vpndetection 5.4.2 → 5.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ccf5841f50ec64ff7328341110f3ec6cd0affc6260a0588fe22cb746d5d62f1
-  data.tar.gz: 99459a01b5d0139a64d039a2259a08c965cd4319c9cae6283dbbc0b113ac5b2c
+  metadata.gz: 421b5ad5b26181627790d77ee1399551115e37480c46574220a35513721d631b
+  data.tar.gz: 585d8a6143276bb0f1920794963d47fc3a35e077bdead41ba0e3d87e8e9da08d
 SHA512:
-  metadata.gz: fbdbee3d38ba2e223be9fc4e1cb53193f71e1891f0e59351d4c59f2eb2a8cc418476f48e0b866fb7c0b6d36fbb166686c46c22049deae80403f8a9a0675ab797
-  data.tar.gz: 94d1e3c266372d5b7fe571ea2d370a38dbd91cd11f184f3f06ef7b3f231ddddbc6a261551185a9020453d0704d8911c6c8b21e6de569cb43d4a4cba562d6684f
+  metadata.gz: 3d499d7612a20b70a85712a7d364178dac45652f6fde6b2df324d3750ca3565d7910aad88d7727b9be8827eead9e61c95fde2e3221474d306ac26bdcae2241b3
+  data.tar.gz: f3df262d110d0d314890db27d20b6f1ae681d0a40eb019ab630fb21b7694e416a99ecd97bd9b6347610dbc0e6f3b397e4d302843af811bfdda0af9731be03238

data/README.md

@@ -1,4 +1,4 @@
-# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="24"/>](https://vpndetection.io/) VPNDetection Ruby Client Library
+# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="28"/>](https://vpndetection.io/) VPNDetection Ruby Client Library
 
 [![gem](https://img.shields.io/gem/v/vpndetection.svg)](https://rubygems.org/gems/vpndetection)
 [![license](https://img.shields.io/github/license/vpndetection-io/sdk-ruby.svg)](LICENSE)
@@ -220,7 +220,7 @@ There are official VPNDetection client libraries available for many languages in
 
 VPN Detection API: Accurate anonymity detection identifying VPNs, residential proxies, hosting servers, Tor nodes, CDNs, relays and more.
 
-[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="96"/>](https://vpndetection.io/)
+[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="64"/>](https://vpndetection.io/)
 
 ## License
 

data/lib/vpndetection/api/account_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api/api_keys_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api/authorization_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0
@@ -22,35 +22,35 @@ module VPNDetection
       @api_client = api_client
     end
     # Authorize
-    # The browser entry point for the authorization-code flow. This is a redirect target, not something to call from code.  An unknown `client_id` or an unregistered `redirect_uri` is shown to the USER and never redirected, because sending an error to an address we have not verified belongs to you is how an open redirector works. Everything else comes back to your `redirect_uri` with `error`, your `state`, and `iss`. 
+    # The browser entry point for the authorization-code flow. This is a redirect target, not something to call from code.  Any client may sign in without registering first by using a Client ID Metadata Document: make `client_id` an https URL that serves your client's metadata as JSON, naming that same URL as its `client_id`, with `token_endpoint_auth_method` `none` and your `redirect_uris`. An https redirect URI must be on the same origin as the `client_id`; a loopback one (`http://127.0.0.1`, `http://[::1]`, `http://localhost`) matches on any port. Such a client is granted `apikeys.use` at most.  An unknown `client_id` or an unregistered `redirect_uri` is shown to the USER and never redirected, because sending an error to an address we have not verified belongs to you is how an open redirector works. Everything else comes back to your `redirect_uri` with `error`, your `state`, and `iss`. 
     # @param client_id [String] 
     # @param redirect_uri [String] 
     # @param response_type [String] 
     # @param code_challenge [String] 
+    # @param code_challenge_method [String] S256, named explicitly. `plain`, or no method at all, is refused rather than downgraded.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :code_challenge_method S256 only. `plain` is refused rather than downgraded.
     # @option opts [String] :scope 
     # @option opts [String] :state Returned unchanged. Use it to bind the response to your request.
-    # @option opts [String] :resource RFC 8707. What the token is FOR, so it cannot be replayed elsewhere.
+    # @option opts [String] :resource RFC 8707. What the token is FOR, so it cannot be replayed elsewhere: this brand's MCP server, the only resource it issues tokens for. Anything else answers `invalid_target`. A client that names none is given that server. 
     # @return [nil]
-    def oauth_authorize(client_id, redirect_uri, response_type, code_challenge, opts = {})
-      oauth_authorize_with_http_info(client_id, redirect_uri, response_type, code_challenge, opts)
+    def oauth_authorize(client_id, redirect_uri, response_type, code_challenge, code_challenge_method, opts = {})
+      oauth_authorize_with_http_info(client_id, redirect_uri, response_type, code_challenge, code_challenge_method, opts)
       nil
     end
 
     # Authorize
-    # The browser entry point for the authorization-code flow. This is a redirect target, not something to call from code.  An unknown `client_id` or an unregistered `redirect_uri` is shown to the USER and never redirected, because sending an error to an address we have not verified belongs to you is how an open redirector works. Everything else comes back to your `redirect_uri` with `error`, your `state`, and `iss`. 
+    # The browser entry point for the authorization-code flow. This is a redirect target, not something to call from code.  Any client may sign in without registering first by using a Client ID Metadata Document: make `client_id` an https URL that serves your client's metadata as JSON, naming that same URL as its `client_id`, with `token_endpoint_auth_method` `none` and your `redirect_uris`. An https redirect URI must be on the same origin as the `client_id`; a loopback one (`http://127.0.0.1`, `http://[::1]`, `http://localhost`) matches on any port. Such a client is granted `apikeys.use` at most.  An unknown `client_id` or an unregistered `redirect_uri` is shown to the USER and never redirected, because sending an error to an address we have not verified belongs to you is how an open redirector works. Everything else comes back to your `redirect_uri` with `error`, your `state`, and `iss`. 
     # @param client_id [String] 
     # @param redirect_uri [String] 
     # @param response_type [String] 
     # @param code_challenge [String] 
+    # @param code_challenge_method [String] S256, named explicitly. `plain`, or no method at all, is refused rather than downgraded.
     # @param [Hash] opts the optional parameters
-    # @option opts [String] :code_challenge_method S256 only. `plain` is refused rather than downgraded.
     # @option opts [String] :scope 
     # @option opts [String] :state Returned unchanged. Use it to bind the response to your request.
-    # @option opts [String] :resource RFC 8707. What the token is FOR, so it cannot be replayed elsewhere.
+    # @option opts [String] :resource RFC 8707. What the token is FOR, so it cannot be replayed elsewhere: this brand's MCP server, the only resource it issues tokens for. Anything else answers `invalid_target`. A client that names none is given that server. 
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def oauth_authorize_with_http_info(client_id, redirect_uri, response_type, code_challenge, opts = {})
+    def oauth_authorize_with_http_info(client_id, redirect_uri, response_type, code_challenge, code_challenge_method, opts = {})
       if @api_client.config.debugging
         @api_client.config.logger.debug 'Calling API: AuthorizationWireApi.oauth_authorize ...'
       end
@@ -75,8 +75,13 @@ module VPNDetection
       if @api_client.config.client_side_validation && code_challenge.nil?
         fail ArgumentError, "Missing the required parameter 'code_challenge' when calling AuthorizationWireApi.oauth_authorize"
       end
+      # verify the required parameter 'code_challenge_method' is set
+      if @api_client.config.client_side_validation && code_challenge_method.nil?
+        fail ArgumentError, "Missing the required parameter 'code_challenge_method' when calling AuthorizationWireApi.oauth_authorize"
+      end
+      # verify enum value
       allowable_values = ["S256"]
-      if @api_client.config.client_side_validation && opts[:'code_challenge_method'] && !allowable_values.include?(opts[:'code_challenge_method'])
+      if @api_client.config.client_side_validation && !allowable_values.include?(code_challenge_method)
         fail ArgumentError, "invalid value for \"code_challenge_method\", must be one of #{allowable_values}"
       end
       # resource path
@@ -88,7 +93,7 @@ module VPNDetection
       query_params[:'redirect_uri'] = redirect_uri
       query_params[:'response_type'] = response_type
       query_params[:'code_challenge'] = code_challenge
-      query_params[:'code_challenge_method'] = opts[:'code_challenge_method'] if !opts[:'code_challenge_method'].nil?
+      query_params[:'code_challenge_method'] = code_challenge_method
       query_params[:'scope'] = opts[:'scope'] if !opts[:'scope'].nil?
       query_params[:'state'] = opts[:'state'] if !opts[:'state'].nil?
       query_params[:'resource'] = opts[:'resource'] if !opts[:'resource'].nil?
@@ -330,14 +335,15 @@ module VPNDetection
     end
 
     # Token
-    # Three grant types.  `urn:ietf:params:oauth:grant-type:device_code` polls a device authorization. Until the person approves it answers `authorization_pending`; poll faster than `interval` and it answers `slow_down`, which means widen your interval and keep it widened.  `authorization_code` exchanges a code from `/oauth/authorize`, with the `code_verifier` matching the challenge you sent.  `refresh_token` exchanges a refresh token. The presented token is consumed whatever happens next, so store the new one before using it. 
+    # Three grant types.  `urn:ietf:params:oauth:grant-type:device_code` polls a device authorization. Until the person approves it answers `authorization_pending`; poll faster than `interval` and it answers `slow_down`, which means widen your interval and keep it widened.  `authorization_code` exchanges a code from `/oauth/authorize`, with the `code_verifier` matching the challenge you sent and the same `redirect_uri`. A code works once: presenting it again also revokes what the first exchange issued.  `refresh_token` exchanges a refresh token. The presented token is consumed whatever happens next, so store the new one before using it. Presenting a consumed refresh token again ends the whole authorization, since it means the token was copied. 
     # @param grant_type [String] &#x60;urn:ietf:params:oauth:grant-type:device_code&#x60;, &#x60;authorization_code&#x60; or &#x60;refresh_token&#x60;.
     # @param client_id [String] 
     # @param [Hash] opts the optional parameters
     # @option opts [String] :device_code Required by the device code grant.
     # @option opts [String] :code Required by the authorization code grant.
     # @option opts [String] :code_verifier Required by the authorization code grant.
-    # @option opts [String] :redirect_uri Authorization code grant: the &#x60;redirect_uri&#x60; the code was issued against, exactly.
+    # @option opts [String] :redirect_uri Required by the authorization code grant: the &#x60;redirect_uri&#x60; the code was issued against, exactly.
+    # @option opts [String] :resource Authorization code grant, optional: RFC 8707, and it must name what was authorized.
     # @option opts [String] :refresh_token Required by the refresh token grant.
     # @return [TokenResponse]
     def oauth_token(grant_type, client_id, opts = {})
@@ -346,14 +352,15 @@ module VPNDetection
     end
 
     # Token
-    # Three grant types.  &#x60;urn:ietf:params:oauth:grant-type:device_code&#x60; polls a device authorization. Until the person approves it answers &#x60;authorization_pending&#x60;; poll faster than &#x60;interval&#x60; and it answers &#x60;slow_down&#x60;, which means widen your interval and keep it widened.  &#x60;authorization_code&#x60; exchanges a code from &#x60;/oauth/authorize&#x60;, with the &#x60;code_verifier&#x60; matching the challenge you sent.  &#x60;refresh_token&#x60; exchanges a refresh token. The presented token is consumed whatever happens next, so store the new one before using it. 
+    # Three grant types.  &#x60;urn:ietf:params:oauth:grant-type:device_code&#x60; polls a device authorization. Until the person approves it answers &#x60;authorization_pending&#x60;; poll faster than &#x60;interval&#x60; and it answers &#x60;slow_down&#x60;, which means widen your interval and keep it widened.  &#x60;authorization_code&#x60; exchanges a code from &#x60;/oauth/authorize&#x60;, with the &#x60;code_verifier&#x60; matching the challenge you sent and the same &#x60;redirect_uri&#x60;. A code works once: presenting it again also revokes what the first exchange issued.  &#x60;refresh_token&#x60; exchanges a refresh token. The presented token is consumed whatever happens next, so store the new one before using it. Presenting a consumed refresh token again ends the whole authorization, since it means the token was copied. 
     # @param grant_type [String] &#x60;urn:ietf:params:oauth:grant-type:device_code&#x60;, &#x60;authorization_code&#x60; or &#x60;refresh_token&#x60;.
     # @param client_id [String] 
     # @param [Hash] opts the optional parameters
     # @option opts [String] :device_code Required by the device code grant.
     # @option opts [String] :code Required by the authorization code grant.
     # @option opts [String] :code_verifier Required by the authorization code grant.
-    # @option opts [String] :redirect_uri Authorization code grant: the &#x60;redirect_uri&#x60; the code was issued against, exactly.
+    # @option opts [String] :redirect_uri Required by the authorization code grant: the &#x60;redirect_uri&#x60; the code was issued against, exactly.
+    # @option opts [String] :resource Authorization code grant, optional: RFC 8707, and it must name what was authorized.
     # @option opts [String] :refresh_token Required by the refresh token grant.
     # @return [Array<(TokenResponse, Integer, Hash)>] TokenResponse data, response status code and response headers
     def oauth_token_with_http_info(grant_type, client_id, opts = {})
@@ -392,6 +399,7 @@ module VPNDetection
       form_params['code'] = opts[:'code'] if !opts[:'code'].nil?
       form_params['code_verifier'] = opts[:'code_verifier'] if !opts[:'code_verifier'].nil?
       form_params['redirect_uri'] = opts[:'redirect_uri'] if !opts[:'redirect_uri'].nil?
+      form_params['resource'] = opts[:'resource'] if !opts[:'resource'].nil?
       form_params['refresh_token'] = opts[:'refresh_token'] if !opts[:'refresh_token'].nil?
 
       # http body (model)

data/lib/vpndetection/api/database_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api/entitlement_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api/lookup_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api/organization_wire_api.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api_client.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api_error.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/api_model_base.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/bogons.rb

@@ -1,6 +1,6 @@
-# Generated by sdk/common. Do not edit.
-# The canonical list lives in the monorepo and is checked against both
-# upstream definitions on every regeneration.
+# Generated. Do not edit: a regeneration overwrites it.
+# The list is checked against both upstream definitions on every
+# regeneration.
 
 module VPNDetection
   module Bogons

data/lib/vpndetection/client.rb

@@ -49,6 +49,9 @@ module VPNDetection
         Transport::Config.new(api_key: api_key, base_url: base_url, timeout: timeout),
       )
       @cache = cache ? Cache.new(max_size: cache_max_size, ttl: cache_ttl) : nil
+      # The addresses with a request in flight, each a Flight its waiters block on.
+      @flights = {}
+      @flights_lock = Mutex.new
       @concurrency = concurrency
       @retries = retries
       @database = DatabaseApi.new(@transport, retries: retries)
@@ -78,14 +81,26 @@ module VPNDetection
       Transport.checked_timeout(timeout) unless timeout.nil?
       return Bogon.result(ip) if Bogon.bogon?(ip)
 
-      hit = @cache&.get(ip)
-      return hit unless hit.nil?
+      loop do
+        hit = @cache&.get(ip)
+        return hit unless hit.nil?
 
-      result = Retries.with_retries(retries || @retries) do
-        Transport.lookup_result(@transport.lookup_request(ip, timeout: timeout).run)
+        flight, leader = board(ip)
+        return fetch(ip, retries, timeout) if flight.nil?
+
+        if leader
+          # Read once more now the address is boarded: a leader that landed
+          # between the miss above and boarding has already cached its answer.
+          hit = @cache.get(ip)
+          return unboard(ip, flight, :served, hit) unless hit.nil?
+
+          return lead(ip, flight) { fetch(ip, retries, timeout) }
+        end
+        state, value = flight.wait
+        return value if state == :served
+        raise value if state == :failed
+        # :abandoned - its leader never finished, so this caller asks again.
       end
-      @cache&.set(ip, result)
-      result
     end
 
     # Classify the address this client is calling from.
@@ -160,9 +175,27 @@ module VPNDetection
         hit = Bogon.bogon?(ip) ? Bogon.result(ip) : @cache&.get(ip)
         hit.nil? ? pending << ip : answers[ip] = hit
       end
-      unless pending.empty?
-        run_batch(pending.each_slice(BATCH_MAX).to_a, answers, limit, retries || @retries, timeout)
+      # Boarded before any chunk is built, so a lookup arriving meanwhile waits
+      # for this batch; an address already in flight is not sent again.
+      boarded = {}
+      joined = {}
+      pending.each do |ip|
+        flight, leader = board(ip)
+        if leader == false
+          joined[ip] = flight
+        else
+          boarded[ip] = flight
+        end
+      end
+      begin
+        unless boarded.empty?
+          chunks = boarded.keys.each_slice(BATCH_MAX).to_a
+          run_batch(chunks, answers, limit, retries || @retries, timeout, boarded)
+        end
+      ensure
+        boarded.each { |ip, flight| unboard(ip, flight, :abandoned) unless flight.nil? }
       end
+      joined.each { |ip, flight| answers[ip] = joined_answer(ip, flight, retries, timeout) }
 
       # Reinstated in input order: a hydra settles in completion order, and a
       # caller iterating the hash should see what they passed in.
@@ -171,11 +204,83 @@ module VPNDetection
 
     private
 
+    # Concurrent misses for one address share ONE request: 5.4.2 sent one per
+    # calling thread. The first miss boards the
+    # address and every miss after it, a batch's included, waits on its Flight.
+    class Flight
+      def initialize
+        @lock = Mutex.new
+        @landed = ConditionVariable.new
+        @state = :pending
+      end
+
+      # Settles the flight once, for every waiter: :served with a Result,
+      # :failed with an Error, or :abandoned when its leader never finished.
+      def land(state, value = nil)
+        @lock.synchronize do
+          next unless @state == :pending
+
+          @state = state
+          @value = value
+          @landed.broadcast
+        end
+      end
+
+      # Blocks until the flight lands, then [state, value].
+      def wait
+        @lock.synchronize do
+          @landed.wait(@lock) while @state == :pending
+          [@state, @value]
+        end
+      end
+    end
+
+    # [flight, true] when this caller leads the request for `ip`, [flight,
+    # false] when one is already in flight, and nil without a cache: every
+    # lookup is then served, so nothing is shared.
+    def board(ip)
+      return nil if @cache.nil?
+
+      @flights_lock.synchronize do
+        existing = @flights[ip]
+        existing ? [existing, false] : [@flights[ip] = Flight.new, true]
+      end
+    end
+
+    # Takes `ip` off the board and lands its flight. Returns `value`.
+    def unboard(ip, flight, state, value = nil)
+      @flights_lock.synchronize { @flights.delete(ip) if @flights[ip].equal?(flight) }
+      flight.land(state, value)
+      value
+    end
+
+    # Runs the request a flight is waiting on, under the options of the call
+    # that leads it. A served answer is cached before it lands; a failure
+    # reaches every waiter and is cached for none; and a leader that never
+    # finishes - a killed thread, a Timeout.timeout - abandons the flight, so
+    # its waiters ask again rather than failing with it.
+    def lead(ip, flight)
+      unboard(ip, flight, :served, yield)
+    rescue Error => e
+      unboard(ip, flight, :failed, e)
+      raise
+    ensure
+      unboard(ip, flight, :abandoned)
+    end
+
+    def fetch(ip, retries, timeout)
+      result = Retries.with_retries(retries || @retries) do
+        Transport.lookup_result(@transport.lookup_request(ip, timeout: timeout).run)
+      end
+      @cache&.set(ip, result)
+      result
+    end
+
     # One hydra per call, sized for THIS call. Reusing an instance-level hydra
     # would silently cap a per-call concurrency at the client's setting, and
     # would not be safe to drive from two threads either. Each request is one
     # chunk of up to 1000 addresses.
-    def run_batch(chunks, answers, concurrency, retries, timeout)
+    def run_batch(chunks, answers, concurrency, retries, timeout, boarded)
       hydra = Typhoeus::Hydra.new(max_concurrency: concurrency)
       attempts = Hash.new(0)
 
@@ -183,7 +288,11 @@ module VPNDetection
         request = @transport.batch_request(chunk, timeout: timeout)
         request.on_complete do |response|
           outcome = settle(chunk, response, attempts, retries, enqueue)
-          answers.merge!(outcome) unless outcome.nil?
+          outcome&.each do |ip, answer|
+            answers[ip] = answer
+            flight = boarded[ip]
+            unboard(ip, flight, answer.is_a?(Result) ? :served : :failed, answer) unless flight.nil?
+          end
         end
         hydra.queue(request)
       end
@@ -214,6 +323,17 @@ module VPNDetection
       nil
     end
 
+    # What a batch takes for an address another call was fetching: that call's
+    # answer or error, or, when its leader never finished, its own lookup.
+    def joined_answer(ip, flight, retries, timeout)
+      state, value = flight.wait
+      return value unless state == :abandoned
+
+      lookup(ip, retries: retries, timeout: timeout)
+    rescue Error => e
+      e
+    end
+
     # Every address lands in exactly one of `results` and `errors`; an address in
     # neither is the server breaking its own contract, and is reported as such
     # rather than lost.

data/lib/vpndetection/configuration.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_create_apikey_request.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_created_apikey.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_org.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_org_ref.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_org_wrap.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_rc.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_revealed_apikey.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/account_user.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/apikey_detail.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/apikey_list.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/batch_lookup_error.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/batch_lookup_request.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/batch_lookup_response.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/class_detail.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_checksums_response.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_format.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_format_size.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_list.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_metadata.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_metadata_column.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/database_version.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/db_checksums.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/device_authorization.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/download.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/download_list.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/entitlement.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/entitlement_apikey.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/entitlement_error.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/entitlement_plan.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/entitlement_usage.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/error_envelope.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/identity.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/lookup_error.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/lookup_response.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/oauth_error.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/oauth_metadata.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0
@@ -33,6 +33,9 @@ module VPNDetection
 
     attr_accessor :code_challenge_methods_supported
 
+    # Any client may sign in with an https `client_id` serving its own metadata.
+    attr_accessor :client_id_metadata_document_supported
+
     # Always `none`. Every client is public and has no secret.
     attr_accessor :token_endpoint_auth_methods_supported
 
@@ -53,6 +56,7 @@ module VPNDetection
         :'response_types_supported' => :'response_types_supported',
         :'grant_types_supported' => :'grant_types_supported',
         :'code_challenge_methods_supported' => :'code_challenge_methods_supported',
+        :'client_id_metadata_document_supported' => :'client_id_metadata_document_supported',
         :'token_endpoint_auth_methods_supported' => :'token_endpoint_auth_methods_supported',
         :'authorization_response_iss_parameter_supported' => :'authorization_response_iss_parameter_supported',
         :'service_documentation' => :'service_documentation'
@@ -81,6 +85,7 @@ module VPNDetection
         :'response_types_supported' => :'Array<String>',
         :'grant_types_supported' => :'Array<String>',
         :'code_challenge_methods_supported' => :'Array<String>',
+        :'client_id_metadata_document_supported' => :'Boolean',
         :'token_endpoint_auth_methods_supported' => :'Array<String>',
         :'authorization_response_iss_parameter_supported' => :'Boolean',
         :'service_documentation' => :'String'
@@ -159,6 +164,10 @@ module VPNDetection
         end
       end
 
+      if attributes.key?(:'client_id_metadata_document_supported')
+        self.client_id_metadata_document_supported = attributes[:'client_id_metadata_document_supported']
+      end
+
       if attributes.key?(:'token_endpoint_auth_methods_supported')
         if (value = attributes[:'token_endpoint_auth_methods_supported']).is_a?(Array)
           self.token_endpoint_auth_methods_supported = value
@@ -248,6 +257,7 @@ module VPNDetection
           response_types_supported == o.response_types_supported &&
           grant_types_supported == o.grant_types_supported &&
           code_challenge_methods_supported == o.code_challenge_methods_supported &&
+          client_id_metadata_document_supported == o.client_id_metadata_document_supported &&
           token_endpoint_auth_methods_supported == o.token_endpoint_auth_methods_supported &&
           authorization_response_iss_parameter_supported == o.authorization_response_iss_parameter_supported &&
           service_documentation == o.service_documentation
@@ -262,7 +272,7 @@ module VPNDetection
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [issuer, authorization_endpoint, token_endpoint, device_authorization_endpoint, revocation_endpoint, scopes_supported, response_types_supported, grant_types_supported, code_challenge_methods_supported, token_endpoint_auth_methods_supported, authorization_response_iss_parameter_supported, service_documentation].hash
+      [issuer, authorization_endpoint, token_endpoint, device_authorization_endpoint, revocation_endpoint, scopes_supported, response_types_supported, grant_types_supported, code_challenge_methods_supported, client_id_metadata_document_supported, token_endpoint_auth_methods_supported, authorization_response_iss_parameter_supported, service_documentation].hash
     end
 
     # Builds the object from hash

data/lib/vpndetection/models/proxy_detail.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/standing.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/models/token_response.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0
@@ -29,10 +29,10 @@ module VPNDetection
     # What was actually granted, which may be narrower than what was asked for.
     attr_accessor :scope
 
-    # Not part of OAuth. The ID of the API key the person picked when they approved, returned by every grant while this authorization may still read that key back. Absent when no key was picked, or when the person's role no longer allows reading keys back. 
+    # Not part of OAuth, and only for our own clients. The ID of the API key the person picked when they approved, returned by every grant while this authorization may still read that key back. Absent when no key was picked, or when the person's role no longer allows reading keys back. 
     attr_accessor :apikey_id
 
-    # Not part of OAuth. The API key itself, so a device ends up holding an ordinary key. Returned by the device code and authorization code grants only, never by a refresh, and only alongside `mslm:apikey_id`. Absent when that key's secret cannot be read back, which is the case for a key created before keys could be shown again in the console; a rotated key can be. 
+    # Not part of OAuth, and only for our own clients: a client that signed in with a Client ID Metadata Document never receives a key. The API key itself, so a device ends up holding an ordinary key. Returned by the device code and authorization code grants only, never by a refresh, and only alongside `mslm:apikey_id`. Absent when that key's secret cannot be read back, which is the case for a key created before keys could be shown again in the console; a rotated key can be. 
     attr_accessor :apikey
 
     # Attribute mapping from ruby-style variable name to JSON key.

data/lib/vpndetection/models/vpn_detail.rb

@@ -3,7 +3,7 @@
 
 #The VPNDetection API: classify any IP address, and download the databases behind the answers.  See https://docs.vpndetection.io for guides and https://github.com/vpndetection-io for the official client libraries. 
 
-The version of the OpenAPI document: 2026.09.21
+The version of the OpenAPI document: 2026.09.26
 Contact: support@vpndetection.io
 Generated by: https://openapi-generator.tech
 Generator version: 7.25.0

data/lib/vpndetection/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module VPNDetection
-  VERSION = '5.4.2'
+  VERSION = '5.5.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: vpndetection
 version: !ruby/object:Gem::Version
-  version: 5.4.2
+  version: 5.5.0
 platform: ruby
 authors:
 - Mslm Dev