Api keys and webhook migration to core (#13011)

TODO: check Zapier trigger records work as expected

---------

Co-authored-by: Weiko <corentin@twenty.com>

packages/twenty-server/src/engine/api/graphql/workspace-schema.factory.ts

@@ -9,14 +9,22 @@ import { ScalarsExplorerService } from 'src/engine/api/graphql/services/scalars-
 import { workspaceResolverBuilderMethodNames } from 'src/engine/api/graphql/workspace-resolver-builder/factories/factories';
 import { WorkspaceResolverFactory } from 'src/engine/api/graphql/workspace-resolver-builder/workspace-resolver.factory';
 import { WorkspaceGraphQLSchemaFactory } from 'src/engine/api/graphql/workspace-schema-builder/workspace-graphql-schema.factory';
+import {
+  AuthException,
+  AuthExceptionCode,
+} from 'src/engine/core-modules/auth/auth.exception';
 import { AuthContext } from 'src/engine/core-modules/auth/types/auth-context.type';
+import { FeatureFlagService } from 'src/engine/core-modules/feature-flag/services/feature-flag.service';
 import { DataSourceService } from 'src/engine/metadata-modules/data-source/data-source.service';
 import {
   WorkspaceMetadataCacheException,
   WorkspaceMetadataCacheExceptionCode,
 } from 'src/engine/metadata-modules/workspace-metadata-cache/exceptions/workspace-metadata-cache.exception';
 import { WorkspaceMetadataCacheService } from 'src/engine/metadata-modules/workspace-metadata-cache/services/workspace-metadata-cache.service';
+import { metadataArgsStorage } from 'src/engine/twenty-orm/storage/metadata-args.storage';
 import { WorkspaceCacheStorageService } from 'src/engine/workspace-cache-storage/workspace-cache-storage.service';
+import { standardObjectMetadataDefinitions } from 'src/engine/workspace-manager/workspace-sync-metadata/standard-objects';
+import { isGatedAndNotEnabled } from 'src/engine/workspace-manager/workspace-sync-metadata/utils/is-gate-and-not-enabled.util';
 
 @Injectable()
 export class WorkspaceSchemaFactory {
@@ -27,6 +35,7 @@ export class WorkspaceSchemaFactory {
     private readonly workspaceResolverFactory: WorkspaceResolverFactory,
     private readonly workspaceCacheStorageService: WorkspaceCacheStorageService,
     private readonly workspaceMetadataCacheService: WorkspaceMetadataCacheService,
+    private readonly featureFlagService: FeatureFlagService,
   ) {}
 
   async createGraphQLSchema(authContext: AuthContext): Promise<GraphQLSchema> {
@@ -57,13 +66,49 @@ export class WorkspaceSchemaFactory {
       );
     }
 
+    const workspaceId = authContext.workspace.id;
+
+    if (!workspaceId) {
+      throw new AuthException(
+        'Unauthenticated',
+        AuthExceptionCode.UNAUTHENTICATED,
+      );
+    }
+
+    const workspaceFeatureFlagsMap =
+      await this.featureFlagService.getWorkspaceFeatureFlagsMap(workspaceId);
+
     const objectMetadataCollection = Object.values(objectMetadataMaps.byId)
       .filter(isDefined)
       .map((objectMetadataItem) => ({
         ...objectMetadataItem,
         fields: Object.values(objectMetadataItem.fieldsById),
         indexes: objectMetadataItem.indexMetadatas,
-      }));
+      }))
+      .filter((objectMetadata) => {
+        // Find the corresponding workspace entity for this object metadata
+        const workspaceEntity = standardObjectMetadataDefinitions.find(
+          (entity) => {
+            const entityMetadata = metadataArgsStorage.filterEntities(entity);
+
+            return entityMetadata?.standardId === objectMetadata.standardId;
+          },
+        );
+
+        if (!workspaceEntity) {
+          return true; // Include non-workspace entities (custom objects, etc.)
+        }
+
+        const entityMetadata =
+          metadataArgsStorage.filterEntities(workspaceEntity);
+
+        // Filter out entities that are GraphQL-gated and not enabled
+        return !isGatedAndNotEnabled(
+          entityMetadata?.gate,
+          workspaceFeatureFlagsMap,
+          'graphql',
+        );
+      });
 
     // Get typeDefs from cache
     let typeDefs = await this.workspaceCacheStorageService.getGraphQLTypeDefs(