API Keys

api_keys · @open-mercato/core Platform in 0.9.0

Manage access tokens for external API access.

Found by static analysis of the 0.9.0 source. Links that only appear at runtime are not visible here.

Everything api_keys needs outside the starter set is declared. 1 link into a starter module is not, and every app has it.

Before you enable `api_keys` in 0.9.0

2 modules its code requires

✓ 1 declared1 not declared, in every app

Every module it requires is already in every starter app.

Already enabled in every starter app: 2 modules.

Before you disable `api_keys` in 0.9.0

5 modules require it in code

None of them declares it in requires.

Not declared by

agent_orchestrator⚠ Gap ai_assistant⚠ Gap auth⚠ Gap business_rules⚠ Gap workflows⚠ Gap

Required, declared ⚠ Gap: required in code, not in requires ⚠ Gap into a module every starter app has (lower risk) Optional Collaboration In requires only, not seen in code In every starter appA dot takes its module's area colour. Each side lists the areas in the order of the map.Reads left to right: what uses it → api_keys → what it needs. Select a module to go to its row.

Needs

In every app (2)

Modules api_keys needs in 0.9.0 that every starter app enables
Module	In code	requires	package.json
Module: `auth`	In code: Required · api, cli, command, lib, ui	requires: ✓ Declared	package.json: Same package
12 places Entity import → Required · api · `packages/core/src/modules/api_keys/api/keys/route.ts:7` · `@open-mercato/core/modules/auth/data/entities` Import → Required · api · `packages/core/src/modules/api_keys/api/keys/route.ts:12` · `@open-mercato/core/modules/auth/lib/tenantAccess` Import → Required · api · `packages/core/src/modules/api_keys/api/keys/route.ts:14` · `@open-mercato/core/modules/auth/lib/grantChecks` Service lookup (DI) → Required · api · `packages/core/src/modules/api_keys/api/keys/route.ts:122` · `rbacService` Import → Required · ui · `packages/core/src/modules/api_keys/backend/api-keys/create/page.tsx:9` · `@open-mercato/core/modules/auth/backend/users/roleOptions` Entity import → Required · cli · `packages/core/src/modules/api_keys/cli.ts:5` · `@open-mercato/core/modules/auth/data/entities` Import → Required · command · `packages/core/src/modules/api_keys/commands/keys.ts:8` · `@open-mercato/core/modules/auth/lib/tenantAccess` Entity import → Required · command · `packages/core/src/modules/api_keys/commands/keys.ts:10` · `@open-mercato/core/modules/auth/data/entities` Import → Required · command · `packages/core/src/modules/api_keys/commands/keys.ts:12` · `@open-mercato/core/modules/auth/lib/grantChecks` Service lookup (DI) → Required · command · `packages/core/src/modules/api_keys/commands/keys.ts:43` · `rbacService` and 2 more in `packages/core/src/modules/api_keys`
Module: `directory`	In code: Required · api, cli, ui	requires: ⚠ Gap in every app	package.json: Same package
3 places Entity import → Required · api · `packages/core/src/modules/api_keys/api/keys/route.ts:8` · `@open-mercato/core/modules/directory/data/entities` Import → Required · ui · `packages/core/src/modules/api_keys/backend/api-keys/create/page.tsx:8` · `@open-mercato/core/modules/directory/components/OrganizationSelect` Entity import → Required · cli · `packages/core/src/modules/api_keys/cli.ts:4` · `@open-mercato/core/modules/directory/data/entities`

Used by

Modules that use api_keys in 0.9.0
Module	In code	requires	package.json
Module: `agent_orchestrator`	In code: Required · lib	requires: ⚠ Gap	package.json: ✓ Declared
3 places Entity import → Required · lib · `packages/enterprise/src/modules/agent_orchestrator/lib/identity/agentTokenService.ts:4` · `@open-mercato/core/modules/api_keys/data/entities` Import → Required · lib · `packages/enterprise/src/modules/agent_orchestrator/lib/identity/agentTokenService.ts:5` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · lib · `packages/enterprise/src/modules/agent_orchestrator/lib/runtime/openCodeAgentRunner.ts:4` · `@open-mercato/core/modules/api_keys/services/apiKeyService`
Module: `ai_assistant`	In code: Required · api, lib	requires: ⚠ Gap	package.json: ⚠ Not in package.json
9 places Import → Required · api · `packages/ai-assistant/src/modules/ai_assistant/api/chat/route.ts:13` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · api · `packages/ai-assistant/src/modules/ai_assistant/api/mcp-key/route.ts:7` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · api · `packages/ai-assistant/src/modules/ai_assistant/api/session-key/route.ts:7` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · api · `packages/ai-assistant/src/modules/ai_assistant/api/settings/route.ts:10` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Dynamic import in try/catch → Optional · lib · `packages/ai-assistant/src/modules/ai_assistant/lib/auth.ts:66` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · lib · `packages/ai-assistant/src/modules/ai_assistant/lib/http-server.ts:19` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Entity import → Required · lib · `packages/ai-assistant/src/modules/ai_assistant/lib/mcp-ensure-api-key.ts:5` · `@open-mercato/core/modules/api_keys/data/entities` Import → Required · lib · `packages/ai-assistant/src/modules/ai_assistant/lib/mcp-ensure-api-key.ts:6` · `@open-mercato/core/modules/api_keys/services/apiKeyService` Import → Required · lib · `packages/ai-assistant/src/modules/ai_assistant/lib/opencode-handlers.ts:10` · `@open-mercato/core/modules/api_keys/services/apiKeyService`
Module: `business_rules`	In code: Required · lib	requires: ⚠ Gap	package.json: Same package
2 places Dynamic import → Required · lib · `packages/core/src/modules/business_rules/lib/action-executor.ts:484` · `../../api_keys/services/apiKeyService` Entity import → Required · lib · `packages/core/src/modules/business_rules/lib/openmercato-call-options.ts:10` · `../../api_keys/data/entities`
Module: `workflows`	In code: Required · lib	requires: ⚠ Gap	package.json: Same package
1 place Dynamic import → Required · lib · `packages/core/src/modules/workflows/lib/activity-executor.ts:1636` · `../../api_keys/services/apiKeyService`
Module: `auth`	In code: Required · lib	requires: ⚠ Gap	package.json: Same package
2 places Entity import → Required · lib · `packages/core/src/modules/auth/lib/authorizationStateLocks.ts:3` · `@open-mercato/core/modules/api_keys/data/entities` Entity import → Required · lib · `packages/core/src/modules/auth/services/rbacService.ts:5` · `@open-mercato/core/modules/api_keys/data/entities`

Facts

Registers in DI (1)

apiKeyPrincipalService · packages/core/src/modules/api_keys/di.ts:6

Hosts widget spots (1)

data-table:api_keys.list · packages/core/src/modules/api_keys/extension-points.ts:6

Entities (1)

ApiKey · packages/core/src/modules/api_keys/data/entities.ts:13