feat(ui): add OrganizationProfileApiKeysPanel mosaic component

[alexcarpenter]

Summary

Rebuilds the organization API keys experience as a Mosaic component following the established machine → controller → view split (mirrors OrganizationProfileDeleteSection / ProfileSection). Functional parity with the legacy packages/ui/src/components/APIKeys/APIKeys.tsx (organization scope).

Stacked on feat/mosaic-org-profile-profile-section.

Preview: https://swingset-git-feat-mosaic-org-profile-api-keys-panel.clerkstage.dev/organization/organization-profile-api-keys-panel

What's included

• organization-profile-api-keys-panel-create.machine.ts — pure create + copy-secret flow (closed → editing → creating → showingSecret), guarded on name length, createAPIKey injected, reveals the secret once.
• organization-profile-api-keys-panel-revoke.machine.ts — pure revoke flow (idle → confirming → revoking), guarded on the "Revoke" confirmation word.
• organization-profile-api-keys-panel.controller.tsx — the only Clerk-touching layer: useOrganization/useSession gating (loading/hidden/ready), org:sys_api_keys:read / :manage permissions, useAPIKeys for list + search + pagination (local debounce + page-reset effect), wires both machines to clerk.apiKeys.create/revoke + revalidate, maps APIKeyResource to a plain row model, and includes a pure mapCreateApiKeyError (quota/conflict/generic).
• organization-profile-api-keys-panel.view.tsx — props-only, plain HTML rendering (search, create form with expiration select, table with per-row revoke, prev/next pagination, copy-secret dialog, revoke confirmation).
• organization-profile-api-keys-panel.tsx — thin wrapper gating on status === 'ready'.
• Exposed via the OrganizationProfile.ApiKeysPanel namespace + flat OrganizationProfileApiKeysPanel export in experimental/mosaic.ts.

Scope decisions

• Behavior-first, plain HTML — no polished Mosaic primitives (Table/Pagination/Select/Clipboard) yet; the goal is functional flows. Styling + shared primitives are a follow-up.
• Org-only — subject is the organization; no subject-agnostic core.
• Experimental export only — legacy OrganizationAPIKeysPage routing untouched (honors backwards-compat rules).

Tests

TDD across all four layers — 47 tests (create machine 9, revoke machine 6, controller 14, view 18). Machine tests use createActor with no React/Clerk; controller test mocks @clerk/shared/react; view test renders with fake snapshots.

Notes

• Changeset already covered by the existing open-heads-brush.md ("Export experimental mosaic components").
• Localization uses plain English strings, matching the current Mosaic convention; apiKeys.* keys can be wired in a later polish pass.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6b39e69

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Jul 2, 2026 8:41pm
swingset	Ready	Preview, Comment	Jul 2, 2026 8:41pm

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Repository UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 8789c292-f2b3-42d9-97b0-9982f1afa0da

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}