internetdata 2.4.1__tar.gz → 2.5.0__tar.gz

{internetdata-2.4.1 → internetdata-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: internetdata
-Version: 2.4.1
+Version: 2.5.0
 Summary: Official Python client library for the InternetData API. Download and verify licensed IP datasets.
 Project-URL: Homepage, https://internetdata.io
 Project-URL: Documentation, https://docs.internetdata.io
@@ -211,7 +211,7 @@ There are official InternetData client libraries available for many languages in
 
 InternetData: IP and network intelligence databases, published as CSV and MMDB, licensed by contract and downloadable on demand.
 
-[<img src="https://s3.internetdata.io/internetdata-public/brand/mark.svg" alt="InternetData" width="96"/>](https://internetdata.io/)
+[<img src="https://s3.internetdata.io/internetdata-public/brand/mark.svg" alt="InternetData" height="64"/>](https://internetdata.io/)
 
 ## License
 

{internetdata-2.4.1 → internetdata-2.5.0}/README.md

@@ -177,7 +177,7 @@ There are official InternetData client libraries available for many languages in
 
 InternetData: IP and network intelligence databases, published as CSV and MMDB, licensed by contract and downloadable on demand.
 
-[<img src="https://s3.internetdata.io/internetdata-public/brand/mark.svg" alt="InternetData" width="96"/>](https://internetdata.io/)
+[<img src="https://s3.internetdata.io/internetdata-public/brand/mark.svg" alt="InternetData" height="64"/>](https://internetdata.io/)
 
 ## License
 

{internetdata-2.4.1 → internetdata-2.5.0}/spec/openapi.yaml

@@ -12,7 +12,7 @@ info:
     email: support@internetdata.io
     url: https://internetdata.io
   termsOfService: https://internetdata.io/terms
-  version: 2026.09.21
+  version: 2026.09.26
 servers:
   - url: https://internetdata.io
 tags:
@@ -658,6 +658,14 @@ paths:
         The browser entry point for the authorization-code flow. This is a
         redirect target, not something to call from code.
 
+        Any client may sign in without registering first by using a Client ID
+        Metadata Document: make `client_id` an https URL that serves your
+        client's metadata as JSON, naming that same URL as its `client_id`,
+        with `token_endpoint_auth_method` `none` and your `redirect_uris`. An
+        https redirect URI must be on the same origin as the `client_id`; a
+        loopback one (`http://127.0.0.1`, `http://[::1]`, `http://localhost`)
+        matches on any port. Such a client is granted `apikeys.use` at most.
+
         An unknown `client_id` or an unregistered `redirect_uri` is shown to the
         USER and never redirected, because sending an error to an address we
         have not verified belongs to you is how an open redirector works.
@@ -689,12 +697,12 @@ paths:
             type: string
         - name: code_challenge_method
           in: query
-          required: false
+          required: true
           schema:
             type: string
             enum:
               - S256
-          description: S256 only. `plain` is refused rather than downgraded.
+          description: S256, named explicitly. `plain`, or no method at all, is refused rather than downgraded.
         - name: scope
           in: query
           required: false
@@ -711,12 +719,18 @@ paths:
           required: false
           schema:
             type: string
-          description: RFC 8707. What the token is FOR, so it cannot be replayed elsewhere.
+          description: |
+            RFC 8707. What the token is FOR, so it cannot be replayed elsewhere:
+            this brand's MCP server, the only resource it issues tokens for.
+            Anything else answers `invalid_target`. A client that names none is
+            given that server.
       responses:
         '302':
           description: A redirect to the consent screen, or back to your redirect_uri with an error.
         '400':
           description: Shown to the user. An unverified redirect target is never sent an error.
+        '429':
+          description: Shown to the user. Too many authorizations from one address.
   /oauth/token:
     post:
       operationId: oauthToken
@@ -732,10 +746,14 @@ paths:
         `slow_down`, which means widen your interval and keep it widened.
 
         `authorization_code` exchanges a code from `/oauth/authorize`, with the
-        `code_verifier` matching the challenge you sent.
+        `code_verifier` matching the challenge you sent and the same
+        `redirect_uri`. A code works once: presenting it again also revokes
+        what the first exchange issued.
 
         `refresh_token` exchanges a refresh token. The presented token is
         consumed whatever happens next, so store the new one before using it.
+        Presenting a consumed refresh token again ends the whole authorization,
+        since it means the token was copied.
       security: []
       requestBody:
         required: true
@@ -757,8 +775,10 @@ paths:
             `access_denied` means the person refused, and `expired_token` that
             the device code is no longer valid: it expired, or it was already
             exchanged or refused. `invalid_grant` means the code, device code or
-            refresh token is not valid for this `client_id`. `slow_down` also
-            answers any grant when this address sends too many requests.
+            refresh token is not valid for this `client_id`. `invalid_target`
+            means `resource` names something other than what was authorized.
+            `slow_down` also answers any grant when this address sends too many
+            requests.
           content:
             application/json:
               schema:
@@ -981,6 +1001,11 @@ components:
             MMDB exists for them.
           items:
             $ref: '#/components/schemas/DatabaseFormat'
+        sample_formats:
+          type: array
+          description: The formats an evaluation sample is published in, if any.
+          items:
+            $ref: '#/components/schemas/DatabaseFormat'
     Download:
       type: object
       description: One download ATTEMPT, refusals included.
@@ -988,6 +1013,7 @@ components:
         - dataset_id
         - format
         - outcome
+        - sample
         - bytes
         - http_status
         - apikey_id
@@ -1008,6 +1034,9 @@ components:
             - expired
             - unknown
             - unavailable
+        sample:
+          type: boolean
+          description: The evaluation sample rather than the database itself.
         bytes:
           type: integer
           format: int64
@@ -1088,6 +1117,15 @@ components:
           additionalProperties:
             type: integer
             format: int64
+        sample_size:
+          type: object
+          description: Bytes per format of the evaluation sample, where one is published.
+          additionalProperties:
+            type: integer
+            format: int64
+        sample_entries:
+          type: integer
+          description: Row count in the evaluation sample.
     DbChecksumSuccessResponse:
       type: object
       required:
@@ -1425,6 +1463,9 @@ components:
           type: array
           items:
             type: string
+        client_id_metadata_document_supported:
+          type: boolean
+          description: Any client may sign in with an https `client_id` serving its own metadata.
         token_endpoint_auth_methods_supported:
           type: array
           items:
@@ -1499,7 +1540,12 @@ components:
           description: Required by the authorization code grant.
         redirect_uri:
           type: string
-          description: 'Authorization code grant: the `redirect_uri` the code was issued against, exactly.'
+          description: >-
+            Required by the authorization code grant: the `redirect_uri` the code was issued
+            against, exactly.
+        resource:
+          type: string
+          description: 'Authorization code grant, optional: RFC 8707, and it must name what was authorized.'
         refresh_token:
           type: string
           description: Required by the refresh token grant.
@@ -1526,16 +1572,19 @@ components:
         mslm:apikey_id:
           type: string
           description: |
-            Not part of OAuth. The ID of the API key the person picked when they
-            approved, returned by every grant while this authorization may still
-            read that key back. Absent when no key was picked, or when the
-            person's role no longer allows reading keys back.
+            Not part of OAuth, and only for our own clients. The ID of the API
+            key the person picked when they approved, returned by every grant
+            while this authorization may still read that key back. Absent when
+            no key was picked, or when the person's role no longer allows
+            reading keys back.
         mslm:apikey:
           type: string
           description: |
-            Not part of OAuth. The API key itself, so a device ends up holding an
-            ordinary key. Returned by the device code and authorization code
-            grants only, never by a refresh, and only alongside
+            Not part of OAuth, and only for our own clients: a client that signed
+            in with a Client ID Metadata Document never receives a key. The API
+            key itself, so a device ends up holding an ordinary key. Returned by
+            the device code and authorization code grants only, never by a
+            refresh, and only alongside
             `mslm:apikey_id`. Absent when that key's secret cannot be read back,
             which is the case for a key created before keys could be shown again
             in the console; a rotated key can be.

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/__init__.py

@@ -38,7 +38,7 @@ from .models import (
     TokenResponse,
 )
 
-__version__ = "2.4.1"
+__version__ = "2.5.0"
 
 __all__ = [
     "DATABASE_FORMATS",

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/api/authorization/oauth_authorize.py

@@ -16,7 +16,7 @@ def _get_kwargs(
     redirect_uri: str,
     response_type: OauthAuthorizeResponseType,
     code_challenge: str,
-    code_challenge_method: OauthAuthorizeCodeChallengeMethod | Unset = UNSET,
+    code_challenge_method: OauthAuthorizeCodeChallengeMethod,
     scope: str | Unset = UNSET,
     state: str | Unset = UNSET,
     resource: str | Unset = UNSET,
@@ -33,10 +33,7 @@ def _get_kwargs(
 
     params["code_challenge"] = code_challenge
 
-    json_code_challenge_method: str | Unset = UNSET
-    if not isinstance(code_challenge_method, Unset):
-        json_code_challenge_method = code_challenge_method.value
-
+    json_code_challenge_method = code_challenge_method.value
     params["code_challenge_method"] = json_code_challenge_method
 
     params["scope"] = scope
@@ -65,6 +62,9 @@ def _parse_response(
     if response.status_code == 400:
         return None
 
+    if response.status_code == 429:
+        return None
+
     if client.raise_on_unexpected_status:
         raise errors.UnexpectedStatus(response.status_code, response.content)
     else:
@@ -89,7 +89,7 @@ def sync_detailed(
     redirect_uri: str,
     response_type: OauthAuthorizeResponseType,
     code_challenge: str,
-    code_challenge_method: OauthAuthorizeCodeChallengeMethod | Unset = UNSET,
+    code_challenge_method: OauthAuthorizeCodeChallengeMethod,
     scope: str | Unset = UNSET,
     state: str | Unset = UNSET,
     resource: str | Unset = UNSET,
@@ -99,6 +99,14 @@ def sync_detailed(
      The browser entry point for the authorization-code flow. This is a
     redirect target, not something to call from code.
 
+    Any client may sign in without registering first by using a Client ID
+    Metadata Document: make `client_id` an https URL that serves your
+    client's metadata as JSON, naming that same URL as its `client_id`,
+    with `token_endpoint_auth_method` `none` and your `redirect_uris`. An
+    https redirect URI must be on the same origin as the `client_id`; a
+    loopback one (`http://127.0.0.1`, `http://[::1]`, `http://localhost`)
+    matches on any port. Such a client is granted `apikeys.use` at most.
+
     An unknown `client_id` or an unregistered `redirect_uri` is shown to the
     USER and never redirected, because sending an error to an address we
     have not verified belongs to you is how an open redirector works.
@@ -110,7 +118,7 @@ def sync_detailed(
         redirect_uri (str):
         response_type (OauthAuthorizeResponseType):
         code_challenge (str):
-        code_challenge_method (OauthAuthorizeCodeChallengeMethod | Unset):
+        code_challenge_method (OauthAuthorizeCodeChallengeMethod):
         scope (str | Unset):
         state (str | Unset):
         resource (str | Unset):
@@ -148,7 +156,7 @@ async def asyncio_detailed(
     redirect_uri: str,
     response_type: OauthAuthorizeResponseType,
     code_challenge: str,
-    code_challenge_method: OauthAuthorizeCodeChallengeMethod | Unset = UNSET,
+    code_challenge_method: OauthAuthorizeCodeChallengeMethod,
     scope: str | Unset = UNSET,
     state: str | Unset = UNSET,
     resource: str | Unset = UNSET,
@@ -158,6 +166,14 @@ async def asyncio_detailed(
      The browser entry point for the authorization-code flow. This is a
     redirect target, not something to call from code.
 
+    Any client may sign in without registering first by using a Client ID
+    Metadata Document: make `client_id` an https URL that serves your
+    client's metadata as JSON, naming that same URL as its `client_id`,
+    with `token_endpoint_auth_method` `none` and your `redirect_uris`. An
+    https redirect URI must be on the same origin as the `client_id`; a
+    loopback one (`http://127.0.0.1`, `http://[::1]`, `http://localhost`)
+    matches on any port. Such a client is granted `apikeys.use` at most.
+
     An unknown `client_id` or an unregistered `redirect_uri` is shown to the
     USER and never redirected, because sending an error to an address we
     have not verified belongs to you is how an open redirector works.
@@ -169,7 +185,7 @@ async def asyncio_detailed(
         redirect_uri (str):
         response_type (OauthAuthorizeResponseType):
         code_challenge (str):
-        code_challenge_method (OauthAuthorizeCodeChallengeMethod | Unset):
+        code_challenge_method (OauthAuthorizeCodeChallengeMethod):
         scope (str | Unset):
         state (str | Unset):
         resource (str | Unset):

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/api/authorization/oauth_token.py

@@ -79,10 +79,14 @@ def sync_detailed(
     `slow_down`, which means widen your interval and keep it widened.
 
     `authorization_code` exchanges a code from `/oauth/authorize`, with the
-    `code_verifier` matching the challenge you sent.
+    `code_verifier` matching the challenge you sent and the same
+    `redirect_uri`. A code works once: presenting it again also revokes
+    what the first exchange issued.
 
     `refresh_token` exchanges a refresh token. The presented token is
     consumed whatever happens next, so store the new one before using it.
+    Presenting a consumed refresh token again ends the whole authorization,
+    since it means the token was copied.
 
     Args:
         body (TokenRequest):
@@ -121,10 +125,14 @@ def sync(
     `slow_down`, which means widen your interval and keep it widened.
 
     `authorization_code` exchanges a code from `/oauth/authorize`, with the
-    `code_verifier` matching the challenge you sent.
+    `code_verifier` matching the challenge you sent and the same
+    `redirect_uri`. A code works once: presenting it again also revokes
+    what the first exchange issued.
 
     `refresh_token` exchanges a refresh token. The presented token is
     consumed whatever happens next, so store the new one before using it.
+    Presenting a consumed refresh token again ends the whole authorization,
+    since it means the token was copied.
 
     Args:
         body (TokenRequest):
@@ -158,10 +166,14 @@ async def asyncio_detailed(
     `slow_down`, which means widen your interval and keep it widened.
 
     `authorization_code` exchanges a code from `/oauth/authorize`, with the
-    `code_verifier` matching the challenge you sent.
+    `code_verifier` matching the challenge you sent and the same
+    `redirect_uri`. A code works once: presenting it again also revokes
+    what the first exchange issued.
 
     `refresh_token` exchanges a refresh token. The presented token is
     consumed whatever happens next, so store the new one before using it.
+    Presenting a consumed refresh token again ends the whole authorization,
+    since it means the token was copied.
 
     Args:
         body (TokenRequest):
@@ -198,10 +210,14 @@ async def asyncio(
     `slow_down`, which means widen your interval and keep it widened.
 
     `authorization_code` exchanges a code from `/oauth/authorize`, with the
-    `code_verifier` matching the challenge you sent.
+    `code_verifier` matching the challenge you sent and the same
+    `redirect_uri`. A code works once: presenting it again also revokes
+    what the first exchange issued.
 
     `refresh_token` exchanges a refresh token. The presented token is
     consumed whatever happens next, so store the new one before using it.
+    Presenting a consumed refresh token again ends the whole authorization,
+    since it means the token was copied.
 
     Args:
         body (TokenRequest):

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/__init__.py

@@ -22,6 +22,7 @@ from .database_metadata_sample import DatabaseMetadataSample
 from .database_metadata_sample_additional_property_item import (
     DatabaseMetadataSampleAdditionalPropertyItem,
 )
+from .database_metadata_sample_size import DatabaseMetadataSampleSize
 from .database_metadata_schema import DatabaseMetadataSchema
 from .database_metadata_size import DatabaseMetadataSize
 from .database_version import DatabaseVersion
@@ -65,6 +66,7 @@ __all__ = (
     "DatabaseMetadataColumn",
     "DatabaseMetadataSample",
     "DatabaseMetadataSampleAdditionalPropertyItem",
+    "DatabaseMetadataSampleSize",
     "DatabaseMetadataSchema",
     "DatabaseMetadataSize",
     "DatabaseVersion",

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/database_metadata.py

@@ -11,6 +11,7 @@ from ..types import UNSET, Unset
 
 if TYPE_CHECKING:
     from ..models.database_metadata_sample import DatabaseMetadataSample
+    from ..models.database_metadata_sample_size import DatabaseMetadataSampleSize
     from ..models.database_metadata_schema import DatabaseMetadataSchema
     from ..models.database_metadata_size import DatabaseMetadataSize
 
@@ -30,6 +31,9 @@ class DatabaseMetadata:
         size (DatabaseMetadataSize): Bytes per format.
         update_freq (str | Unset): How often a new build is published.
         sample (DatabaseMetadataSample | Unset): A few real rows, keyed by format.
+        sample_size (DatabaseMetadataSampleSize | Unset): Bytes per format of the evaluation sample, where one is
+            published.
+        sample_entries (int | Unset): Row count in the evaluation sample.
     """
 
     id: str
@@ -39,6 +43,8 @@ class DatabaseMetadata:
     size: DatabaseMetadataSize
     update_freq: str | Unset = UNSET
     sample: DatabaseMetadataSample | Unset = UNSET
+    sample_size: DatabaseMetadataSampleSize | Unset = UNSET
+    sample_entries: int | Unset = UNSET
     additional_properties: dict[str, Any] = _attrs_field(init=False, factory=dict)
 
     def to_dict(self) -> dict[str, Any]:
@@ -58,6 +64,12 @@ class DatabaseMetadata:
         if not isinstance(self.sample, Unset):
             sample = self.sample.to_dict()
 
+        sample_size: dict[str, Any] | Unset = UNSET
+        if not isinstance(self.sample_size, Unset):
+            sample_size = self.sample_size.to_dict()
+
+        sample_entries = self.sample_entries
+
         field_dict: dict[str, Any] = {}
         field_dict.update(self.additional_properties)
         field_dict.update(
@@ -73,12 +85,19 @@ class DatabaseMetadata:
             field_dict["update_freq"] = update_freq
         if sample is not UNSET:
             field_dict["sample"] = sample
+        if sample_size is not UNSET:
+            field_dict["sample_size"] = sample_size
+        if sample_entries is not UNSET:
+            field_dict["sample_entries"] = sample_entries
 
         return field_dict
 
     @classmethod
     def from_dict(cls, src_dict: Mapping[str, Any]) -> Self:
         from ..models.database_metadata_sample import DatabaseMetadataSample
+        from ..models.database_metadata_sample_size import (
+            DatabaseMetadataSampleSize,
+        )
         from ..models.database_metadata_schema import DatabaseMetadataSchema
         from ..models.database_metadata_size import DatabaseMetadataSize
 
@@ -102,6 +121,15 @@ class DatabaseMetadata:
         else:
             sample = DatabaseMetadataSample.from_dict(_sample)
 
+        _sample_size = d.pop("sample_size", UNSET)
+        sample_size: DatabaseMetadataSampleSize | Unset
+        if isinstance(_sample_size, Unset):
+            sample_size = UNSET
+        else:
+            sample_size = DatabaseMetadataSampleSize.from_dict(_sample_size)
+
+        sample_entries = d.pop("sample_entries", UNSET)
+
         database_metadata = cls(
             id=id,
             updated=updated,
@@ -110,6 +138,8 @@ class DatabaseMetadata:
             size=size,
             update_freq=update_freq,
             sample=sample,
+            sample_size=sample_size,
+            sample_entries=sample_entries,
         )
 
         database_metadata.additional_properties = d

internetdata-2.5.0/src/internetdata/_generated/models/database_metadata_sample_size.py

@@ -0,0 +1,47 @@
+from __future__ import annotations
+
+from collections.abc import Mapping
+from typing import Any, Self, TypeVar
+
+from attrs import define as _attrs_define
+from attrs import field as _attrs_field
+
+T = TypeVar("T", bound="DatabaseMetadataSampleSize")
+
+
+@_attrs_define
+class DatabaseMetadataSampleSize:
+    """Bytes per format of the evaluation sample, where one is published."""
+
+    additional_properties: dict[str, int] = _attrs_field(init=False, factory=dict)
+
+    def to_dict(self) -> dict[str, Any]:
+
+        field_dict: dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls, src_dict: Mapping[str, Any]) -> Self:
+        d = dict(src_dict)
+        database_metadata_sample_size = cls()
+
+        database_metadata_sample_size.additional_properties = d
+        return database_metadata_sample_size
+
+    @property
+    def additional_keys(self) -> list[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> int:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: int) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/database_version.py

@@ -7,6 +7,7 @@ from attrs import define as _attrs_define
 from attrs import field as _attrs_field
 
 from ..models.database_format import DatabaseFormat
+from ..types import UNSET, Unset
 
 T = TypeVar("T", bound="DatabaseVersion")
 
@@ -21,12 +22,14 @@ class DatabaseVersion:
         formats (list[DatabaseFormat]): The formats this version is BUILT in. Asking for another is a 400,
             not a gap - the `_provider` catalogs are keyed by provider id, so no
             MMDB exists for them.
+        sample_formats (list[DatabaseFormat] | Unset): The formats an evaluation sample is published in, if any.
     """
 
     id: str
     version: int
     summary: str
     formats: list[DatabaseFormat]
+    sample_formats: list[DatabaseFormat] | Unset = UNSET
     additional_properties: dict[str, Any] = _attrs_field(init=False, factory=dict)
 
     def to_dict(self) -> dict[str, Any]:
@@ -41,6 +44,13 @@ class DatabaseVersion:
             formats_item = formats_item_data.value
             formats.append(formats_item)
 
+        sample_formats: list[str] | Unset = UNSET
+        if not isinstance(self.sample_formats, Unset):
+            sample_formats = []
+            for sample_formats_item_data in self.sample_formats:
+                sample_formats_item = sample_formats_item_data.value
+                sample_formats.append(sample_formats_item)
+
         field_dict: dict[str, Any] = {}
         field_dict.update(self.additional_properties)
         field_dict.update(
@@ -51,6 +61,8 @@ class DatabaseVersion:
                 "formats": formats,
             }
         )
+        if sample_formats is not UNSET:
+            field_dict["sample_formats"] = sample_formats
 
         return field_dict
 
@@ -70,11 +82,21 @@ class DatabaseVersion:
 
             formats.append(formats_item)
 
+        _sample_formats = d.pop("sample_formats", UNSET)
+        sample_formats: list[DatabaseFormat] | Unset = UNSET
+        if _sample_formats is not UNSET:
+            sample_formats = []
+            for sample_formats_item_data in _sample_formats:
+                sample_formats_item = DatabaseFormat(sample_formats_item_data)
+
+                sample_formats.append(sample_formats_item)
+
         database_version = cls(
             id=id,
             version=version,
             summary=summary,
             formats=formats,
+            sample_formats=sample_formats,
         )
 
         database_version.additional_properties = d

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/download.py

@@ -20,6 +20,7 @@ class Download:
         dataset_id (str):
         format_ (str):
         outcome (DownloadOutcome):
+        sample (bool): The evaluation sample rather than the database itself.
         bytes_ (int | None): Object size at redirect time, NOT bytes delivered: the transfer is a
             presigned redirect straight to object storage, so we never observe
             how much of it was taken.
@@ -33,6 +34,7 @@ class Download:
     dataset_id: str
     format_: str
     outcome: DownloadOutcome
+    sample: bool
     bytes_: int | None
     http_status: int | None
     apikey_id: None | str
@@ -48,6 +50,8 @@ class Download:
 
         outcome = self.outcome.value
 
+        sample = self.sample
+
         bytes_: int | None
         bytes_ = self.bytes_
 
@@ -72,6 +76,7 @@ class Download:
                 "dataset_id": dataset_id,
                 "format": format_,
                 "outcome": outcome,
+                "sample": sample,
                 "bytes": bytes_,
                 "http_status": http_status,
                 "apikey_id": apikey_id,
@@ -92,6 +97,8 @@ class Download:
 
         outcome = DownloadOutcome(d.pop("outcome"))
 
+        sample = d.pop("sample")
+
         def _parse_bytes_(data: object) -> int | None:
             if data is None:
                 return data
@@ -133,6 +140,7 @@ class Download:
             dataset_id=dataset_id,
             format_=format_,
             outcome=outcome,
+            sample=sample,
             bytes_=bytes_,
             http_status=http_status,
             apikey_id=apikey_id,

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/oauth_metadata.py

@@ -24,6 +24,8 @@ class OauthMetadata:
         response_types_supported (list[str] | Unset):
         grant_types_supported (list[str] | Unset):
         code_challenge_methods_supported (list[str] | Unset):
+        client_id_metadata_document_supported (bool | Unset): Any client may sign in with an https `client_id` serving
+            its own metadata.
         token_endpoint_auth_methods_supported (list[str] | Unset): Always `none`. Every client is public and has no
             secret.
         authorization_response_iss_parameter_supported (bool | Unset): RFC 9207. A redirect back from the authorization
@@ -40,6 +42,7 @@ class OauthMetadata:
     response_types_supported: list[str] | Unset = UNSET
     grant_types_supported: list[str] | Unset = UNSET
     code_challenge_methods_supported: list[str] | Unset = UNSET
+    client_id_metadata_document_supported: bool | Unset = UNSET
     token_endpoint_auth_methods_supported: list[str] | Unset = UNSET
     authorization_response_iss_parameter_supported: bool | Unset = UNSET
     service_documentation: str | Unset = UNSET
@@ -72,6 +75,8 @@ class OauthMetadata:
         if not isinstance(self.code_challenge_methods_supported, Unset):
             code_challenge_methods_supported = self.code_challenge_methods_supported
 
+        client_id_metadata_document_supported = self.client_id_metadata_document_supported
+
         token_endpoint_auth_methods_supported: list[str] | Unset = UNSET
         if not isinstance(self.token_endpoint_auth_methods_supported, Unset):
             token_endpoint_auth_methods_supported = self.token_endpoint_auth_methods_supported
@@ -103,6 +108,10 @@ class OauthMetadata:
             field_dict["grant_types_supported"] = grant_types_supported
         if code_challenge_methods_supported is not UNSET:
             field_dict["code_challenge_methods_supported"] = code_challenge_methods_supported
+        if client_id_metadata_document_supported is not UNSET:
+            field_dict["client_id_metadata_document_supported"] = (
+                client_id_metadata_document_supported
+            )
         if token_endpoint_auth_methods_supported is not UNSET:
             field_dict["token_endpoint_auth_methods_supported"] = (
                 token_endpoint_auth_methods_supported
@@ -139,6 +148,10 @@ class OauthMetadata:
             list[str], d.pop("code_challenge_methods_supported", UNSET)
         )
 
+        client_id_metadata_document_supported = d.pop(
+            "client_id_metadata_document_supported", UNSET
+        )
+
         token_endpoint_auth_methods_supported = cast(
             list[str], d.pop("token_endpoint_auth_methods_supported", UNSET)
         )
@@ -159,6 +172,7 @@ class OauthMetadata:
             response_types_supported=response_types_supported,
             grant_types_supported=grant_types_supported,
             code_challenge_methods_supported=code_challenge_methods_supported,
+            client_id_metadata_document_supported=client_id_metadata_document_supported,
             token_endpoint_auth_methods_supported=token_endpoint_auth_methods_supported,
             authorization_response_iss_parameter_supported=authorization_response_iss_parameter_supported,
             service_documentation=service_documentation,

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/token_request.py

@@ -20,7 +20,9 @@ class TokenRequest:
         device_code (str | Unset): Required by the device code grant.
         code (str | Unset): Required by the authorization code grant.
         code_verifier (str | Unset): Required by the authorization code grant.
-        redirect_uri (str | Unset): Authorization code grant: the `redirect_uri` the code was issued against, exactly.
+        redirect_uri (str | Unset): Required by the authorization code grant: the `redirect_uri` the code was issued
+            against, exactly.
+        resource (str | Unset): Authorization code grant, optional: RFC 8707, and it must name what was authorized.
         refresh_token (str | Unset): Required by the refresh token grant.
     """
 
@@ -30,6 +32,7 @@ class TokenRequest:
     code: str | Unset = UNSET
     code_verifier: str | Unset = UNSET
     redirect_uri: str | Unset = UNSET
+    resource: str | Unset = UNSET
     refresh_token: str | Unset = UNSET
     additional_properties: dict[str, Any] = _attrs_field(init=False, factory=dict)
 
@@ -46,6 +49,8 @@ class TokenRequest:
 
         redirect_uri = self.redirect_uri
 
+        resource = self.resource
+
         refresh_token = self.refresh_token
 
         field_dict: dict[str, Any] = {}
@@ -64,6 +69,8 @@ class TokenRequest:
             field_dict["code_verifier"] = code_verifier
         if redirect_uri is not UNSET:
             field_dict["redirect_uri"] = redirect_uri
+        if resource is not UNSET:
+            field_dict["resource"] = resource
         if refresh_token is not UNSET:
             field_dict["refresh_token"] = refresh_token
 
@@ -84,6 +91,8 @@ class TokenRequest:
 
         redirect_uri = d.pop("redirect_uri", UNSET)
 
+        resource = d.pop("resource", UNSET)
+
         refresh_token = d.pop("refresh_token", UNSET)
 
         token_request = cls(
@@ -93,6 +102,7 @@ class TokenRequest:
             code=code,
             code_verifier=code_verifier,
             redirect_uri=redirect_uri,
+            resource=resource,
             refresh_token=refresh_token,
         )
 

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/_generated/models/token_response.py

@@ -20,13 +20,16 @@ class TokenResponse:
         expires_in (int): Seconds until the access token expires.
         refresh_token (str | Unset): Always returned. A refresh consumes the token it presents, so keep this one.
         scope (str | Unset): What was actually granted, which may be narrower than what was asked for.
-        mslmapikey_id (str | Unset): Not part of OAuth. The ID of the API key the person picked when they
-            approved, returned by every grant while this authorization may still
-            read that key back. Absent when no key was picked, or when the
-            person's role no longer allows reading keys back.
-        mslmapikey (str | Unset): Not part of OAuth. The API key itself, so a device ends up holding an
-            ordinary key. Returned by the device code and authorization code
-            grants only, never by a refresh, and only alongside
+        mslmapikey_id (str | Unset): Not part of OAuth, and only for our own clients. The ID of the API
+            key the person picked when they approved, returned by every grant
+            while this authorization may still read that key back. Absent when
+            no key was picked, or when the person's role no longer allows
+            reading keys back.
+        mslmapikey (str | Unset): Not part of OAuth, and only for our own clients: a client that signed
+            in with a Client ID Metadata Document never receives a key. The API
+            key itself, so a device ends up holding an ordinary key. Returned by
+            the device code and authorization code grants only, never by a
+            refresh, and only alongside
             `mslm:apikey_id`. Absent when that key's secret cannot be read back,
             which is the case for a key created before keys could be shown again
             in the console; a rotated key can be.

{internetdata-2.4.1 → internetdata-2.5.0}/src/internetdata/models.py

@@ -77,6 +77,8 @@ class DatabaseVersion:
     version: int
     summary: str
     formats: tuple[Format, ...]
+    # The formats an evaluation sample is published in, None when there is none.
+    sample_formats: tuple[Format, ...] | None = None
 
 
 @dataclass(frozen=True, slots=True)
@@ -133,6 +135,9 @@ class DatabaseMetadata:
     update_freq: str | None = None
     sample: dict[str, tuple[dict[str, Any], ...]] = field(default_factory=dict)
     raw: dict[str, Any] = field(default_factory=dict)
+    # Bytes per format and row count of the evaluation sample, where one is published.
+    sample_size: dict[str, int] | None = None
+    sample_entries: int | None = None
 
 
 @dataclass(frozen=True, slots=True)
@@ -153,6 +158,10 @@ class Download:
     apikey_id: str | None = None
     client_ip: str | None = None
     user_agent: str | None = None
+    # Whether this was the evaluation sample rather than the database itself. Keyword-only
+    # with a default, so a Download built by hand before 2.5.0 still builds; the parser
+    # always sets it.
+    sample: bool = field(default=False, kw_only=True)
 
 
 def to_database(body: dict[str, Any]) -> Database:
@@ -177,6 +186,7 @@ def to_version(body: dict[str, Any]) -> DatabaseVersion:
         version=body["version"],
         summary=body["summary"],
         formats=tuple(body["formats"]),
+        sample_formats=_optional_tuple(body.get("sample_formats")),
     )
 
 
@@ -192,6 +202,8 @@ def to_metadata(body: dict[str, Any]) -> DatabaseMetadata:
         update_freq=body.get("update_freq"),
         sample={fmt: tuple(rows) for fmt, rows in body.get("sample", {}).items()},
         raw=body,
+        sample_size=dict(body["sample_size"]) if body.get("sample_size") is not None else None,
+        sample_entries=body.get("sample_entries"),
     )
 
 
@@ -210,9 +222,14 @@ def to_download(body: dict[str, Any]) -> Download:
         apikey_id=body["apikey_id"],
         client_ip=body["client_ip"],
         user_agent=body["user_agent"],
+        sample=body["sample"],
     )
 
 
+def _optional_tuple(value: Any) -> tuple[Any, ...] | None:
+    return tuple(value) if value is not None else None
+
+
 def _datetime(value: Any) -> datetime.datetime | None:
     """A NULLABLE wire timestamp. A license with no end date carries `expires: null`.
 
@@ -242,6 +259,7 @@ class OauthMetadata:
     token_endpoint_auth_methods_supported: tuple[str, ...] | None = None
     authorization_response_iss_parameter_supported: bool | None = None
     service_documentation: str | None = None
+    client_id_metadata_document_supported: bool | None = None
 
 
 @dataclass(frozen=True, slots=True)
@@ -308,6 +326,7 @@ _OAUTH_METADATA: dict[str, _Member] = {
     "token_endpoint_auth_methods_supported": ("strs", False),
     "authorization_response_iss_parameter_supported": ("bool", False),
     "service_documentation": ("str", False),
+    "client_id_metadata_document_supported": ("bool", False),
 }
 
 _DEVICE_AUTHORIZATION: dict[str, _Member] = {

{internetdata-2.4.1 → internetdata-2.5.0}/testdata/testdata.json

@@ -158,7 +158,7 @@
     ]
   },
   "oauth": {
-    "why": "The public OAuth accessor (docs/sdk/oauth.md). Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
+    "why": "The public OAuth accessor. Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
     "endpoints": {
       "metadata": {
         "method": "GET",
@@ -1219,7 +1219,7 @@
       ]
     },
     "deferred": {
-      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow (docs/sdk/oauth.md, Deferred). A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
+      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow. A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
       "pkce": {
         "why": "RFC 7636 Appendix B. A generated verifier is 32 CSPRNG bytes as unpadded base64url.",
         "verifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk",

{internetdata-2.4.1 → internetdata-2.5.0}/tests/test_client.py

@@ -87,6 +87,7 @@ DOWNLOADS = {
             "apikey_id": "ak_1",
             "client_ip": "203.0.113.4",
             "user_agent": "curl/8.5.0",
+            "sample": False,
             "created": "2026-09-04T10:00:00.000Z",
         },
         {
@@ -98,6 +99,7 @@ DOWNLOADS = {
             "apikey_id": None,
             "client_ip": None,
             "user_agent": None,
+            "sample": True,
             "created": "2026-09-04T09:00:00.000Z",
         },
     ]
@@ -199,6 +201,7 @@ def test_a_refusal_is_listed_beside_a_success(make_client: ClientFactory) -> Non
     assert denied.bytes is None, "a refusal moved no bytes, which is not zero bytes"
     assert denied.http_status == 403
     assert denied.apikey_id is None and denied.client_ip is None
+    assert [a.sample for a in attempts] == [False, True]
 
 
 def test_the_downloads_limit_reaches_the_wire(make_client: ClientFactory) -> None: