@circuitwall/jarela 2.2.0 → 2.3.0

package/.next/standalone/.next/server/app/api/v1/env-sync/allowlist/route.js

@@ -110,395 +110,107 @@ module.exports = require("path");
 
 /***/ }),
 
-/***/ 37067:
-/***/ ((module) => {
-
-module.exports = require("node:http");
-
-/***/ }),
-
-/***/ 38522:
-/***/ ((module) => {
-
-module.exports = require("node:zlib");
-
-/***/ }),
-
-/***/ 39947:
+/***/ 34705:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
+__webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Bm: () => (/* binding */ cachedJson),
-/* harmony export */   HN: () => (/* binding */ notFoundResponse),
-/* harmony export */   Jb: () => (/* binding */ validateBody),
-/* harmony export */   K2: () => (/* binding */ createdResponse),
-/* harmony export */   Ng: () => (/* binding */ noStoreJson),
-/* harmony export */   yj: () => (/* binding */ errorResponse)
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
 /* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-// Shared HTTP response builders for app/api/v1/** route handlers.
-//
-// Goal: every error/success payload across the v1 surface has the same
-// shape. Before this lived inline, response bodies drifted —
-// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
-// some routes returned Zod's raw issue array, others stringified it.
-
-function errorResponse(message, status = 400) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        error: message
-    }, {
-        status
-    });
-}
-function notFoundResponse(message = "Not found") {
-    return errorResponse(message, 404);
-}
-function createdResponse(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        status: 201
-    });
-}
-// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
-// GET endpoints that serve user-scoped data the client refetches often (panel
-// mounts, navigation back/forward) but mutates rarely. The TTL is short
-// enough that explicit mutations — which patch the client-side ApiClient
-// cache in place — stay observably consistent without an extra roundtrip.
-//
-// swrSeconds (optional): stale-while-revalidate window. When set, the browser
-// serves the cached response immediately and refreshes in the background,
-// making navigation feel instant. Use for data that can tolerate brief
-// staleness (tool list, agent configs, model list). Omit for real-time data
-// (dashboard metrics, credential state).
-function cachedJson(data, maxAgeSeconds, swrSeconds) {
-    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
-        }
-    });
-}
-// Use for endpoints whose response contains live state that must never be
-// served from cache — credentials, connection status, live config values.
-function noStoreJson(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": "no-store"
-        }
-    });
-}
-// Validate a JSON request body against a zod schema.
-// Returns either the parsed data or a 400 NextResponse explaining the issue.
-// Caller pattern:
-//   const parsed = await validateBody(req, Schema);
-//   if (parsed instanceof NextResponse) return parsed;
-//   // use parsed.field
-async function validateBody(req, schema) {
-    let raw;
-    try {
-        raw = await req.json();
-    } catch  {
-        return errorResponse("Request body must be valid JSON", 400);
-    }
-    const parsed = schema.safeParse(raw);
-    if (!parsed.success) {
-        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
-    }
-    return parsed.data;
-}
-
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
-/***/ }),
-
-/***/ 55511:
-/***/ ((module) => {
-
-module.exports = require("crypto");
-
-/***/ }),
-
-/***/ 55591:
-/***/ ((module) => {
-
-module.exports = require("https");
-
-/***/ }),
-
-/***/ 57075:
-/***/ ((module) => {
-
-module.exports = require("node:stream");
-
-/***/ }),
-
-/***/ 57975:
-/***/ ((module) => {
-
-module.exports = require("node:util");
-
-/***/ }),
-
-/***/ 63033:
-/***/ ((module) => {
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
 
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
 
-/***/ }),
 
-/***/ 73024:
-/***/ ((module) => {
 
-module.exports = require("node:fs");
 
-/***/ }),
 
-/***/ 75919:
-/***/ ((module) => {
 
-module.exports = require("node:worker_threads");
 
-/***/ }),
 
-/***/ 76760:
-/***/ ((module) => {
 
-module.exports = require("node:path");
 
-/***/ }),
 
-/***/ 77598:
-/***/ ((module) => {
 
-module.exports = require("node:crypto");
 
-/***/ }),
 
-/***/ 79428:
-/***/ ((module) => {
 
-module.exports = require("buffer");
 
-/***/ }),
 
-/***/ 80099:
-/***/ ((module) => {
-
-module.exports = require("node:sqlite");
-
-/***/ }),
-
-/***/ 80481:
-/***/ ((module) => {
-
-module.exports = require("node:readline");
-
-/***/ }),
-
-/***/ 81496:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   GET: () => (/* binding */ GET),
-/* harmony export */   PUT: () => (/* binding */ PUT)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
-/* harmony import */ var _lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(23593);
-/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
-// Allowlist API for env-sync overrides.
-//
-// GET  → defaults (code-owned ENV_ALLOWLIST) plus the user's stored
-//        per-(integration, field) env-var aliases.
-// PUT  → upsert one override row. Empty `envVars` removes it.
-//
-// Targets are constrained: integration + field must already exist in
-// INTEGRATIONS. Users can only add env-var name aliases for an existing
-// schema entry — see ADR-0034 for the rationale.
-
-
-
-
-const PutSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    integration: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1),
-    field: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1),
-    envVars: zod__WEBPACK_IMPORTED_MODULE_3__/* .array */ .YOg(zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP())
-});
-function snapshot() {
-    return {
-        defaults: _lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .ENV_ALLOWLIST */ .yD.map((m)=>({
-                envVars: [
-                    ...m.envVars
-                ],
-                integration: m.integration,
-                field: m.field
-            })),
-        overrides: (0,_lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .listOverrides */ .ON)()
-    };
-}
-function GET() {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(snapshot());
-}
-async function PUT(req) {
-    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PutSchema);
-    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
-    const { integration, field, envVars } = parsed;
-    const result = (0,_lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .setOverride */ .nU)(integration, field, envVars);
-    if (!result.ok) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: result.error
-        }, {
-            status: 400
-        });
-    }
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(snapshot());
-}
-
-
-/***/ }),
-
-/***/ 81630:
-/***/ ((module) => {
-
-module.exports = require("http");
-
-/***/ }),
-
-/***/ 86439:
-/***/ ((module) => {
-
-module.exports = require("next/dist/shared/lib/no-fallback-error.external");
-
-/***/ }),
-
-/***/ 93339:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-// We inject the nextConfigOutput here so that we can use them in the route
-// module.
-const nextConfigOutput = "standalone"
-const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
-    definition: {
-        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-        page: "/api/v1/env-sync/allowlist/route",
-        pathname: "/api/v1/env-sync/allowlist",
-        filename: "route",
-        bundlePath: "app/api/v1/env-sync/allowlist/route"
-    },
-    distDir: ".next" || 0,
-    relativeProjectDir:  false || '',
-    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/env-sync/allowlist/route.ts",
-    nextConfigOutput,
-    // The lazy require factory ensures that:
-    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
-    //   correctly attributing module load time to application-code rather than
-    //   framework internals.
-    // - In all modes: async modules (route files with top-level await) are
-    //   handled correctly — require() returns a Promise for such modules, which
-    //   ensureUserland() awaits before the first request is handled.
-    userland: ()=>__webpack_require__(81496),
-    // In Turbopack dev mode, also provide a synchronous per-request getter so
-    // server HMR updates are picked up without re-executing the entry chunk.
-    // Using require() (synchronous) avoids adding async overhead that would be
-    // incorrectly attributed to application-code time in devRequestTiming.
-    ... false ? 0 : {}
-});
-// Pull out the exports that we need to expose from the module. This should
-// be eliminated when we've moved the other routes to the new format. These
-// are used to hook into the route.
-const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
-function patchFetch() {
-    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
-        workAsyncStorage,
-        workUnitAsyncStorage
-    });
-}
+// We inject the nextConfigOutput here so that we can use them in the route
+// module.
+const nextConfigOutput = "standalone"
+const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
+    definition: {
+        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+        page: "/api/v1/env-sync/allowlist/route",
+        pathname: "/api/v1/env-sync/allowlist",
+        filename: "route",
+        bundlePath: "app/api/v1/env-sync/allowlist/route"
+    },
+    distDir: ".next" || 0,
+    relativeProjectDir:  false || '',
+    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/env-sync/allowlist/route.ts",
+    nextConfigOutput,
+    // The lazy require factory ensures that:
+    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
+    //   correctly attributing module load time to application-code rather than
+    //   framework internals.
+    // - In all modes: async modules (route files with top-level await) are
+    //   handled correctly — require() returns a Promise for such modules, which
+    //   ensureUserland() awaits before the first request is handled.
+    userland: ()=>__webpack_require__(81496),
+    // In Turbopack dev mode, also provide a synchronous per-request getter so
+    // server HMR updates are picked up without re-executing the entry chunk.
+    // Using require() (synchronous) avoids adding async overhead that would be
+    // incorrectly attributed to application-code time in devRequestTiming.
+    ... false ? 0 : {}
+});
+// Pull out the exports that we need to expose from the module. This should
+// be eliminated when we've moved the other routes to the new format. These
+// are used to hook into the route.
+const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
+function patchFetch() {
+    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
+        workAsyncStorage,
+        workUnitAsyncStorage
+    });
+}
 
 async function handler(req, res, ctx) {
     if (ctx.requestMeta) {
@@ -840,6 +552,294 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
+/***/ }),
+
+/***/ 37067:
+/***/ ((module) => {
+
+module.exports = require("node:http");
+
+/***/ }),
+
+/***/ 38522:
+/***/ ((module) => {
+
+module.exports = require("node:zlib");
+
+/***/ }),
+
+/***/ 39947:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Bm: () => (/* binding */ cachedJson),
+/* harmony export */   HN: () => (/* binding */ notFoundResponse),
+/* harmony export */   Jb: () => (/* binding */ validateBody),
+/* harmony export */   K2: () => (/* binding */ createdResponse),
+/* harmony export */   Ng: () => (/* binding */ noStoreJson),
+/* harmony export */   yj: () => (/* binding */ errorResponse)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+// Shared HTTP response builders for app/api/v1/** route handlers.
+//
+// Goal: every error/success payload across the v1 surface has the same
+// shape. Before this lived inline, response bodies drifted —
+// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
+// some routes returned Zod's raw issue array, others stringified it.
+
+function errorResponse(message, status = 400) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        error: message
+    }, {
+        status
+    });
+}
+function notFoundResponse(message = "Not found") {
+    return errorResponse(message, 404);
+}
+function createdResponse(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        status: 201
+    });
+}
+// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
+// GET endpoints that serve user-scoped data the client refetches often (panel
+// mounts, navigation back/forward) but mutates rarely. The TTL is short
+// enough that explicit mutations — which patch the client-side ApiClient
+// cache in place — stay observably consistent without an extra roundtrip.
+//
+// swrSeconds (optional): stale-while-revalidate window. When set, the browser
+// serves the cached response immediately and refreshes in the background,
+// making navigation feel instant. Use for data that can tolerate brief
+// staleness (tool list, agent configs, model list). Omit for real-time data
+// (dashboard metrics, credential state).
+function cachedJson(data, maxAgeSeconds, swrSeconds) {
+    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
+        }
+    });
+}
+// Use for endpoints whose response contains live state that must never be
+// served from cache — credentials, connection status, live config values.
+function noStoreJson(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": "no-store"
+        }
+    });
+}
+// Validate a JSON request body against a zod schema.
+// Returns either the parsed data or a 400 NextResponse explaining the issue.
+// Caller pattern:
+//   const parsed = await validateBody(req, Schema);
+//   if (parsed instanceof NextResponse) return parsed;
+//   // use parsed.field
+async function validateBody(req, schema) {
+    let raw;
+    try {
+        raw = await req.json();
+    } catch  {
+        return errorResponse("Request body must be valid JSON", 400);
+    }
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
+    }
+    return parsed.data;
+}
+
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 55511:
+/***/ ((module) => {
+
+module.exports = require("crypto");
+
+/***/ }),
+
+/***/ 55591:
+/***/ ((module) => {
+
+module.exports = require("https");
+
+/***/ }),
+
+/***/ 57075:
+/***/ ((module) => {
+
+module.exports = require("node:stream");
+
+/***/ }),
+
+/***/ 57975:
+/***/ ((module) => {
+
+module.exports = require("node:util");
+
+/***/ }),
+
+/***/ 63033:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
+
+/***/ }),
+
+/***/ 73024:
+/***/ ((module) => {
+
+module.exports = require("node:fs");
+
+/***/ }),
+
+/***/ 75919:
+/***/ ((module) => {
+
+module.exports = require("node:worker_threads");
+
+/***/ }),
+
+/***/ 76760:
+/***/ ((module) => {
+
+module.exports = require("node:path");
+
+/***/ }),
+
+/***/ 77598:
+/***/ ((module) => {
+
+module.exports = require("node:crypto");
+
+/***/ }),
+
+/***/ 79428:
+/***/ ((module) => {
+
+module.exports = require("buffer");
+
+/***/ }),
+
+/***/ 80099:
+/***/ ((module) => {
+
+module.exports = require("node:sqlite");
+
+/***/ }),
+
+/***/ 80481:
+/***/ ((module) => {
+
+module.exports = require("node:readline");
+
+/***/ }),
+
+/***/ 81496:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   GET: () => (/* binding */ GET),
+/* harmony export */   PUT: () => (/* binding */ PUT)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
+/* harmony import */ var _lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(23593);
+/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
+// Allowlist API for env-sync overrides.
+//
+// GET  → defaults (code-owned ENV_ALLOWLIST) plus the user's stored
+//        per-(integration, field) env-var aliases.
+// PUT  → upsert one override row. Empty `envVars` removes it.
+//
+// Targets are constrained: integration + field must already exist in
+// INTEGRATIONS. Users can only add env-var name aliases for an existing
+// schema entry — see ADR-0034 for the rationale.
+
+
+
+
+const PutSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    integration: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1),
+    field: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1),
+    envVars: zod__WEBPACK_IMPORTED_MODULE_3__/* .array */ .YOg(zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP())
+});
+function snapshot() {
+    return {
+        defaults: _lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .ENV_ALLOWLIST */ .yD.map((m)=>({
+                envVars: [
+                    ...m.envVars
+                ],
+                integration: m.integration,
+                field: m.field
+            })),
+        overrides: (0,_lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .listOverrides */ .ON)()
+    };
+}
+function GET() {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(snapshot());
+}
+async function PUT(req) {
+    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PutSchema);
+    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
+    const { integration, field, envVars } = parsed;
+    const result = (0,_lib_env_allowlist__WEBPACK_IMPORTED_MODULE_1__/* .setOverride */ .nU)(integration, field, envVars);
+    if (!result.ok) {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: result.error
+        }, {
+            status: 400
+        });
+    }
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(snapshot());
+}
+
+
+/***/ }),
+
+/***/ 81630:
+/***/ ((module) => {
+
+module.exports = require("http");
+
+/***/ }),
+
+/***/ 86439:
+/***/ ((module) => {
+
+module.exports = require("next/dist/shared/lib/no-fallback-error.external");
+
 /***/ }),
 
 /***/ 94735:
@@ -863,7 +863,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(93339)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(34705)));
 module.exports = __webpack_exports__;
 
 })();