@zyphr-dev/node-sdk 0.1.56 → 0.1.58

package/src/src/apis/DevicesApi.ts

@@ -153,7 +153,7 @@ export interface DevicesApiInterface {
     listDevices(userId?: string, platform?: ListDevicesPlatformEnum, limit?: number, offset?: number, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceListResponse>;
 
     /**
-     * Register a device for push notifications. If the token already exists, updates it.
+     * Register a device for push notifications.  Registration is an upsert keyed on (project, token), so calling it on every app launch is safe and idempotent. Re-registering an existing token under a different `user_id` **reassigns** the device to that user — the previous association does not persist, so a push addressed to the old user will not reach this device.  `user_id` is an opaque string you choose. It is stored verbatim with no foreign key, and `POST /v1/push` matches on exactly that value. No Subscriber record is created for you.  Requires a secret API key, so call it from your backend and derive `user_id` from the authenticated session rather than the request body. 
      * @summary Register a device
      * @param {RegisterDeviceRequest} registerDeviceRequest 
      * @param {*} [options] Override http request option.
@@ -163,7 +163,7 @@ export interface DevicesApiInterface {
     registerDeviceRaw(requestParameters: DevicesApiRegisterDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceResponse>>;
 
     /**
-     * Register a device for push notifications. If the token already exists, updates it.
+     * Register a device for push notifications.  Registration is an upsert keyed on (project, token), so calling it on every app launch is safe and idempotent. Re-registering an existing token under a different `user_id` **reassigns** the device to that user — the previous association does not persist, so a push addressed to the old user will not reach this device.  `user_id` is an opaque string you choose. It is stored verbatim with no foreign key, and `POST /v1/push` matches on exactly that value. No Subscriber record is created for you.  Requires a secret API key, so call it from your backend and derive `user_id` from the authenticated session rather than the request body. 
      * Register a device
      */
     registerDevice(registerDeviceRequest: RegisterDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceResponse>;
@@ -192,7 +192,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -231,7 +238,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -270,7 +284,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -302,7 +323,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -350,7 +378,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -373,7 +408,7 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
     }
 
     /**
-     * Register a device for push notifications. If the token already exists, updates it.
+     * Register a device for push notifications.  Registration is an upsert keyed on (project, token), so calling it on every app launch is safe and idempotent. Re-registering an existing token under a different `user_id` **reassigns** the device to that user — the previous association does not persist, so a push addressed to the old user will not reach this device.  `user_id` is an opaque string you choose. It is stored verbatim with no foreign key, and `POST /v1/push` matches on exactly that value. No Subscriber record is created for you.  Requires a secret API key, so call it from your backend and derive `user_id` from the authenticated session rather than the request body. 
      * Register a device
      */
     async registerDeviceRaw(requestParameters: DevicesApiRegisterDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceResponse>> {
@@ -391,7 +426,14 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -406,7 +448,7 @@ export class DevicesApi extends runtime.BaseAPI implements DevicesApiInterface {
     }
 
     /**
-     * Register a device for push notifications. If the token already exists, updates it.
+     * Register a device for push notifications.  Registration is an upsert keyed on (project, token), so calling it on every app launch is safe and idempotent. Re-registering an existing token under a different `user_id` **reassigns** the device to that user — the previous association does not persist, so a push addressed to the old user will not reach this device.  `user_id` is an opaque string you choose. It is stored verbatim with no foreign key, and `POST /v1/push` matches on exactly that value. No Subscriber record is created for you.  Requires a secret API key, so call it from your backend and derive `user_id` from the authenticated session rather than the request body. 
      * Register a device
      */
     async registerDevice(registerDeviceRequest: RegisterDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceResponse> {

package/src/src/apis/DomainsApi.ts

@@ -216,7 +216,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -256,7 +263,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -295,7 +309,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -334,7 +355,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -366,7 +394,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -414,7 +449,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -454,7 +496,14 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({

package/src/src/apis/EmailsApi.ts

@@ -206,7 +206,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -245,7 +252,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -284,7 +298,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -332,7 +353,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -373,7 +401,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -415,7 +450,14 @@ export class EmailsApi extends runtime.BaseAPI implements EmailsApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({

package/src/src/apis/ExecutionsApi.ts

@@ -122,7 +122,14 @@ export class ExecutionsApi extends runtime.BaseAPI implements ExecutionsApiInter
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -161,7 +168,14 @@ export class ExecutionsApi extends runtime.BaseAPI implements ExecutionsApiInter
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -200,7 +214,14 @@ export class ExecutionsApi extends runtime.BaseAPI implements ExecutionsApiInter
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({

package/src/src/apis/InboundEmailApi.ts

@@ -136,7 +136,14 @@ export class InboundEmailApi extends runtime.BaseAPI implements InboundEmailApiI
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -175,7 +182,14 @@ export class InboundEmailApi extends runtime.BaseAPI implements InboundEmailApiI
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -227,7 +241,14 @@ export class InboundEmailApi extends runtime.BaseAPI implements InboundEmailApiI
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({

package/src/src/apis/InboxApi.ts

@@ -547,7 +547,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -636,7 +643,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -716,7 +730,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -764,7 +785,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -919,7 +947,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -975,7 +1010,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -1039,7 +1081,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         const headerParameters: runtime.HTTPHeaders = {};
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -1136,7 +1185,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -1215,7 +1271,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -1298,7 +1361,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({
@@ -1340,7 +1410,14 @@ export class InboxApi extends runtime.BaseAPI implements InboxApiInterface {
         headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.apiKey) {
-            headerParameters["X-API-Key"] = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+            // An unresolved credential must produce NO header, not an empty one (sc-8162).
+            {
+                const apiKeyValue = await this.configuration.apiKey("X-API-Key"); // ApiKeyAuth authentication
+
+                if (apiKeyValue) {
+                    headerParameters["X-API-Key"] = apiKeyValue;
+                }
+            }
         }
 
         const response = await this.request({