@geolens/sdk 1.4.6 → 1.4.8

package/dist/client/sdk.gen.js

@@ -13,7 +13,15 @@ export const landingPageGet = (options) => (options?.client ?? client).get({ url
  * Return single-deployment AI status; no provider-routing policy controls (admin only).
  */
 export const getAiStatusAdminAiStatusGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/ai-status/',
     ...options
 });
@@ -23,7 +31,15 @@ export const getAiStatusAdminAiStatusGet = (options) => (options?.client ?? clie
  * Toggle base AI features on/off at runtime; no provider-routing policy controls (admin only).
  */
 export const updateAiStatusAdminAiStatusPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/ai-status/',
     ...options,
     headers: {
@@ -37,7 +53,15 @@ export const updateAiStatusAdminAiStatusPatch = (options) => (options.client ??
  * List all API keys (admin only). Never returns the raw key.
  */
 export const listApiKeysAdminApiKeysGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/api-keys/',
     ...options
 });
@@ -49,7 +73,15 @@ export const listApiKeysAdminApiKeysGet = (options) => (options?.client ?? clien
  * The raw key is returned only in this response and cannot be retrieved again.
  */
 export const createApiKeyAdminApiKeysPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/api-keys/',
     ...options,
     headers: {
@@ -63,7 +95,15 @@ export const createApiKeyAdminApiKeysPost = (options) => (options.client ?? clie
  * Revoke (soft-delete) an API key (admin only).
  */
 export const revokeApiKeyAdminApiKeysKeyIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/api-keys/{key_id}',
     ...options
 });
@@ -73,10 +113,36 @@ export const revokeApiKeyAdminApiKeysKeyIdDelete = (options) => (options.client
  * Query audit logs with optional filters (admin only).
  */
 export const listAuditLogsAdminAuditLogsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/audit-logs/',
     ...options
 });
+/**
+ * Export Audit Logs
+ *
+ * Export up to 100,000 audit log rows as CSV or JSON.
+ */
+export const exportAuditLogsAdminAuditLogsExportFormatGet = (options) => (options.client ?? client).get({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/admin/audit-logs/export/{format}',
+    ...options
+});
 /**
  * Trigger Backfill
  *
@@ -86,7 +152,15 @@ export const listAuditLogsAdminAuditLogsGet = (options) => (options?.client ?? c
  * scratch (required after changing the embedding model or dimensions).
  */
 export const triggerBackfillAdminBackfillEmbeddingsPost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/backfill-embeddings/',
     ...options
 });
@@ -96,7 +170,15 @@ export const triggerBackfillAdminBackfillEmbeddingsPost = (options) => (options?
  * List basic embed-token inventory across maps; no quota or domain-policy controls (admin only).
  */
 export const listAllEmbedTokensAdminEmbedTokensGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/embed-tokens/',
     ...options
 });
@@ -106,7 +188,15 @@ export const listAllEmbedTokensAdminEmbedTokensGet = (options) => (options?.clie
  * Bulk-revoke basic embed tokens; no quota or domain-policy controls (admin only).
  */
 export const bulkRevokeAdminEmbedTokensBulkRevokePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/embed-tokens/bulk-revoke/',
     ...options,
     headers: {
@@ -120,7 +210,15 @@ export const bulkRevokeAdminEmbedTokensBulkRevokePost = (options) => (options.cl
  * Return semantic-search embedding coverage statistics (admin only).
  */
 export const getEmbeddingStatsAdminEmbeddingStatsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/embedding-stats/',
     ...options
 });
@@ -130,7 +228,15 @@ export const getEmbeddingStatsAdminEmbeddingStatsGet = (options) => (options?.cl
  * Return infrastructure configuration, live health status, and OIDC provider connectivity.
  */
 export const getInfrastructureAdminInfrastructureGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/infrastructure/',
     ...options
 });
@@ -140,7 +246,15 @@ export const getInfrastructureAdminInfrastructureGet = (options) => (options?.cl
  * List all ingestion jobs with optional status/user/search filters (admin only).
  */
 export const listAdminJobsAdminJobsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/jobs/',
     ...options
 });
@@ -150,7 +264,15 @@ export const listAdminJobsAdminJobsGet = (options) => (options?.client ?? client
  * List basic share-token inventory with map info; no quotas or domain controls (admin only).
  */
 export const listShareTokensEndpointAdminShareTokensGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/share-tokens/',
     ...options
 });
@@ -160,7 +282,15 @@ export const listShareTokensEndpointAdminShareTokensGet = (options) => (options?
  * Revoke a basic share token and cascade to its embed tokens; no quota controls (admin only).
  */
 export const adminRevokeShareTokenAdminShareTokensTokenIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/share-tokens/{token_id}',
     ...options
 });
@@ -170,7 +300,15 @@ export const adminRevokeShareTokenAdminShareTokensTokenIdDelete = (options) => (
  * Return catalog statistics: counts, storage, breakdowns (admin only).
  */
 export const getCatalogStatsAdminStatsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/stats/',
     ...options
 });
@@ -180,7 +318,15 @@ export const getCatalogStatsAdminStatsGet = (options) => (options?.client ?? cli
  * List all users with pagination and optional status/search filter (admin only).
  */
 export const listUsersAdminUsersGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/',
     ...options
 });
@@ -190,7 +336,15 @@ export const listUsersAdminUsersGet = (options) => (options?.client ?? client).g
  * Create a new user with the specified role (admin only).
  */
 export const createUserAdminUsersPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/',
     ...options,
     headers: {
@@ -208,7 +362,15 @@ export const createUserAdminUsersPost = (options) => (options.client ?? client).
  * Cells starting with =, +, -, or @ are tab-prefixed (CSV injection hardening).
  */
 export const exportUsersCsvAdminUsersExportCsvGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/export.csv',
     ...options
 });
@@ -223,7 +385,15 @@ export const exportUsersCsvAdminUsersExportCsvGet = (options) => (options?.clien
  * page by incrementing ``skip``.
  */
 export const listUserNamesAdminUsersNamesGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/names/',
     ...options
 });
@@ -233,7 +403,15 @@ export const listUserNamesAdminUsersNamesGet = (options) => (options?.client ??
  * Hard-delete a user (admin only). Returns 400 for self-deletion or last-admin.
  */
 export const deleteUserAdminUsersUserIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}',
     ...options
 });
@@ -243,7 +421,15 @@ export const deleteUserAdminUsersUserIdDelete = (options) => (options.client ??
  * Get a specific user by ID (admin only).
  */
 export const getUserAdminUsersUserIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}',
     ...options
 });
@@ -253,7 +439,15 @@ export const getUserAdminUsersUserIdGet = (options) => (options.client ?? client
  * Update a user's fields and/or role (admin only).
  */
 export const updateUserAdminUsersUserIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}',
     ...options,
     headers: {
@@ -267,7 +461,15 @@ export const updateUserAdminUsersUserIdPatch = (options) => (options.client ?? c
  * Approve a pending user with the specified role (admin only).
  */
 export const approveUserAdminUsersUserIdApprovePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}/approve/',
     ...options,
     headers: {
@@ -281,7 +483,15 @@ export const approveUserAdminUsersUserIdApprovePost = (options) => (options.clie
  * Deactivate a user (admin only).
  */
 export const deactivateUserAdminUsersUserIdDeactivatePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}/deactivate/',
     ...options
 });
@@ -291,7 +501,15 @@ export const deactivateUserAdminUsersUserIdDeactivatePost = (options) => (option
  * Reject a pending user by hard-deleting them (admin only).
  */
 export const rejectUserAdminUsersUserIdRejectPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/admin/users/{user_id}/reject/',
     ...options
 });
@@ -307,7 +525,15 @@ export const rejectUserAdminUsersUserIdRejectPost = (options) => (options.client
  * gets 403.
  */
 export const aiAvailabilityEndpointAiAvailabilityGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/availability/',
     ...options
 });
@@ -317,7 +543,15 @@ export const aiAvailabilityEndpointAiAvailabilityGet = (options) => (options?.cl
  * Chat-based map editing: send a message and get back edit actions.
  */
 export const chatEndpointAiChatPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/chat/',
     ...options,
     headers: {
@@ -325,13 +559,49 @@ export const chatEndpointAiChatPost = (options) => (options.client ?? client).po
         ...options.headers
     }
 });
+/**
+ * Dataset Chat Stream Endpoint
+ *
+ * Dataset-scoped AI chat: ask questions about a single dataset's data.
+ *
+ * Read-only by construction — ``can_edit=False`` selects the query_data-only
+ * tool set, and a dataset-framed system prompt replaces the map-editing one.
+ * Reuses the whole map-chat streaming pipeline (SQL generation, sandbox
+ * validation, RBAC table allowlist, token budgeting) with one synthetic
+ * server-built layer.
+ */
+export const datasetChatStreamEndpointAiChatDatasetStreamPost = (options) => (options.client ?? client).sse.post({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/ai/chat/dataset/stream/',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * Chat Stream Endpoint
  *
  * Chat-based map editing with server-sent event streaming.
  */
-export const chatStreamEndpointAiChatStreamPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+export const chatStreamEndpointAiChatStreamPost = (options) => (options.client ?? client).sse.post({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/chat/stream/',
     ...options,
     headers: {
@@ -345,7 +615,15 @@ export const chatStreamEndpointAiChatStreamPost = (options) => (options.client ?
  * Generate a map from a natural language prompt using an LLM.
  */
 export const generateMapEndpointAiGenerateMapPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/generate-map/',
     ...options,
     headers: {
@@ -358,8 +636,16 @@ export const generateMapEndpointAiGenerateMapPost = (options) => (options.client
  *
  * Generate a map from a natural language prompt with streaming progress events.
  */
-export const generateMapStreamEndpointAiGenerateMapStreamPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+export const generateMapStreamEndpointAiGenerateMapStreamPost = (options) => (options.client ?? client).sse.post({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/generate-map/stream/',
     ...options,
     headers: {
@@ -373,7 +659,15 @@ export const generateMapStreamEndpointAiGenerateMapStreamPost = (options) => (op
  * Generate AI-suggested keywords for a dataset.
  */
 export const generateMetadataKeywordsAiMetadataKeywordsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/metadata/keywords/',
     ...options,
     headers: {
@@ -387,7 +681,15 @@ export const generateMetadataKeywordsAiMetadataKeywordsPost = (options) => (opti
  * Generate an AI-drafted lineage summary for a dataset.
  */
 export const generateMetadataLineageAiMetadataLineagePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/metadata/lineage/',
     ...options,
     headers: {
@@ -401,7 +703,15 @@ export const generateMetadataLineageAiMetadataLineagePost = (options) => (option
  * Generate an AI-drafted quality statement for a dataset.
  */
 export const generateMetadataQualityStatementAiMetadataQualityStatementPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/metadata/quality-statement/',
     ...options,
     headers: {
@@ -415,7 +725,15 @@ export const generateMetadataQualityStatementAiMetadataQualityStatementPost = (o
  * Generate an AI-drafted summary for a dataset.
  */
 export const generateMetadataSummaryAiMetadataSummaryPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ai/metadata/summary/',
     ...options,
     headers: {
@@ -432,17 +750,28 @@ export const generateMetadataSummaryAiMetadataSummaryPost = (options) => (option
  * to dataset owners so they can detect editor-initiated schema changes.
  *
  * Access control (AGENTS.md Pre-Commit Checklist Rule 1):
- * - Owner + granted roles: 200 with their own dataset's DDL history
- * - Non-owner editor (no grant): 404 (check_dataset_access raises 404 for
- * private datasets)
+ * - Owner: 200 with their own dataset's DDL history
  * - Admin: 200 (admin access is always allowed)
+ * - Anyone else — including authenticated readers of a PUBLIC dataset: 404
+ * via check_dataset_write_access. fix(#458 E-37): the feed previously used
+ * check_dataset_access (read visibility), which let any logged-in user
+ * enumerate editor usernames/user_ids on public datasets, contradicting
+ * this owner-facing contract.
  * - Anonymous: 401 (get_current_active_user dependency)
  *
  * The dataset 404-before-auth-query ordering ensures non-existent datasets
  * return 404 without leaking audit log details.
  */
 export const getColumnDdlFeedAuditDatasetsDatasetIdColumnDdlGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/audit/datasets/{dataset_id}/column-ddl',
     ...options
 });
@@ -452,7 +781,15 @@ export const getColumnDdlFeedAuditDatasetsDatasetIdColumnDdlGet = (options) => (
  * List the current user's API keys.
  */
 export const listMyApiKeysAuthApiKeysGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/api-keys/',
     ...options
 });
@@ -464,7 +801,15 @@ export const listMyApiKeysAuthApiKeysGet = (options) => (options?.client ?? clie
  * The raw key is returned only in this response and cannot be retrieved again.
  */
 export const createMyApiKeyAuthApiKeysPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/api-keys/',
     ...options,
     headers: {
@@ -478,7 +823,15 @@ export const createMyApiKeyAuthApiKeysPost = (options) => (options.client ?? cli
  * Revoke (soft-delete) one of the current user's API keys.
  */
 export const revokeMyApiKeyAuthApiKeysKeyIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/api-keys/{key_id}',
     ...options
 });
@@ -488,7 +841,15 @@ export const revokeMyApiKeyAuthApiKeysKeyIdDelete = (options) => (options.client
  * Change the current user's password (requires current password).
  */
 export const changePasswordAuthChangePasswordPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/change-password/',
     ...options,
     headers: {
@@ -516,7 +877,15 @@ export const configAuthConfigGet = (options) => (options?.client ?? client).get(
  * ``typ='download'``, ``scope='dataset:{dataset_id}'``, and a TTL of 120s.
  */
 export const createDownloadTokenEndpointAuthDownloadTokenDatasetIdPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/download-token/{dataset_id}',
     ...options
 });
@@ -545,7 +914,15 @@ export const loginAuthLoginPost = (options) => (options.client ?? client).post({
  * "logout doesn't invalidate the access JWT" gap.
  */
 export const logoutAuthLogoutPost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/logout/',
     ...options
 });
@@ -555,7 +932,15 @@ export const logoutAuthLogoutPost = (options) => (options?.client ?? client).pos
  * Return the currently authenticated user's profile and roles.
  */
 export const meAuthMeGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/me/',
     ...options
 });
@@ -565,7 +950,15 @@ export const meAuthMeGet = (options) => (options?.client ?? client).get({
  * Return the effective permissions for the currently authenticated user.
  */
 export const mePermissionsAuthMePermissionsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/me/permissions/',
     ...options
 });
@@ -575,7 +968,15 @@ export const mePermissionsAuthMePermissionsGet = (options) => (options?.client ?
  * Return the authenticated user's own storage and dataset quota usage.
  */
 export const meUsageAuthMeUsageGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/auth/me/usage/',
     ...options
 });
@@ -613,6 +1014,11 @@ export const oauthLoginAuthOauthProviderSlugLoginGet = (options) => (options.cli
  * Refresh
  *
  * Exchange a valid refresh token for a new access + refresh token pair.
+ *
+ * Multi-tenant clients must call this endpoint on their tenant host. Refresh
+ * tokens are opaque and carry no bearer ``tid`` claim, so tenant middleware
+ * binds the database transaction from that same-origin host before the user
+ * row is resolved and the next tenant-bound access token is minted.
  */
 export const refreshAuthRefreshPost = (options) => (options.client ?? client).post({
     url: '/auth/refresh/',
@@ -678,7 +1084,15 @@ export const verifyEmailAuthVerifyEmailPost = (options) => (options.client ?? cl
  * List all collections with dataset_count and extent computed per-user.
  */
 export const listCollectionsEndpointCatalogCollectionsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/',
     ...options
 });
@@ -688,7 +1102,15 @@ export const listCollectionsEndpointCatalogCollectionsGet = (options) => (option
  * Create a new collection.
  */
 export const createCollectionEndpointCatalogCollectionsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/',
     ...options,
     headers: {
@@ -702,7 +1124,15 @@ export const createCollectionEndpointCatalogCollectionsPost = (options) => (opti
  * Delete a collection. Owner or admin only.
  */
 export const deleteCollectionEndpointCatalogCollectionsCollectionIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}',
     ...options
 });
@@ -712,7 +1142,15 @@ export const deleteCollectionEndpointCatalogCollectionsCollectionIdDelete = (opt
  * Get a single collection with dataset_count and extent.
  */
 export const getCollectionEndpointCatalogCollectionsCollectionIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}',
     ...options
 });
@@ -722,7 +1160,15 @@ export const getCollectionEndpointCatalogCollectionsCollectionIdGet = (options)
  * Update a collection's name and/or description. Owner or admin only.
  */
 export const updateCollectionEndpointCatalogCollectionsCollectionIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}',
     ...options,
     headers: {
@@ -736,7 +1182,15 @@ export const updateCollectionEndpointCatalogCollectionsCollectionIdPatch = (opti
  * Get datasets in a collection with RBAC filtering.
  */
 export const getCollectionDatasetsEndpointCatalogCollectionsCollectionIdDatasetsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}/datasets/',
     ...options
 });
@@ -746,7 +1200,15 @@ export const getCollectionDatasetsEndpointCatalogCollectionsCollectionIdDatasets
  * Add datasets to a collection. Collection owner or admin only.
  */
 export const addDatasetsEndpointCatalogCollectionsCollectionIdDatasetsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}/datasets/',
     ...options,
     headers: {
@@ -760,7 +1222,15 @@ export const addDatasetsEndpointCatalogCollectionsCollectionIdDatasetsPost = (op
  * Remove a dataset from a collection. Collection owner or admin only.
  */
 export const removeDatasetEndpointCatalogCollectionsCollectionIdDatasetsDatasetIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/catalog/collections/{collection_id}/datasets/{dataset_id}',
     ...options
 });
@@ -770,7 +1240,15 @@ export const removeDatasetEndpointCatalogCollectionsCollectionIdDatasetsDatasetI
  * List available OGC collections (catalog + per-dataset feature collections).
  */
 export const listCollectionsCollectionsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections',
     ...options
 });
@@ -780,7 +1258,15 @@ export const listCollectionsCollectionsGet = (options) => (options?.client ?? cl
  * Get metadata for the datasets collection.
  */
 export const getCollectionMetadataCollectionsDatasetsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/datasets',
     ...options
 });
@@ -790,7 +1276,20 @@ export const getCollectionMetadataCollectionsDatasetsGet = (options) => (options
  * OGC API Records items endpoint -- mirrors /search/datasets.
  */
 export const collectionItemsCollectionsDatasetsItemsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    querySerializer: { parameters: {
+            type: { array: { explode: false } },
+            ids: { array: { explode: false } },
+            externalIds: { array: { explode: false } }
+        } },
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/datasets/items',
     ...options,
     headers: {
@@ -804,7 +1303,15 @@ export const collectionItemsCollectionsDatasetsItemsGet = (options) => (options?
  * Get a single dataset as an OGC Record Feature.
  */
 export const getCollectionItemCollectionsDatasetsItemsRecordIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/datasets/items/{record_id}',
     ...options
 });
@@ -832,7 +1339,15 @@ export const getSortablesCollectionsDatasetsSortablesGet = (options) => (options
  * Per-dataset OGC collection metadata with extent, CRS, and items link.
  */
 export const getDatasetCollectionCollectionsDatasetIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/{dataset_id}',
     ...options
 });
@@ -848,7 +1363,15 @@ export const getDatasetCollectionCollectionsDatasetIdGet = (options) => (options
  * parameter SHALL be ignored" applies (OGC 17-069r4 §7.15.5).
  */
 export const getCollectionItemsCollectionsDatasetIdItemsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/{dataset_id}/items',
     ...options
 });
@@ -858,7 +1381,15 @@ export const getCollectionItemsCollectionsDatasetIdItemsGet = (options) => (opti
  * OGC API Features single feature endpoint -- returns a GeoJSON Feature.
  */
 export const getCollectionItemFeatureCollectionsDatasetIdItemsFeatureIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/collections/{dataset_id}/items/{feature_id}',
     ...options
 });
@@ -868,7 +1399,15 @@ export const getCollectionItemFeatureCollectionsDatasetIdItemsFeatureIdGet = (op
  * Preview what an import would change without applying any modifications.
  */
 export const dryRunConfigurationConfigOpsDryRunPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/config-ops/dry-run/',
     ...options,
     headers: {
@@ -888,7 +1427,15 @@ export const dryRunConfigurationConfigOpsDryRunPost = (options) => (options.clie
  * document a download endpoint in OpenAPI.
  */
 export const exportConfigurationConfigOpsExportGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/config-ops/export/',
     ...options
 });
@@ -901,7 +1448,15 @@ export const exportConfigurationConfigOpsExportGet = (options) => (options?.clie
  * Overwrite mode: replaces all settings and OAuth providers.
  */
 export const importConfigurationConfigOpsImportPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/config-ops/import/',
     ...options,
     headers: {
@@ -917,7 +1472,15 @@ export const importConfigurationConfigOpsImportPost = (options) => (options.clie
  * Returns pass/fail with latency and error details for each service.
  */
 export const validateConfigurationConfigOpsValidatePost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/config-ops/validate/',
     ...options
 });
@@ -933,7 +1496,15 @@ export const conformanceConformanceGet = (options) => (options?.client ?? client
  * List datasets with visibility filtering and pagination.
  */
 export const listAllDatasetsDatasetsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/',
     ...options
 });
@@ -943,7 +1514,15 @@ export const listAllDatasetsDatasetsGet = (options) => (options?.client ?? clien
  * Delete multiple datasets in one request. Returns per-item results.
  */
 export const bulkDeleteDatasetsEndpointDatasetsBulkDeletePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/bulk-delete/',
     ...options,
     headers: {
@@ -959,7 +1538,15 @@ export const bulkDeleteDatasetsEndpointDatasetsBulkDeletePost = (options) => (op
  * Creates a PostGIS table in the data schema and a catalog record.
  */
 export const createEmptyDatasetEndpointDatasetsCreatePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/create/',
     ...options,
     headers: {
@@ -973,7 +1560,15 @@ export const createEmptyDatasetEndpointDatasetsCreatePost = (options) => (option
  * DCAT-US Schema v3.0 catalog feed. Respects dataset visibility.
  */
 export const getDcatUs3CatalogDatasetsDcatUs30Get = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/dcat-us/3.0/',
     ...options
 });
@@ -983,7 +1578,15 @@ export const getDcatUs3CatalogDatasetsDcatUs30Get = (options) => (options?.clien
  * Validate the visible DCAT-US Schema v3.0 catalog feed.
  */
 export const validateDcatUs3CatalogDatasetsDcatUs30ValidationGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/dcat-us/3.0/validation/',
     ...options
 });
@@ -993,7 +1596,15 @@ export const validateDcatUs3CatalogDatasetsDcatUs30ValidationGet = (options) =>
  * DCAT 3 JSON-LD catalog feed. Respects dataset visibility.
  */
 export const getDcatCatalogDatasetsDcatGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/dcat/',
     ...options
 });
@@ -1003,7 +1614,15 @@ export const getDcatCatalogDatasetsDcatGet = (options) => (options?.client ?? cl
  * Validate the visible W3C DCAT 3 catalog feed.
  */
 export const validateDcat3CatalogDatasetsDcatValidationGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/dcat/validation/',
     ...options
 });
@@ -1013,7 +1632,15 @@ export const validateDcat3CatalogDatasetsDcatValidationGet = (options) => (optio
  * GeoDCAT-AP 2.0.0 catalog feed. Respects dataset visibility.
  */
 export const getGeodcatApCatalogDatasetsGeodcatApGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/geodcat-ap/',
     ...options
 });
@@ -1023,7 +1650,15 @@ export const getGeodcatApCatalogDatasetsGeodcatApGet = (options) => (options?.cl
  * Validate the visible GeoDCAT-AP 2.0.0 catalog feed.
  */
 export const validateGeodcatApCatalogDatasetsGeodcatApValidationGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/geodcat-ap/validation/',
     ...options
 });
@@ -1033,7 +1668,15 @@ export const validateGeodcatApCatalogDatasetsGeodcatApValidationGet = (options)
  * Delete a FK relationship. Editor+ required.
  */
 export const deleteDatasetRelationshipDatasetsRelationshipsRelationshipIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/relationships/{relationship_id}/',
     ...options
 });
@@ -1043,7 +1686,15 @@ export const deleteDatasetRelationshipDatasetsRelationshipsRelationshipIdDelete
  * Delete a dataset with cascade cleanup. Owner or admin only, requires confirm_title.
  */
 export const deleteDatasetEndpointDatasetsDatasetIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}',
     ...options,
     headers: {
@@ -1057,7 +1708,15 @@ export const deleteDatasetEndpointDatasetsDatasetIdDelete = (options) => (option
  * Get a single dataset by ID with visibility check.
  */
 export const getSingleDatasetDatasetsDatasetIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}',
     ...options
 });
@@ -1067,7 +1726,15 @@ export const getSingleDatasetDatasetsDatasetIdGet = (options) => (options.client
  * Update user-editable dataset metadata.
  */
 export const updateDatasetMetadataDatasetsDatasetIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}',
     ...options,
     headers: {
@@ -1081,7 +1748,15 @@ export const updateDatasetMetadataDatasetsDatasetIdPatch = (options) => (options
  * List all attribute metadata for a dataset.
  */
 export const listAttributesEndpointDatasetsDatasetIdAttributesGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/attributes/',
     ...options
 });
@@ -1091,7 +1766,15 @@ export const listAttributesEndpointDatasetsDatasetIdAttributesGet = (options) =>
  * Get a single attribute metadata entry.
  */
 export const getAttributeEndpointDatasetsDatasetIdAttributesAttributeIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/attributes/{attribute_id}/',
     ...options
 });
@@ -1101,7 +1784,15 @@ export const getAttributeEndpointDatasetsDatasetIdAttributesAttributeIdGet = (op
  * Update user-editable attribute metadata fields.
  */
 export const updateAttributeEndpointDatasetsDatasetIdAttributesAttributeIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/attributes/{attribute_id}/',
     ...options,
     headers: {
@@ -1115,7 +1806,15 @@ export const updateAttributeEndpointDatasetsDatasetIdAttributesAttributeIdPatch
  * Reset attribute metadata to auto-populated values, clearing user_modified_fields.
  */
 export const resetAttributeEndpointDatasetsDatasetIdAttributesAttributeIdResetPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/attributes/{attribute_id}/reset/',
     ...options
 });
@@ -1125,7 +1824,15 @@ export const resetAttributeEndpointDatasetsDatasetIdAttributesAttributeIdResetPo
  * Get statistics for a numeric dataset column (for graduated styling).
  */
 export const getColumnStatsEndpointDatasetsDatasetIdColumnsColumnNameStatsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/columns/{column_name}/stats/',
     ...options
 });
@@ -1135,7 +1842,15 @@ export const getColumnStatsEndpointDatasetsDatasetIdColumnsColumnNameStatsGet =
  * Get distinct values for a dataset column (for categorical styling).
  */
 export const getColumnValuesDatasetsDatasetIdColumnsColumnNameValuesGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/columns/{column_name}/values/',
     ...options
 });
@@ -1145,7 +1860,15 @@ export const getColumnValuesDatasetsDatasetIdColumnsColumnNameValuesGet = (optio
  * DCAT-US Schema v3.0 JSON-LD for a single dataset.
  */
 export const getDcatUs3RecordDatasetsDatasetIdDcatUs30Get = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/dcat-us/3.0/',
     ...options
 });
@@ -1155,7 +1878,15 @@ export const getDcatUs3RecordDatasetsDatasetIdDcatUs30Get = (options) => (option
  * Validate a single dataset as DCAT-US Schema v3.0.
  */
 export const validateDcatUs3RecordDatasetsDatasetIdDcatUs30ValidationGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/dcat-us/3.0/validation/',
     ...options
 });
@@ -1165,7 +1896,15 @@ export const validateDcatUs3RecordDatasetsDatasetIdDcatUs30ValidationGet = (opti
  * DCAT 3 JSON-LD for a single dataset.
  */
 export const getDcatRecordDatasetsDatasetIdDcatGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/dcat/',
     ...options
 });
@@ -1175,7 +1914,15 @@ export const getDcatRecordDatasetsDatasetIdDcatGet = (options) => (options.clien
  * Validate a single dataset as W3C DCAT 3.
  */
 export const validateDcat3RecordDatasetsDatasetIdDcatValidationGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/dcat/validation/',
     ...options
 });
@@ -1195,7 +1942,15 @@ export const validateDcat3RecordDatasetsDatasetIdDcatValidationGet = (options) =
  * user_id=NULL.
  */
 export const downloadCogDatasetsDatasetIdDownloadCogGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/download/cog',
     ...options
 });
@@ -1209,7 +1964,15 @@ export const downloadCogDatasetsDatasetIdDownloadCogGet = (options) => (options.
  * filtering. GeoParquet is always emitted in EPSG:4326 (OGC:CRS84).
  */
 export const exportDatasetEndpointDatasetsDatasetIdExportGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/export',
     ...options
 });
@@ -1237,7 +2000,15 @@ export const exportDatasetEndpointDatasetsDatasetIdExportGet = (options) => (opt
  * Truly credentialless requests keep the anonymous public path.
  */
 export const getFeaturesGeojsonZEndpointDatasetsDatasetIdFeaturesGeojsonGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features.geojson',
     ...options
 });
@@ -1245,9 +2016,23 @@ export const getFeaturesGeojsonZEndpointDatasetsDatasetIdFeaturesGeojsonGet = (o
  * List Features
  *
  * Get paginated GeoJSON features for a dataset.
+ *
+ * Pagination is OFFSET-based (fix(#458 E-40), documented limitation): rows can
+ * skip or duplicate across pages under concurrent writes, though feature ids
+ * stay stable (ORDER BY gid, the primary key). Clients that need stable
+ * cursoring should use the OGC API Features endpoint, which supports keyset
+ * pagination via ``after_gid``.
  */
 export const listFeaturesDatasetsDatasetIdFeaturesGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/',
     ...options
 });
@@ -1257,7 +2042,15 @@ export const listFeaturesDatasetsDatasetIdFeaturesGet = (options) => (options.cl
  * Insert a new GeoJSON feature into a dataset.
  */
 export const createFeatureDatasetsDatasetIdFeaturesPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/',
     ...options,
     headers: {
@@ -1271,7 +2064,15 @@ export const createFeatureDatasetsDatasetIdFeaturesPost = (options) => (options.
  * Delete a feature by gid (hard delete).
  */
 export const deleteSingleFeatureDatasetsDatasetIdFeaturesGidDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/{gid}',
     ...options
 });
@@ -1281,7 +2082,15 @@ export const deleteSingleFeatureDatasetsDatasetIdFeaturesGidDelete = (options) =
  * Get a single GeoJSON feature by gid.
  */
 export const getSingleFeatureDatasetsDatasetIdFeaturesGidGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/{gid}',
     ...options
 });
@@ -1291,7 +2100,15 @@ export const getSingleFeatureDatasetsDatasetIdFeaturesGidGet = (options) => (opt
  * Partial update of a feature (PATCH semantics).
  */
 export const patchSingleFeatureDatasetsDatasetIdFeaturesGidPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/{gid}',
     ...options,
     headers: {
@@ -1305,7 +2122,15 @@ export const patchSingleFeatureDatasetsDatasetIdFeaturesGidPatch = (options) =>
  * Full replacement of a feature (PUT semantics).
  */
 export const replaceSingleFeatureDatasetsDatasetIdFeaturesGidPut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/{gid}',
     ...options,
     headers: {
@@ -1319,7 +2144,15 @@ export const replaceSingleFeatureDatasetsDatasetIdFeaturesGidPut = (options) =>
  * Get related records for a feature via FK relationship.
  */
 export const getFeatureRelatedRecordsDatasetsDatasetIdFeaturesGidRelatedRelationshipIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/features/{gid}/related/{relationship_id}/',
     ...options
 });
@@ -1329,7 +2162,15 @@ export const getFeatureRelatedRecordsDatasetsDatasetIdFeaturesGidRelatedRelation
  * GeoDCAT-AP 2.0.0 JSON-LD for a single dataset.
  */
 export const getGeodcatApRecordDatasetsDatasetIdGeodcatApGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/geodcat-ap/',
     ...options
 });
@@ -1339,7 +2180,15 @@ export const getGeodcatApRecordDatasetsDatasetIdGeodcatApGet = (options) => (opt
  * Validate a single dataset as GeoDCAT-AP 2.0.0.
  */
 export const validateGeodcatApRecordDatasetsDatasetIdGeodcatApValidationGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/geodcat-ap/validation/',
     ...options
 });
@@ -1349,7 +2198,15 @@ export const validateGeodcatApRecordDatasetsDatasetIdGeodcatApValidationGet = (o
  * Get audit log history for a specific dataset.
  */
 export const getDatasetHistoryDatasetsDatasetIdHistoryGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/history',
     ...options
 });
@@ -1359,7 +2216,15 @@ export const getDatasetHistoryDatasetsDatasetIdHistoryGet = (options) => (option
  * Return maps that contain this dataset, filtered by caller's RBAC visibility.
  */
 export const datasetMapsDatasetsDatasetIdMapsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/maps/',
     ...options
 });
@@ -1369,7 +2234,15 @@ export const datasetMapsDatasetsDatasetIdMapsGet = (options) => (options.client
  * Serve a quicklook PNG image for a dataset.
  */
 export const getQuicklookDatasetsDatasetIdQuicklookGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/quicklook',
     ...options
 });
@@ -1379,7 +2252,15 @@ export const getQuicklookDatasetsDatasetIdQuicklookGet = (options) => (options.c
  * Return top-5 datasets similar to this one by embedding cosine similarity.
  */
 export const listRelatedDatasetsDatasetsDatasetIdRelatedGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/related/',
     ...options
 });
@@ -1395,7 +2276,15 @@ export const listRelatedDatasetsDatasetsDatasetIdRelatedGet = (options) => (opti
  * pagination.
  */
 export const listDatasetRelationshipsDatasetsDatasetIdRelationshipsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/relationships/',
     ...options
 });
@@ -1405,7 +2294,15 @@ export const listDatasetRelationshipsDatasetsDatasetIdRelationshipsGet = (option
  * Create a new FK relationship. Editor+ required.
  */
 export const createDatasetRelationshipDatasetsDatasetIdRelationshipsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/relationships/',
     ...options,
     headers: {
@@ -1420,7 +2317,15 @@ export const createDatasetRelationshipDatasetsDatasetIdRelationshipsPost = (opti
  */
 export const reuploadDatasetDatasetsDatasetIdReuploadPost = (options) => (options.client ?? client).post({
     ...formDataBodySerializer,
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload',
     ...options,
     headers: {
@@ -1434,7 +2339,15 @@ export const reuploadDatasetDatasetsDatasetIdReuploadPost = (options) => (option
  * Request presigned URL(s) for direct-to-S3 reupload.
  */
 export const requestPresignedReuploadDatasetsDatasetIdReuploadPresignedPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload/presigned',
     ...options,
     headers: {
@@ -1448,7 +2361,15 @@ export const requestPresignedReuploadDatasetsDatasetIdReuploadPresignedPost = (o
  * Notify that direct-to-S3 reupload is complete.
  */
 export const completePresignedReuploadDatasetsDatasetIdReuploadPresignedJobIdCompletePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload/presigned/{job_id}/complete',
     ...options,
     headers: {
@@ -1462,7 +2383,15 @@ export const completePresignedReuploadDatasetsDatasetIdReuploadPresignedJobIdCom
  * Preview a remote service layer for dataset re-upload.
  */
 export const reuploadServicePreviewDatasetsDatasetIdReuploadServicePreviewPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload/service/preview',
     ...options,
     headers: {
@@ -1476,7 +2405,15 @@ export const reuploadServicePreviewDatasetsDatasetIdReuploadServicePreviewPost =
  * Commit a re-upload, queuing the background swap task.
  */
 export const reuploadCommitDatasetsDatasetIdReuploadJobIdCommitPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload/{job_id}/commit',
     ...options,
     headers: {
@@ -1496,7 +2433,15 @@ export const reuploadCommitDatasetsDatasetIdReuploadJobIdCommitPost = (options)
  * layer; omit it to get the default first-layer metadata.
  */
 export const reuploadPreviewDatasetsDatasetIdReuploadJobIdPreviewPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/reupload/{job_id}/preview',
     ...options,
     headers: {
@@ -1513,7 +2458,15 @@ export const reuploadPreviewDatasetsDatasetIdReuploadJobIdPreviewPost = (options
  * Supports column filtering via query params: ``filter[column_name]=value``.
  */
 export const getDatasetRowsEndpointDatasetsDatasetIdRowsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/rows/',
     ...options
 });
@@ -1526,7 +2479,15 @@ export const getDatasetRowsEndpointDatasetsDatasetIdRowsGet = (options) => (opti
  * draft -> ready -> internal -> published (and back one step).
  */
 export const updatePublicationStatusDatasetsDatasetIdStatusPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/status/',
     ...options,
     headers: {
@@ -1543,7 +2504,15 @@ export const updatePublicationStatusDatasetsDatasetIdStatusPatch = (options) =>
  * (e.g. draft -> ready -> internal -> published) completes server-side.
  */
 export const setTargetStatusDatasetsDatasetIdTargetStatusPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/target-status/',
     ...options,
     headers: {
@@ -1562,7 +2531,15 @@ export const setTargetStatusDatasetsDatasetIdTargetStatusPatch = (options) => (o
  * a single query).
  */
 export const validateDatasetDatasetsDatasetIdValidateGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/validate/',
     ...options
 });
@@ -1572,7 +2549,15 @@ export const validateDatasetDatasetsDatasetIdValidateGet = (options) => (options
  * Get paginated version history for a dataset.
  */
 export const getDatasetVersionsEndpointDatasetsDatasetIdVersionsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/versions/',
     ...options
 });
@@ -1582,7 +2567,15 @@ export const getDatasetVersionsEndpointDatasetsDatasetIdVersionsGet = (options)
  * Return ordered list of COG sources for a VRT dataset.
  */
 export const listVrtSourcesDatasetsDatasetIdVrtSourcesGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/vrt-sources/',
     ...options
 });
@@ -1592,7 +2585,15 @@ export const listVrtSourcesDatasetsDatasetIdVrtSourcesGet = (options) => (option
  * Return paginated generation history for a VRT dataset.
  */
 export const listVrtGenerationsDatasetsDatasetIdVrtGenerationsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/vrt/generations/',
     ...options
 });
@@ -1602,7 +2603,15 @@ export const listVrtGenerationsDatasetsDatasetIdVrtGenerationsGet = (options) =>
  * Trigger manual VRT regeneration with advisory lock to prevent concurrent rebuilds.
  */
 export const regenerateVrtEndpointDatasetsDatasetIdVrtRegeneratePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/vrt/regenerate/',
     ...options
 });
@@ -1612,7 +2621,15 @@ export const regenerateVrtEndpointDatasetsDatasetIdVrtRegeneratePost = (options)
  * Return VRT dataset status, last generation time, source count, and per-source health.
  */
 export const getVrtStatusDatasetsDatasetIdVrtStatusGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/datasets/{dataset_id}/vrt/status/',
     ...options
 });
@@ -1643,7 +2660,15 @@ export const healthHealthGet = (options) => (options?.client ?? client).get({ ur
  * Permission: same as POST /ingest/commit/{job_id} — 'upload' capability.
  */
 export const commitFanOutIngestCommitFanOutJobIdPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/commit-fan-out/{job_id}',
     ...options,
     headers: {
@@ -1660,7 +2685,15 @@ export const commitFanOutIngestCommitFanOutJobIdPost = (options) => (options.cli
  * Only callable on jobs with status 'pending'.
  */
 export const commitImportIngestCommitJobIdPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/commit/{job_id}',
     ...options,
     headers: {
@@ -1679,7 +2712,15 @@ export const commitImportIngestCommitJobIdPost = (options) => (options.client ??
  * thousands of orphan tables don't blow up the response payload.
  */
 export const discoverTablesIngestDiscoverGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/discover/',
     ...options
 });
@@ -1689,7 +2730,15 @@ export const discoverTablesIngestDiscoverGet = (options) => (options?.client ??
  * Apply a versioned manifest through the ingest service layer.
  */
 export const applyManifestEndpointIngestManifestApplyPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/manifest/apply',
     ...options,
     headers: {
@@ -1707,7 +2756,15 @@ export const applyManifestEndpointIngestManifestApplyPost = (options) => (option
  * Only callable on jobs with status 'pending'.
  */
 export const previewFileIngestPreviewJobIdPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/preview/{job_id}',
     ...options
 });
@@ -1720,7 +2777,15 @@ export const previewFileIngestPreviewJobIdPost = (options) => (options.client ??
  * catalog entry.
  */
 export const registerTableIngestRegisterPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/register/',
     ...options,
     headers: {
@@ -1739,7 +2804,15 @@ export const registerTableIngestRegisterPost = (options) => (options.client ?? c
  * removing the sequential per-table latency (PERF-3).
  */
 export const bulkRegisterTablesIngestRegisterBulkPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/register/bulk/',
     ...options,
     headers: {
@@ -1757,7 +2830,15 @@ export const bulkRegisterTablesIngestRegisterBulkPost = (options) => (options.cl
  */
 export const uploadFileIngestUploadPost = (options) => (options.client ?? client).post({
     ...formDataBodySerializer,
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/upload',
     ...options,
     headers: {
@@ -1771,7 +2852,15 @@ export const uploadFileIngestUploadPost = (options) => (options.client ?? client
  * Return upload configuration including presigned upload availability.
  */
 export const getUploadConfigIngestUploadConfigGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/upload/config',
     ...options
 });
@@ -1781,7 +2870,15 @@ export const getUploadConfigIngestUploadConfigGet = (options) => (options?.clien
  * Request presigned URL(s) for direct-to-S3 file upload.
  */
 export const requestPresignedUploadIngestUploadPresignedPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/upload/presigned',
     ...options,
     headers: {
@@ -1795,7 +2892,15 @@ export const requestPresignedUploadIngestUploadPresignedPost = (options) => (opt
  * Notify that direct-to-S3 upload is complete.
  */
 export const completePresignedUploadIngestUploadPresignedJobIdCompletePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/upload/presigned/{job_id}/complete',
     ...options,
     headers: {
@@ -1813,7 +2918,15 @@ export const completePresignedUploadIngestUploadPresignedJobIdCompletePost = (op
  * ``ingest.service.create_vrt_job`` (K5 extraction).
  */
 export const createVrtIngestVrtCreatePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/vrt/create',
     ...options,
     headers: {
@@ -1832,7 +2945,15 @@ export const createVrtIngestVrtCreatePost = (options) => (options.client ?? clie
  * Returns 422 if the source is incompatible with existing sources.
  */
 export const addVrtSourceIngestVrtDatasetIdSourcesPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/vrt/{dataset_id}/sources/',
     ...options,
     headers: {
@@ -1851,7 +2972,15 @@ export const addVrtSourceIngestVrtDatasetIdSourcesPost = (options) => (options.c
  * Returns 404 if the source is not linked to the VRT.
  */
 export const removeVrtSourceIngestVrtDatasetIdSourcesSourceDatasetIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/ingest/vrt/{dataset_id}/sources/{source_dataset_id}/',
     ...options
 });
@@ -1874,7 +3003,15 @@ export const removeVrtSourceIngestVrtDatasetIdSourcesSourceDatasetIdDelete = (op
  * user, to avoid leaking job existence (see visibility check below).
  */
 export const getJobStatusByDatasetJobsByDatasetDatasetIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/jobs/by-dataset/{dataset_id}',
     ...options
 });
@@ -1890,7 +3027,15 @@ export const getJobStatusByDatasetJobsByDatasetDatasetIdGet = (options) => (opti
  * that interval.
  */
 export const cleanupStaleJobsJobsCleanupStalePost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/jobs/cleanup/stale/',
     ...options
 });
@@ -1902,7 +3047,15 @@ export const cleanupStaleJobsJobsCleanupStalePost = (options) => (options?.clien
  * Only the job creator or an admin can view job status.
  */
 export const getJobStatusJobsJobIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/jobs/{job_id}',
     ...options
 });
@@ -1915,7 +3068,15 @@ export const getJobStatusJobsJobIdGet = (options) => (options.client ?? client).
  * still exist (preserved on failure for retry).
  */
 export const retryJobJobsJobIdRetryPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/jobs/{job_id}/retry',
     ...options
 });
@@ -1931,7 +3092,15 @@ export const retryJobJobsJobIdRetryPost = (options) => (options.client ?? client
  * Requires editor or admin role.
  */
 export const createLayerEndpointLayersPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/',
     ...options,
     headers: {
@@ -1945,7 +3114,15 @@ export const createLayerEndpointLayersPost = (options) => (options.client ?? cli
  * Add a column to an existing layer.
  */
 export const addColumnEndpointLayersDatasetIdColumnsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/{dataset_id}/columns/',
     ...options,
     headers: {
@@ -1959,7 +3136,15 @@ export const addColumnEndpointLayersDatasetIdColumnsPost = (options) => (options
  * Remove a column from an existing layer.
  */
 export const dropColumnEndpointLayersDatasetIdColumnsColumnNameDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/{dataset_id}/columns/{column_name}',
     ...options
 });
@@ -1969,7 +3154,15 @@ export const dropColumnEndpointLayersDatasetIdColumnsColumnNameDelete = (options
  * Rename a column on an existing layer.
  */
 export const renameColumnEndpointLayersDatasetIdColumnsColumnNameNamePatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/{dataset_id}/columns/{column_name}/name',
     ...options,
     headers: {
@@ -1987,7 +3180,15 @@ export const renameColumnEndpointLayersDatasetIdColumnsColumnNameNamePatch = (op
  * titles may belong to other users and are not exposed here.
  */
 export const columnReferencesEndpointLayersDatasetIdColumnsColumnNameReferencesGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/{dataset_id}/columns/{column_name}/references',
     ...options
 });
@@ -2000,7 +3201,15 @@ export const columnReferencesEndpointLayersDatasetIdColumnsColumnNameReferencesG
  * cast cause the request to fail and roll back.
  */
 export const alterColumnTypeEndpointLayersDatasetIdColumnsColumnNameTypePatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/layers/{dataset_id}/columns/{column_name}/type',
     ...options,
     headers: {
@@ -2017,7 +3226,15 @@ export const alterColumnTypeEndpointLayersDatasetIdColumnsColumnNameTypePatch =
  * sort_dir (asc/desc), and visibility filter (private/internal/public).
  */
 export const listMapsEndpointMapsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/',
     ...options
 });
@@ -2027,7 +3244,15 @@ export const listMapsEndpointMapsGet = (options) => (options?.client ?? client).
  * Create a new map.
  */
 export const createMapEndpointMapsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/',
     ...options,
     headers: {
@@ -2041,7 +3266,15 @@ export const createMapEndpointMapsPost = (options) => (options.client ?? client)
  * List reusable default and uploaded map icons.
  */
 export const listMapIconsEndpointMapsIconsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/icons',
     ...options
 });
@@ -2052,7 +3285,15 @@ export const listMapIconsEndpointMapsIconsGet = (options) => (options?.client ??
  */
 export const uploadMapIconEndpointMapsIconsPost = (options) => (options.client ?? client).post({
     ...formDataBodySerializer,
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/icons',
     ...options,
     headers: {
@@ -2086,7 +3327,15 @@ export const getMapIconAssetEndpointMapsIconsIconIdAssetGet = (options) => (opti
  * request type.
  */
 export const importMapStyleEndpointMapsImportPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/import',
     ...options,
     headers: {
@@ -2109,7 +3358,15 @@ export const importMapStyleEndpointMapsImportPost = (options) => (options.client
  * layers the token's scope authorizes (SEC-022 capability posture).
  */
 export const getSharedMapEndpointMapsSharedTokenGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/shared/{token}',
     ...options
 });
@@ -2131,7 +3388,15 @@ export const getGeolensSpritePngEndpointMapsSpritesGeolensPngGet = (options) =>
  * Delete a map. Only the owner or an admin can delete.
  */
 export const deleteMapEndpointMapsMapIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}',
     ...options
 });
@@ -2141,7 +3406,15 @@ export const deleteMapEndpointMapsMapIdDelete = (options) => (options.client ??
  * Get a single map with its layers.
  */
 export const getMapEndpointMapsMapIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}',
     ...options
 });
@@ -2151,7 +3424,15 @@ export const getMapEndpointMapsMapIdGet = (options) => (options.client ?? client
  * Update a map's metadata and/or replace its layers.
  */
 export const updateMapEndpointMapsMapIdPut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}',
     ...options,
     headers: {
@@ -2165,7 +3446,15 @@ export const updateMapEndpointMapsMapIdPut = (options) => (options.client ?? cli
  * Return server-confirmed route access for the map viewer gate.
  */
 export const getMapAccessEndpointMapsMapIdAccessGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/access/',
     ...options
 });
@@ -2175,7 +3464,15 @@ export const getMapAccessEndpointMapsMapIdAccessGet = (options) => (options.clie
  * Fork a map with RBAC-filtered layers. Any authenticated user can fork.
  */
 export const duplicateMapEndpointMapsMapIdDuplicatePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/duplicate/',
     ...options
 });
@@ -2185,7 +3482,15 @@ export const duplicateMapEndpointMapsMapIdDuplicatePost = (options) => (options.
  * List all embed tokens for a map.
  */
 export const listEmbedTokensEndpointMapsMapIdEmbedTokensGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/embed-tokens/',
     ...options
 });
@@ -2198,7 +3503,15 @@ export const listEmbedTokensEndpointMapsMapIdEmbedTokensGet = (options) => (opti
  * and non-empty origin restrictions require advanced sharing controls.
  */
 export const createEmbedTokenEndpointMapsMapIdEmbedTokensPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/embed-tokens/',
     ...options,
     headers: {
@@ -2212,7 +3525,15 @@ export const createEmbedTokenEndpointMapsMapIdEmbedTokensPost = (options) => (op
  * Revoke an embed token.
  */
 export const revokeEmbedTokenEndpointMapsMapIdEmbedTokensTokenIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/embed-tokens/{token_id}/',
     ...options
 });
@@ -2224,7 +3545,15 @@ export const revokeEmbedTokenEndpointMapsMapIdEmbedTokensTokenIdDelete = (option
  * Null clears restrictions. Non-empty origin restrictions require advanced sharing controls.
  */
 export const updateEmbedTokenEndpointMapsMapIdEmbedTokensTokenIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/embed-tokens/{token_id}/',
     ...options,
     headers: {
@@ -2238,7 +3567,15 @@ export const updateEmbedTokenEndpointMapsMapIdEmbedTokensTokenIdPatch = (options
  * Return recent builder edit history for a map.
  */
 export const getMapHistoryEndpointMapsMapIdHistoryGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/history',
     ...options
 });
@@ -2257,7 +3594,15 @@ export const getMapHistoryEndpointMapsMapIdHistoryGet = (options) => (options.cl
  * the trailing-slash form is a hidden alias.
  */
 export const patchMapLayersEndpointMapsMapIdLayersPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/layers',
     ...options,
     headers: {
@@ -2280,7 +3625,15 @@ export const patchMapLayersEndpointMapsMapIdLayersPatch = (options) => (options.
  * hidden alias for callers that send the slash.
  */
 export const addLayerEndpointMapsMapIdLayersPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/layers',
     ...options,
     headers: {
@@ -2302,7 +3655,15 @@ export const addLayerEndpointMapsMapIdLayersPost = (options) => (options.client
  * responsibility if all ids fail.
  */
 export const bulkDeleteLayersEndpointMapsMapIdLayersBulkDeletePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/layers/bulk-delete',
     ...options,
     headers: {
@@ -2316,7 +3677,15 @@ export const bulkDeleteLayersEndpointMapsMapIdLayersBulkDeletePost = (options) =
  * Remove a layer from a map.
  */
 export const removeLayerEndpointMapsMapIdLayersLayerIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/layers/{layer_id}',
     ...options
 });
@@ -2330,7 +3699,15 @@ export const removeLayerEndpointMapsMapIdLayersLayerIdDelete = (options) => (opt
  * but reads ``og_image_uri`` and uses the ``maps/og-images/`` key space.
  */
 export const getOgImageMapsMapIdOgImageGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/og-image/',
     ...options
 });
@@ -2351,7 +3728,15 @@ export const getOgImageMapsMapIdOgImageGet = (options) => (options.client ?? cli
  * contract. Auth and PIL-verify rules are identical to upload_thumbnail.
  */
 export const uploadOgImageMapsMapIdOgImagePut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/og-image/',
     ...options,
     headers: {
@@ -2365,7 +3750,15 @@ export const uploadOgImageMapsMapIdOgImagePut = (options) => (options.client ??
  * Revoke share token(s) for a map. Owner or admin only.
  */
 export const revokeMapShareEndpointMapsMapIdShareDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/share/',
     ...options
 });
@@ -2375,7 +3768,15 @@ export const revokeMapShareEndpointMapsMapIdShareDelete = (options) => (options.
  * Return the active share token for a map, or null if none exists.
  */
 export const getMapShareTokenEndpointMapsMapIdShareGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/share/',
     ...options
 });
@@ -2384,10 +3785,18 @@ export const getMapShareTokenEndpointMapsMapIdShareGet = (options) => (options.c
  *
  * Update expiration on an existing share token. Owner or admin only.
  *
- * Null clears expiration.
+ * A fixed-day preset is always available. Null clears expiration.
  */
 export const updateMapShareTokenEndpointMapsMapIdSharePatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/share/',
     ...options,
     headers: {
@@ -2401,7 +3810,15 @@ export const updateMapShareTokenEndpointMapsMapIdSharePatch = (options) => (opti
  * Create or retrieve a share token for a public map.
  */
 export const shareMapEndpointMapsMapIdSharePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/share/',
     ...options,
     headers: {
@@ -2415,7 +3832,15 @@ export const shareMapEndpointMapsMapIdSharePost = (options) => (options.client ?
  * Export a saved map as a complete MapLibre style JSON document.
  */
 export const exportMapStyleEndpointMapsMapIdStyleJsonGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/style.json',
     ...options
 });
@@ -2425,7 +3850,15 @@ export const exportMapStyleEndpointMapsMapIdStyleJsonGet = (options) => (options
  * Serve map thumbnail image from storage (visibility-checked).
  */
 export const getThumbnailMapsMapIdThumbnailGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/thumbnail/',
     ...options
 });
@@ -2438,7 +3871,15 @@ export const getThumbnailMapsMapIdThumbnailGet = (options) => (options.client ??
  * bytes to the configured storage provider, and stores the storage key.
  */
 export const uploadThumbnailMapsMapIdThumbnailPut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/thumbnail/',
     ...options,
     headers: {
@@ -2452,7 +3893,15 @@ export const uploadThumbnailMapsMapIdThumbnailPut = (options) => (options.client
  * Check if a map has non-public datasets. Informational only.
  */
 export const visibilityCheckEndpointMapsMapIdVisibilityCheckGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/maps/{map_id}/visibility-check/',
     ...options
 });
@@ -2462,7 +3911,15 @@ export const visibilityCheckEndpointMapsMapIdVisibilityCheckGet = (options) => (
  * List all contacts for a record.
  */
 export const listContactsEndpointRecordsRecordIdContactsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/contacts/',
     ...options
 });
@@ -2472,7 +3929,15 @@ export const listContactsEndpointRecordsRecordIdContactsGet = (options) => (opti
  * Create a new contact for a record.
  */
 export const createContactEndpointRecordsRecordIdContactsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/contacts/',
     ...options,
     headers: {
@@ -2486,7 +3951,15 @@ export const createContactEndpointRecordsRecordIdContactsPost = (options) => (op
  * Delete a contact.
  */
 export const deleteContactEndpointRecordsRecordIdContactsContactIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/contacts/{contact_id}/',
     ...options
 });
@@ -2496,7 +3969,15 @@ export const deleteContactEndpointRecordsRecordIdContactsContactIdDelete = (opti
  * Update a contact.
  */
 export const updateContactEndpointRecordsRecordIdContactsContactIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/contacts/{contact_id}/',
     ...options,
     headers: {
@@ -2510,7 +3991,15 @@ export const updateContactEndpointRecordsRecordIdContactsContactIdPatch = (optio
  * List all distributions for a record.
  */
 export const listDistributionsEndpointRecordsRecordIdDistributionsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/distributions/',
     ...options
 });
@@ -2520,7 +4009,15 @@ export const listDistributionsEndpointRecordsRecordIdDistributionsGet = (options
  * Create a manual distribution for a record.
  */
 export const createDistributionEndpointRecordsRecordIdDistributionsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/distributions/',
     ...options,
     headers: {
@@ -2534,7 +4031,15 @@ export const createDistributionEndpointRecordsRecordIdDistributionsPost = (optio
  * Delete a distribution (manual only; auto-generated distributions are immutable).
  */
 export const deleteDistributionEndpointRecordsRecordIdDistributionsDistributionIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/distributions/{distribution_id}/',
     ...options
 });
@@ -2544,7 +4049,15 @@ export const deleteDistributionEndpointRecordsRecordIdDistributionsDistributionI
  * Update a distribution (manual only; auto-generated distributions are immutable).
  */
 export const updateDistributionEndpointRecordsRecordIdDistributionsDistributionIdPatch = (options) => (options.client ?? client).patch({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/distributions/{distribution_id}/',
     ...options,
     headers: {
@@ -2558,7 +4071,15 @@ export const updateDistributionEndpointRecordsRecordIdDistributionsDistributionI
  * List all keywords for a record.
  */
 export const listKeywordsEndpointRecordsRecordIdKeywordsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/keywords/',
     ...options
 });
@@ -2568,7 +4089,15 @@ export const listKeywordsEndpointRecordsRecordIdKeywordsGet = (options) => (opti
  * Create a new keyword for a record.
  */
 export const createKeywordEndpointRecordsRecordIdKeywordsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/keywords/',
     ...options,
     headers: {
@@ -2582,17 +4111,91 @@ export const createKeywordEndpointRecordsRecordIdKeywordsPost = (options) => (op
  * Delete a keyword.
  */
 export const deleteKeywordEndpointRecordsRecordIdKeywordsKeywordIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/records/{record_id}/keywords/{keyword_id}/',
     ...options
 });
+/**
+ * List Translations Endpoint
+ *
+ * List localized title/summary variants visible with the parent record.
+ */
+export const listTranslationsEndpointRecordsRecordIdTranslationsGet = (options) => (options.client ?? client).get({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/records/{record_id}/translations/',
+    ...options
+});
+/**
+ * Delete Translation Endpoint
+ *
+ * Delete one localized title/summary variant.
+ */
+export const deleteTranslationEndpointRecordsRecordIdTranslationsLanguageDelete = (options) => (options.client ?? client).delete({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/records/{record_id}/translations/{language}/',
+    ...options
+});
+/**
+ * Upsert Translation Endpoint
+ *
+ * Create or replace one localized title/summary variant.
+ */
+export const upsertTranslationEndpointRecordsRecordIdTranslationsLanguagePut = (options) => (options.client ?? client).put({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/records/{record_id}/translations/{language}/',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * Search Datasets Endpoint
  *
  * Search datasets with text, spatial, and faceted filters.
  */
 export const searchDatasetsEndpointSearchDatasetsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/datasets/',
     ...options,
     headers: {
@@ -2606,7 +4209,15 @@ export const searchDatasetsEndpointSearchDatasetsGet = (options) => (options?.cl
  * Return record_type facet counts for the given filters.
  */
 export const searchFacetsEndpointSearchFacetsGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/facets/',
     ...options
 });
@@ -2616,7 +4227,15 @@ export const searchFacetsEndpointSearchFacetsGet = (options) => (options?.client
  * List saved searches for the authenticated user.
  */
 export const listSavedSearchesEndpointSearchSavedGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/saved/',
     ...options
 });
@@ -2626,7 +4245,15 @@ export const listSavedSearchesEndpointSearchSavedGet = (options) => (options?.cl
  * Save a search query with a name for later reuse.
  */
 export const createSavedSearchEndpointSearchSavedPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/saved/',
     ...options,
     headers: {
@@ -2640,7 +4267,15 @@ export const createSavedSearchEndpointSearchSavedPost = (options) => (options.cl
  * Delete a saved search.
  */
 export const deleteSavedSearchEndpointSearchSavedSearchIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/saved/{search_id}',
     ...options
 });
@@ -2650,10 +4285,83 @@ export const deleteSavedSearchEndpointSearchSavedSearchIdDelete = (options) => (
  * Get a single saved search by ID.
  */
 export const getSavedSearchEndpointSearchSavedSearchIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/search/saved/{search_id}',
     ...options
 });
+/**
+ * List Connectors Endpoint
+ *
+ * List persistent connectors supplied by an installed overlay.
+ *
+ * Community's no-op extension returns an empty list; one-shot WFS, OGC API,
+ * ArcGIS, and STAC imports remain on their existing free endpoints.
+ */
+export const listConnectorsEndpointServicesConnectorsGet = (options) => (options?.client ?? client).get({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/services/connectors/',
+    ...options
+});
+/**
+ * Discover Connector Resources Endpoint
+ *
+ * Validate connector config and discover non-secret source resources.
+ */
+export const discoverConnectorResourcesEndpointServicesConnectorsConnectorNameDiscoverPost = (options) => (options.client ?? client).post({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/services/connectors/{connector_name}/discover/',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Dispatch Connector Ingest Endpoint
+ *
+ * Dispatch an overlay-owned ingest and return its opaque job id.
+ */
+export const dispatchConnectorIngestEndpointServicesConnectorsConnectorNameIngestPost = (options) => (options.client ?? client).post({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/services/connectors/{connector_name}/ingest/',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * Preview Service Layer
  *
@@ -2664,7 +4372,15 @@ export const getSavedSearchEndpointSearchSavedSearchIdGet = (options) => (option
  * ready for the existing commit flow.
  */
 export const previewServiceLayerServicesPreviewPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/preview/',
     ...options,
     headers: {
@@ -2681,7 +4397,15 @@ export const previewServiceLayerServicesPreviewPost = (options) => (options.clie
  * service, and returns a unified layer list. All attempts are audit-logged.
  */
 export const probeServiceUrlServicesProbePost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/probe/',
     ...options,
     headers: {
@@ -2695,7 +4419,15 @@ export const probeServiceUrlServicesProbePost = (options) => (options.client ??
  * List collections from a connected STAC API.
  */
 export const stacCollectionsServicesStacCollectionsPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/stac/collections',
     ...options,
     headers: {
@@ -2709,7 +4441,15 @@ export const stacCollectionsServicesStacCollectionsPost = (options) => (options.
  * Connect to a STAC API and validate the endpoint.
  */
 export const stacConnectServicesStacConnectPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/stac/connect',
     ...options,
     headers: {
@@ -2727,7 +4467,15 @@ export const stacConnectServicesStacConnectPost = (options) => (options.client ?
  * remote source — no file download required.
  */
 export const stacImportServicesStacImportPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/stac/import',
     ...options,
     headers: {
@@ -2741,7 +4489,15 @@ export const stacImportServicesStacImportPost = (options) => (options.client ??
  * Search items in a STAC API with spatial/temporal filters.
  */
 export const stacSearchServicesStacSearchPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/services/stac/search',
     ...options,
     headers: {
@@ -2755,7 +4511,15 @@ export const stacSearchServicesStacSearchPost = (options) => (options.client ??
  * Update one or more settings (admin only). Returns updated settings.
  */
 export const updateSettingsSettingsPut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/',
     ...options,
     headers: {
@@ -2769,7 +4533,15 @@ export const updateSettingsSettingsPut = (options) => (options.client ?? client)
  * Return all settings grouped by tab with source indicators (admin only).
  */
 export const getAllSettingsSettingsAllGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/all/',
     ...options
 });
@@ -2779,7 +4551,15 @@ export const getAllSettingsSettingsAllGet = (options) => (options?.client ?? cli
  * Return which LLM API keys are configured (without exposing values).
  */
 export const getApiKeyStatusSettingsApiKeyStatusGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/api-key-status/',
     ...options
 });
@@ -2824,16 +4604,53 @@ export const getConfigModeSettingsConfigModeGet = (options) => (options?.client
  * Probe the configured embedding model and return its output dimensions.
  */
 export const detectEmbeddingDimsSettingsDetectEmbeddingDimsPost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/detect-embedding-dims/',
     ...options
 });
+/**
+ * Edition Info
+ *
+ * Return runtime capability metadata. Public, no auth required.
+ */
+export const editionInfoSettingsEditionGet = (options) => (options?.client ?? client).get({ url: '/settings/edition/', ...options });
 /**
  * Get Enabled Plugins
  *
  * Return enabled plugin IDs. null = no restriction (all shown), [] = none, [...ids] = only those.
  */
 export const getEnabledPluginsSettingsEnabledPluginsGet = (options) => (options?.client ?? client).get({ url: '/settings/enabled-plugins/', ...options });
+/**
+ * Get Enterprise Only Tabs
+ *
+ * Return the canonical list of restricted Settings tab keys.
+ *
+ * The frontend AdminSidebar uses this to avoid rendering tabs that the
+ * current runtime does not expose. The backend write gate uses the same set
+ * to reject writes to restricted settings, keeping UI and API behavior
+ * aligned.
+ */
+export const getEnterpriseOnlyTabsSettingsEnterpriseTabsGet = (options) => (options?.client ?? client).get({
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
+    url: '/settings/enterprise-tabs/',
+    ...options
+});
 /**
  * Get Feature Flags
  *
@@ -2856,7 +4673,15 @@ export const getMapDefaultsSettingsMapDefaultsGet = (options) => (options?.clien
  * (NOTIF-05 / T-1229-09).
  */
 export const getNotificationStatusSettingsNotificationsStatusGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/notifications/status/',
     ...options
 });
@@ -2874,7 +4699,15 @@ export const getNotificationStatusSettingsNotificationsStatusGet = (options) =>
  * NotificationTestChannelResult for display in the admin UI.
  */
 export const sendTestNotificationSettingsNotificationsTestPost = (options) => (options?.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/notifications/test/',
     ...options
 });
@@ -2884,7 +4717,15 @@ export const sendTestNotificationSettingsNotificationsTestPost = (options) => (o
  * List all OAuth providers (admin only).
  */
 export const listOauthProvidersSettingsOauthProvidersGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/oauth-providers/',
     ...options
 });
@@ -2898,7 +4739,15 @@ export const listOauthProvidersSettingsOauthProvidersGet = (options) => (options
  * in the request body (SAML-12 / Pitfall 9 / T-217-03-AUDIT-LEAK).
  */
 export const createOauthProviderSettingsOauthProvidersPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/oauth-providers/',
     ...options,
     headers: {
@@ -2917,7 +4766,15 @@ export const createOauthProviderSettingsOauthProvidersPost = (options) => (optio
  * delete events too).
  */
 export const deleteOauthProviderSettingsOauthProvidersProviderIdDelete = (options) => (options.client ?? client).delete({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/oauth-providers/{provider_id}',
     ...options
 });
@@ -2933,7 +4790,15 @@ export const deleteOauthProviderSettingsOauthProvidersProviderIdDelete = (option
  * T-217-03-AUDIT-LEAK HIGH severity).
  */
 export const updateOauthProviderSettingsOauthProvidersProviderIdPut = (options) => (options.client ?? client).put({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/oauth-providers/{provider_id}',
     ...options,
     headers: {
@@ -2947,7 +4812,15 @@ export const updateOauthProviderSettingsOauthProvidersProviderIdPut = (options)
  * Reset one or more settings to their defaults (admin only). Returns updated settings.
  */
 export const resetSettingsSettingsResetPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/settings/reset/',
     ...options,
     headers: {
@@ -2985,7 +4858,15 @@ export const getCollectionStacCollectionsCollectionIdGet = (options) => (options
  * List STAC Items within a collection.
  */
 export const getCollectionItemsStacCollectionsCollectionIdItemsGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/stac/collections/{collection_id}/items',
     ...options
 });
@@ -2995,7 +4876,15 @@ export const getCollectionItemsStacCollectionsCollectionIdItemsGet = (options) =
  * Get a single STAC Item within a collection.
  */
 export const getCollectionItemStacCollectionsCollectionIdItemsItemIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/stac/collections/{collection_id}/items/{item_id}',
     ...options
 });
@@ -3011,7 +4900,15 @@ export const conformanceStacConformanceGet = (options) => (options?.client ?? cl
  * Get a single STAC Item by dataset ID.
  */
 export const getItemStacItemsItemIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/stac/items/{item_id}',
     ...options
 });
@@ -3021,7 +4918,15 @@ export const getItemStacItemsItemIdGet = (options) => (options.client ?? client)
  * STAC Item Search (GET).
  */
 export const searchGetStacSearchGet = (options) => (options?.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/stac/search',
     ...options
 });
@@ -3031,7 +4936,15 @@ export const searchGetStacSearchGet = (options) => (options?.client ?? client).g
  * STAC Item Search (POST with JSON body).
  */
 export const searchPostStacSearchPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/stac/search',
     ...options,
     headers: {
@@ -3055,7 +4968,15 @@ export const searchPostStacSearchPost = (options) => (options.client ?? client).
  * styling and popups keep working on the server-cluster path.
  */
 export const clusterTileEndpointTilesClustersTablePathZXYPbfGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/clusters/{table_path}/{z}/{x}/{y}.pbf',
     ...options
 });
@@ -3074,7 +4995,15 @@ export const clusterTileEndpointTilesClustersTablePathZXYPbfGet = (options) => (
  * 404 if dataset not found, not a raster, or has no raster asset
  */
 export const rasterAuthCheckTilesRasterAuthCheckGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/raster-auth-check/',
     ...options
 });
@@ -3105,7 +5034,15 @@ export const rasterAuthCheckTilesRasterAuthCheckGet = (options) => (options.clie
  * Must be > 0.
  */
 export const rasterTileProxyTilesRasterProxyDatasetIdZXYFmtGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/raster-proxy/{dataset_id}/{z}/{x}/{y}.{fmt}',
     ...options
 });
@@ -3123,7 +5060,15 @@ export const rasterTileProxyTilesRasterProxyDatasetIdZXYFmtGet = (options) => (o
  * Private/restricted datasets require authentication and RBAC checks.
  */
 export const getTileTokenTilesTokenDatasetIdGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/token/{dataset_id}/',
     ...options
 });
@@ -3146,7 +5091,15 @@ export const getTileTokenTilesTokenDatasetIdGet = (options) => (options.client ?
  * builds its raster-dem source from the real bounds/maxzoom descriptor.
  */
 export const getTileTokensBatchTilesTokensPost = (options) => (options.client ?? client).post({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/tokens/',
     ...options,
     headers: {
@@ -3174,7 +5127,15 @@ export const getTileTokensBatchTilesTokensPost = (options) => (options.client ??
  * REST access to.
  */
 export const tileEndpointTilesTablePathZXYPbfGet = (options) => (options.client ?? client).get({
-    security: [{ scheme: 'bearer', type: 'http' }],
+    security: [
+        { scheme: 'bearer', type: 'http' },
+        { name: 'X-Api-Key', type: 'apiKey' },
+        {
+            in: 'query',
+            name: 'api_key',
+            type: 'apiKey'
+        }
+    ],
     url: '/tiles/{table_path}/{z}/{x}/{y}.pbf',
     ...options
 });