
+          description: The kind of source (http or function)
+          in: query
+          name: source_kind
+          required: true
+          schema:
+            description: The kind of source that can be linked to an environment
+            enum:
+              - http
+              - function
+            type: string
+        - allowEmptyValue: true
+          description: The slug of the source
+          in: query
+          name: source_slug
+          required: true
+          schema:
+            description: The slug of the source
+            type: string
+        - allowEmptyValue: true
+          description: Session header
+          in: header
+          name: Gram-Session
+          schema:
+            description: Session header
+            type: string
+        - allowEmptyValue: true
+          description: project header
+          in: header
+          name: Gram-Project
+          schema:
+            description: project header
+            type: string
+      responses:
+        "200":
+          description: OK response.
+        "400":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'bad_request: request is invalid'
+        "401":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unauthorized: unauthorized access'
+        "403":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'forbidden: permission denied'
+        "404":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'not_found: resource not found'
+        "409":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'conflict: resource already exists'
+        "415":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unsupported_media: unsupported media type'
+        "422":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'invalid: request contains one or more invalidation fields'
+        "500":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unexpected: an unexpected error occurred'
+        "502":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'gateway_error: an unexpected error occurred'
+      security:
+        - project_slug_header_Gram-Project: []
+          session_header_Gram-Session: []
+        - {}
+      summary: deleteSourceEnvironmentLink environments
+      tags:
+        - environments
+      x-speakeasy-name-override: deleteSourceLink
+      x-speakeasy-react-hook:
+        name: DeleteSourceEnvironmentLink
+  /rpc/environments.getSourceEnvironment:
+    get:
+      description: Get the environment linked to a source
+      operationId: getSourceEnvironment
+      parameters:
+        - allowEmptyValue: true
+          description: The kind of source (http or function)
+          in: query
+          name: source_kind
+          required: true
+          schema:
+            description: The kind of source that can be linked to an environment
+            enum:
+              - http
+              - function
+            type: string
+        - allowEmptyValue: true
+          description: The slug of the source
+          in: query
+          name: source_slug
+          required: true
+          schema:
+            description: The slug of the source
+            type: string
+        - allowEmptyValue: true
+          description: Session header
+          in: header
+          name: Gram-Session
+          schema:
+            description: Session header
+            type: string
+        - allowEmptyValue: true
+          description: project header
+          in: header
+          name: Gram-Project
+          schema:
+            description: project header
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Environment'
+          description: OK response.
+        "400":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'bad_request: request is invalid'
+        "401":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unauthorized: unauthorized access'
+        "403":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'forbidden: permission denied'
+        "404":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'not_found: resource not found'
+        "409":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'conflict: resource already exists'
+        "415":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unsupported_media: unsupported media type'
+        "422":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'invalid: request contains one or more invalidation fields'
+        "500":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unexpected: an unexpected error occurred'
+        "502":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'gateway_error: an unexpected error occurred'
+      security:
+        - project_slug_header_Gram-Project: []
+          session_header_Gram-Session: []
+        - {}
+      summary: getSourceEnvironment environments
+      tags:
+        - environments
+      x-speakeasy-name-override: getBySource
+      x-speakeasy-react-hook:
+        name: GetSourceEnvironment
   /rpc/environments.list:
     get:
       description: List all environments for an organization
@@ -3092,6 +3306,102 @@ paths:
       x-speakeasy-name-override: list
       x-speakeasy-react-hook:
         name: ListEnvironments
+  /rpc/environments.setSourceLink:
+    put:
+      description: Set (upsert) a link between a source and an environment
+      operationId: setSourceEnvironmentLink
+      parameters:
+        - allowEmptyValue: true
+          description: Session header
+          in: header
+          name: Gram-Session
+          schema:
+            description: Session header
+            type: string
+        - allowEmptyValue: true
+          description: project header
+          in: header
+          name: Gram-Project
+          schema:
+            description: project header
+            type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/SetSourceEnvironmentLinkRequestBody'
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/SourceEnvironmentLink'
+          description: OK response.
+        "400":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'bad_request: request is invalid'
+        "401":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unauthorized: unauthorized access'
+        "403":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'forbidden: permission denied'
+        "404":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'not_found: resource not found'
+        "409":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'conflict: resource already exists'
+        "415":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unsupported_media: unsupported media type'
+        "422":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'invalid: request contains one or more invalidation fields'
+        "500":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'unexpected: an unexpected error occurred'
+        "502":
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error'
+          description: 'gateway_error: an unexpected error occurred'
+      security:
+        - project_slug_header_Gram-Project: []
+          session_header_Gram-Session: []
+        - {}
+      summary: setSourceEnvironmentLink environments
+      tags:
+        - environments
+      x-speakeasy-name-override: setSourceLink
+      x-speakeasy-react-hook:
+        name: SetSourceEnvironmentLink
   /rpc/environments.update:
     post:
       description: Update an environment
@@ -11115,6 +11425,52 @@ components:
           $ref: '#/components/schemas/Project'
       required:
         - project
+    SetSourceEnvironmentLinkRequestBody:
+      type: object
+      properties:
+        environment_id:
+          type: string
+          description: The ID of the environment to link
+          format: uuid
+        source_kind:
+          type: string
+          description: The kind of source (http or function)
+          enum:
+            - http
+            - function
+        source_slug:
+          type: string
+          description: The slug of the source
+      required:
+        - source_kind
+        - source_slug
+        - environment_id
+    SourceEnvironmentLink:
+      type: object
+      properties:
+        environment_id:
+          type: string
+          description: The ID of the environment
+          format: uuid
+        id:
+          type: string
+          description: The ID of the source environment link
+          format: uuid
+        source_kind:
+          type: string
+          description: The kind of source that can be linked to an environment
+          enum:
+            - http
+            - function
+        source_slug:
+          type: string
+          description: The slug of the source
+      description: A link between a source and an environment
+      required:
+        - id
+        - source_kind
+        - source_slug
+        - environment_id
     TierLimits:
       type: object
       properties: