@nictool/dns-resource-record 1.4.0 → 1.6.0

package/CHANGELOG.md

@@ -4,10 +4,37 @@ Notable changes to this project are documented in this file.
 
 #### Unreleased
 
-### [1.4.0] - 2026-03-21
+### [1.6.0] - 2026-03-26
 
 #### Changed
 
+- feat(getCanonical): added to RRs where missing
+- feat(toWire): added wire format export
+- feat: add getTags() to all RR types
+  - values: common, obsolete, security, dnssec
+- doc(README): categorize RR types.
+- added RFCs to: AAAA 5952, NAPTR 4848, SIG 3755, TLSA 7671
+  - TXT: 4408, 6376, 7208
+
+### [1.5.0] - 2026-03-22
+
+- feat(RRSIG, SIG, TSIG): added toBind, toTinydns, fromTinydns
+- feat(TSIG): added missing setters
+- feat(fromTinydns): added to APL, DHCID, HIP, KX, RRSIG, RP, WKS
+- feat(CERT): validate mnemonic values
+- fix: hardened polynomial regexes #56
+- fix(NAPTR): replace polynomial regexp
+- test: coverage is at 98% 🎉
+- test(NSEC3PARAM): added test cases, better binary parser, better salt
+- test(AAAA, APL, CERT, KEY, NAPTR, NSEC3, NSEC3PARAM, RRSIG, SIG, SSHFP, TSIG, URL): added test coverage
+- doc(README): updated RR table completion status
+- style(es6): use ?. and ?? operators (nullish coalescing) #57
+- style(es6): use argument expansion / destructured parameters
+- style(es6): substring -> slice #55
+- style(es6): use more trim() #55
+
+### [1.4.0] - 2026-03-21
+
 - feat(toBind): added to nsec3param, rrsig
 - feat(toTinydns): added to key, nsec3param, nxt, openpgpkey
 - feat(fromTinydns): added to cert, https, key, nsec, nsec3param, nxt, openpgpkey, smimea, svcb
@@ -350,3 +377,5 @@ Notable changes to this project are documented in this file.
 [1.3.0]: https://github.com/NicTool/dns-resource-record/releases/tag/v1.3.0
 [1.3.1]: https://github.com/NicTool/dns-resource-record/releases/tag/v1.3.1
 [1.4.0]: https://github.com/NicTool/dns-resource-record/releases/tag/v1.4.0
+[1.5.0]: https://github.com/NicTool/dns-resource-record/releases/tag/v1.5.0
+[1.6.0]: https://github.com/NicTool/dns-resource-record/releases/tag/v1.6.0

package/README.md

@@ -19,6 +19,7 @@ This module is used to:
 | **[Tinydns](https://cr.yp.to/djbdns/tinydns-data.html)** | :white_check_mark: | :white_check_mark: |
 |                       **MaraDNS**                        |                    | :white_check_mark: |
 |                          **JS**                          | :white_check_mark: | :white_check_mark: |
+|                       **PowerDNS**                       |                    |                    |
 
 This package intends to import and export RFC compliant DNS resource records. Please [raise an issue](https://github.com/NicTool/dns-resource-record/issues) if a valid resource record fails to pass or an invalid resource record passes.
 
@@ -185,48 +186,54 @@ This module intends to support all current (ie, not officially deprecated) DNS R
 
 PRs are welcome, especially PRs with tests.
 
-|     **RR**     |     **toBind**     |   **toTinydns**    |    **fromBind**    |  **fromTinydns**   |
-| :------------: | :----------------: | :----------------: | :----------------: | :----------------: |
-|     **A**      | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **AAAA**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **APL**     | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|    **CAA**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **CERT**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|   **CNAME**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|   **DHCID**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|   **DNAME**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|   **DNSKEY**   | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|     **DS**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|   **HINFO**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **HIP**     | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|   **HTTPS**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|  **IPSECKEY**  | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **KEY**     |                    |                    |                    |                    |
-|     **KX**     | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|    **LOC**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|     **MX**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|   **NAPTR**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|     **NS**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **NSEC**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|   **NSEC3**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-| **NSEC3PARAM** |                    |                    |                    |                    |
-|    **NXT**     |                    |                    |                    |                    |
-| **OPENPGPKEY** |                    |                    |                    |                    |
-|    **PTR**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|     **RP**     | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|   **RRSIG**    |                    |                    |                    |                    |
-|    **SIG**     |                    |                    |                    |                    |
-|   **SMIMEA**   | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|    **SOA**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **SPF**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **SRV**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|   **SSHFP**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **SVCB**    | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
-|    **TLSA**    | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **TSIG**    |                    |                    |                    |                    |
-|    **TXT**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **URI**     | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-|    **WKS**     | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
+|     **RR**     | **BIND / RFC 1035** |    **Tinydns**     |
+| :------------: | :-----------------: | :----------------: |
+|    _Common_    |
+|     **A**      | :white_check_mark:  | :white_check_mark: |
+|    **AAAA**    | :white_check_mark:  | :white_check_mark: |
+|   **CNAME**    | :white_check_mark:  | :white_check_mark: |
+|   **HTTPS**    | :white_check_mark:  | :white_check_mark: |
+|     **MX**     | :white_check_mark:  | :white_check_mark: |
+|     **NS**     | :white_check_mark:  | :white_check_mark: |
+|    **PTR**     | :white_check_mark:  | :white_check_mark: |
+|    **SRV**     | :white_check_mark:  | :white_check_mark: |
+|    **TXT**     | :white_check_mark:  | :white_check_mark: |
+| _Less Common_  |
+|    **APL**     | :white_check_mark:  | :white_check_mark: |
+|    **CERT**    | :white_check_mark:  | :white_check_mark: |
+|   **DHCID**    | :white_check_mark:  | :white_check_mark: |
+|   **DNAME**    | :white_check_mark:  | :white_check_mark: |
+|    **HIP**     | :white_check_mark:  | :white_check_mark: |
+|    **KEY**     | :white_check_mark:  | :white_check_mark: |
+|     **KX**     | :white_check_mark:  | :white_check_mark: |
+|    **LOC**     | :white_check_mark:  | :white_check_mark: |
+|   **NAPTR**    | :white_check_mark:  | :white_check_mark: |
+|    **SOA**     | :white_check_mark:  | :white_check_mark: |
+|    **SVCB**    | :white_check_mark:  | :white_check_mark: |
+|    **TSIG**    | :white_check_mark:  | :white_check_mark: |
+|    **URI**     | :white_check_mark:  | :white_check_mark: |
+|   _Security_   |
+|    **CAA**     | :white_check_mark:  | :white_check_mark: |
+|  **IPSECKEY**  | :white_check_mark:  | :white_check_mark: |
+| **OPENPGPKEY** | :white_check_mark:  | :white_check_mark: |
+|   **SMIMEA**   | :white_check_mark:  | :white_check_mark: |
+|   **SSHFP**    | :white_check_mark:  | :white_check_mark: |
+|    **TLSA**    | :white_check_mark:  | :white_check_mark: |
+|    _DNSSEC_    |
+|   **DNSKEY**   | :white_check_mark:  | :white_check_mark: |
+|     **DS**     | :white_check_mark:  | :white_check_mark: |
+|    **NSEC**    | :white_check_mark:  | :white_check_mark: |
+|   **NSEC3**    | :white_check_mark:  | :white_check_mark: |
+| **NSEC3PARAM** | :white_check_mark:  | :white_check_mark: |
+|   **RRSIG**    | :white_check_mark:  | :white_check_mark: |
+|  _Deprecated_  |
+|    **NXT**     | :white_check_mark:  | :white_check_mark: |
+|    **SPF**     | :white_check_mark:  | :white_check_mark: |
+|   _Obsolete_   |
+|   **HINFO**    | :white_check_mark:  | :white_check_mark: |
+|     **RP**     | :white_check_mark:  | :white_check_mark: |
+|    **SIG**     | :white_check_mark:  | :white_check_mark: |
+|    **WKS**     | :white_check_mark:  | :white_check_mark: |
 
 ## TIPS
 

package/lib/readme.js

@@ -0,0 +1,84 @@
+#!/usr/bin/env node
+// Regenerates the Supported Records table in README.md using getTags() from each RR class.
+
+import { readFileSync, writeFileSync } from 'fs'
+import { fileURLToPath } from 'url'
+import { dirname, join } from 'path'
+
+import * as RR from '../index.js'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+
+const tagToGroup = {
+  common: 'Common',
+  security: 'Security',
+  dnssec: 'DNSSEC',
+  deprecated: 'Deprecated',
+  obsolete: 'Obsolete',
+}
+
+const groupOrder = ['Common', 'Less Common', 'Security', 'DNSSEC', 'Deprecated', 'Obsolete']
+
+function getGroup(instance) {
+  const tags = instance.getTags()
+  for (const [tag, group] of Object.entries(tagToGroup)) {
+    if (tags.includes(tag)) return group
+  }
+  return 'Less Common'
+}
+
+const groups = {}
+for (const name of groupOrder) groups[name] = []
+
+for (const [name, cls] of Object.entries(RR)) {
+  if (name === 'typeMap' || name === 'default') continue
+  if (typeof cls !== 'function') continue
+  const instance = new cls(null)
+  const group = getGroup(instance)
+  groups[group].push(name)
+}
+
+const check = ':white_check_mark:'
+const rows = []
+for (const groupName of groupOrder) {
+  const names = groups[groupName]
+  if (!names.length) continue
+  rows.push(`| *${groupName}* |`)
+  for (const name of names.sort()) {
+    const cls = RR[name]
+    const hasToBind = typeof cls.prototype.toBind === 'function'
+    const hasFromBind = typeof cls.prototype.fromBind === 'function'
+    const hasToTinydns = typeof cls.prototype.toTinydns === 'function'
+    const hasFromTinydns = typeof cls.prototype.fromTinydns === 'function'
+
+    const bind = hasToBind && hasFromBind ? check : ''
+    const tinydns = hasToTinydns && hasFromTinydns ? check : ''
+
+    rows.push(`| **${name}** | ${bind} | ${tinydns} |`)
+  }
+}
+
+const table = [
+  `|     **RR**     |  **BIND / RFC 1035**  |     **Tinydns**     |`,
+  `| :------------: | :-------------------: | :-----------------: |`,
+  ...rows,
+].join('\n')
+
+const readmePath = join(__dirname, '..', 'README.md')
+const readme = readFileSync(readmePath, 'utf-8')
+
+// Replace from the table header line up to (but not including) the ## TIPS section
+const tableHeaderMarker = '\n|     **RR**     |'
+const tipsSectionMarker = '\n\n## TIPS'
+
+const tableStart = readme.indexOf(tableHeaderMarker)
+const tipsStart = readme.indexOf(tipsSectionMarker)
+
+if (tableStart === -1 || tipsStart === -1) {
+  console.error('Could not locate table boundaries in README.md')
+  process.exit(1)
+}
+
+const newReadme = readme.slice(0, tableStart + 1) + table + '\n' + readme.slice(tipsStart)
+writeFileSync(readmePath, newReadme)
+console.log('README.md updated successfully')

package/lib/tinydns.js

@@ -33,7 +33,7 @@ export function unescapeOctal(str) {
 
 export function octalToChar(str) {
   // relace instances of \NNN with ASCII
-  return str.replace(octalRe, (o) => String.fromCharCode(parseInt(o.substring(1), 8)))
+  return str.replace(octalRe, (o) => String.fromCharCode(parseInt(o.slice(1), 8)))
 }
 
 export function octalToHex(str) {
@@ -41,29 +41,29 @@ export function octalToHex(str) {
   return str.replace(octalRe, (o) => {
     // parseInt(n, 8) -> from octal to decimal
     //  .toString(16) -> decimal to hex
-    return parseInt(o.substring(1), 8).toString(16).padStart(2, 0)
+    return parseInt(o.slice(1), 8).toString(16).padStart(2, 0)
   })
 }
 
 export function octalToUInt8(str) {
   const b = Buffer.alloc(1)
-  b.writeUInt8(parseInt(str.substring(1, 4), 8), 0)
+  b.writeUInt8(parseInt(str.slice(1, 4), 8), 0)
   return b.readUInt8()
 }
 
 export function octalToUInt16(str) {
   const b = Buffer.alloc(2)
-  b.writeUInt8(parseInt(str.substring(1, 4), 8), 0)
-  b.writeUInt8(parseInt(str.substring(5, 8), 8), 1)
+  b.writeUInt8(parseInt(str.slice(1, 4), 8), 0)
+  b.writeUInt8(parseInt(str.slice(5, 8), 8), 1)
   return b.readUInt16BE()
 }
 
 export function octalToUInt32(str) {
   const b = Buffer.alloc(4)
-  b.writeUInt8(parseInt(str.substring(1, 4), 8), 0)
-  b.writeUInt8(parseInt(str.substring(5, 8), 8), 1)
-  b.writeUInt8(parseInt(str.substring(9, 12), 8), 2)
-  b.writeUInt8(parseInt(str.substring(13, 16), 8), 3)
+  b.writeUInt8(parseInt(str.slice(1, 4), 8), 0)
+  b.writeUInt8(parseInt(str.slice(5, 8), 8), 1)
+  b.writeUInt8(parseInt(str.slice(9, 12), 8), 2)
+  b.writeUInt8(parseInt(str.slice(13, 16), 8), 3)
   return b.readUInt32BE()
 }
 
@@ -99,7 +99,7 @@ export function packDomainName(fqdn) {
   // RFC 1035, 3.3 Standard RRs
   // The standard wire format for DNS names. (1 octet length + octets)
   let packed = ''
-  fqdn.split('.').map((label) => {
+  fqdn.split('.').forEach((label) => {
     if (label === undefined || !label.length) return
 
     const len = Buffer.alloc(1)
@@ -196,6 +196,16 @@ export function octalToIPv4(str) {
   return [24, 16, 8, 0].map((n) => (asInt >> n) & 0xff).join('.')
 }
 
+export function ipv6toOctal(ip) {
+  return packHex(ip.replace(/:/g, ''))
+}
+
+export function octalToIPv6(str) {
+  return octalToHex(str)
+    .match(/(.{4})/g)
+    .join(':')
+}
+
 export function base64toOctal(str) {
   const bytes = Buffer.from(str, 'base64')
   let escaped = ''

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nictool/dns-resource-record",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "DNS Resource Records",
   "main": "index.js",
   "files": [
@@ -11,8 +11,9 @@
   ],
   "type": "module",
   "scripts": {
+    "build": "node lib/readme.js",
     "format:check": "npm run prettier; npm run lint",
-    "format": "npm run prettier -- --write && npm run lint --fix",
+    "format": "npm run prettier -- --write && npm run lint:fix",
     "lint": "npx eslint **/*.js",
     "lint:fix": "npm run lint -- --fix",
     "prettier": "npx prettier --ignore-path .gitignore --check .",

package/rr/a.js

@@ -16,6 +16,10 @@ export default class A extends RR {
     return 'Address'
   }
 
+  getTags() {
+    return ['common']
+  }
+
   getRdataFields(arg) {
     return ['address']
   }
@@ -39,9 +43,9 @@ export default class A extends RR {
   }
 
   /******  IMPORTERS   *******/
-  fromTinydns(opts) {
+  fromTinydns({ tinyline }) {
     // +fqdn:ip:ttl:timestamp:lo
-    const [owner, ip, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
+    const [owner, ip, ttl, ts, loc] = tinyline.slice(1).split(':')
 
     return new A({
       owner: this.fullyQualify(owner),
@@ -49,13 +53,13 @@ export default class A extends RR {
       address: ip,
       ttl: parseInt(ttl, 10),
       timestamp: ts,
-      location: loc !== '' && loc !== '\n' ? loc : '',
+      location: loc?.trim() ?? '',
     })
   }
 
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  A  192.0.2.127
-    const [owner, ttl, c, type, address] = opts.bindline.split(/\s+/)
+    const [owner, ttl, c, type, address] = bindline.split(/\s+/)
     return new A({
       owner,
       ttl: parseInt(ttl, 10),
@@ -66,6 +70,10 @@ export default class A extends RR {
   }
 
   /******  EXPORTERS   *******/
+  getWireRdata() {
+    return Buffer.from(this.get('address').split('.').map(Number))
+  }
+
   toTinydns() {
     return `+${this.getTinyFQDN('owner')}:${this.get('address')}:${this.getTinydnsPostamble()}\n`
   }

package/rr/aaaa.js

@@ -15,19 +15,23 @@ export default class AAAA extends RR {
   }
 
   getCompressed(val) {
-    return this.compress(val || this.get('address'))
+    return this.compress(val ?? this.get('address'))
   }
 
   getDescription() {
     return 'Address IPv6'
   }
 
+  getTags() {
+    return ['common']
+  }
+
   getRdataFields(arg) {
     return ['address']
   }
 
   getRFCs() {
-    return [3596]
+    return [3596, 5952]
   }
 
   getTypeId() {
@@ -40,19 +44,19 @@ export default class AAAA extends RR {
       address: '2001:0db8:0020:000a:0000:0000:0000:0004',
       class: 'IN',
       ttl: 3600,
-      type: 'A',
+      type: 'AAAA',
     }
   }
 
   /******  IMPORTERS   *******/
-  fromTinydns(opts) {
-    const str = opts.tinyline
+  fromTinydns({ tinyline }) {
+    const str = tinyline
     let fqdn, ip, n, rdata, ttl, ts, loc
 
     switch (str[0]) {
       case ':':
         // GENERIC  =>  :fqdn:28:rdata:ttl:timestamp:lo
-        ;[fqdn, n, rdata, ttl, ts, loc] = str.substring(1).split(':')
+        ;[fqdn, n, rdata, ttl, ts, loc] = str.slice(1).split(':')
         if (n != 28) this.throwHelp('AAAA fromTinydns, invalid n')
         ip = TINYDNS.octalToHex(rdata)
           .match(/([0-9a-fA-F]{4})/g)
@@ -62,7 +66,7 @@ export default class AAAA extends RR {
       case '6':
         // AAAA     =>  3fqdn:ip:x:ttl:timestamp:lo
         // AAAA,PTR =>  6fqdn:ip:x:ttl:timestamp:lo
-        ;[fqdn, rdata, ttl, ts, loc] = str.substring(1).split(':')
+        ;[fqdn, rdata, ttl, ts, loc] = str.slice(1).split(':')
         ip = rdata.match(/(.{4})/g).join(':')
         break
     }
@@ -73,13 +77,13 @@ export default class AAAA extends RR {
       type: 'AAAA',
       address: ip,
       timestamp: ts,
-      location: loc !== '' && loc !== '\n' ? loc : '',
+      location: loc?.trim() ?? '',
     })
   }
 
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  AAAA  ...
-    const [owner, ttl, c, type, ip] = opts.bindline.split(/\s+/)
+    const [owner, ttl, c, type, ip] = bindline.split(/\s+/)
     return new AAAA({
       owner,
       ttl: parseInt(ttl, 10),
@@ -124,7 +128,7 @@ export default class AAAA extends RR {
     if (delimiter === undefined) delimiter = ':'
 
     const colons = val.match(/:/g)
-    if (colons && colons.length < 7) {
+    if (colons?.length < 7) {
       // console.log(`AAAA: restoring compressed colons`)
       val = val.replace(/::/, ':'.repeat(9 - colons.length))
     }
@@ -138,6 +142,10 @@ export default class AAAA extends RR {
   }
 
   /******  EXPORTERS   *******/
+  getWireRdata() {
+    return Buffer.from(this.expand(this.get('address'), ''), 'hex')
+  }
+
   toBind(zone_opts) {
     return `${this.getPrefix(zone_opts)}\t${this.getCompressed()}\n`
   }

package/rr/apl.js

@@ -42,9 +42,56 @@ export default class APL extends RR {
   }
 
   /******  IMPORTERS   *******/
-  fromBind(opts) {
+  fromTinydns({ tinyline }) {
+    // APL via generic, :fqdn:42:rdata:ttl:timestamp:lo
+    const [fqdn, n, rdata, ttl, ts, loc] = tinyline.slice(1).split(':')
+    if (n != 42) this.throwHelp('APL fromTinydns, invalid n')
+
+    const bytes = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
+    const items = []
+    let pos = 0
+
+    while (pos < bytes.length) {
+      const afi = bytes.readUInt16BE(pos)
+      pos += 2
+      const prefix = bytes.readUInt8(pos)
+      pos++
+      const adfLenByte = bytes.readUInt8(pos)
+      pos++
+      const neg = (adfLenByte & 0x80) !== 0
+      const addrLen = adfLenByte & 0x7f
+      const addrBytes = bytes.slice(pos, pos + addrLen)
+      pos += addrLen
+
+      let addr
+      if (afi === 1) {
+        const padded = Buffer.alloc(4)
+        addrBytes.copy(padded)
+        addr = [...padded].join('.')
+      } else {
+        const padded = Buffer.alloc(16)
+        addrBytes.copy(padded)
+        const groups = []
+        for (let i = 0; i < 16; i += 2) groups.push(padded.readUInt16BE(i).toString(16).padStart(4, '0'))
+        addr = this.compressIPv6(groups.join(':'))
+      }
+
+      items.push(`${neg ? '!' : ''}${afi}:${addr}/${prefix}`)
+    }
+
+    return new APL({
+      owner: this.fullyQualify(fqdn),
+      ttl: parseInt(ttl, 10),
+      type: 'APL',
+      'apl rdata': items.join(' '),
+      timestamp: ts,
+      location: loc?.trim() ?? '',
+    })
+  }
+
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  APL  {[!]afi:address/prefix}*
-    const parts = opts.bindline.split(/\s+/)
+    const parts = bindline.split(/\s+/)
     const [owner, ttl, c, type] = parts
     return new APL({
       owner,

package/rr/caa.js

@@ -62,6 +62,10 @@ export default class CAA extends RR {
     return 'Certification Authority Authorization'
   }
 
+  getTags() {
+    return ['security']
+  }
+
   getQuotedFields() {
     return ['value']
   }
@@ -91,17 +95,17 @@ export default class CAA extends RR {
   }
 
   /******  IMPORTERS   *******/
-  fromTinydns(opts) {
+  fromTinydns({ tinyline }) {
     // CAA via generic, :fqdn:n:rdata:ttl:timestamp:lo
-    const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
+    const [fqdn, n, rdata, ttl, ts, loc] = tinyline.slice(1).split(':')
     if (n != 257) this.throwHelp('CAA fromTinydns, invalid n')
 
-    const flags = TINYDNS.octalToUInt8(rdata.substring(0, 4))
-    const taglen = TINYDNS.octalToUInt8(rdata.substring(4, 8))
+    const flags = TINYDNS.octalToUInt8(rdata.slice(0, 4))
+    const taglen = TINYDNS.octalToUInt8(rdata.slice(4, 8))
 
-    const unescaped = TINYDNS.octalToChar(rdata.substring(8))
-    const tag = unescaped.substring(0, taglen)
-    const fingerprint = unescaped.substring(taglen)
+    const unescaped = TINYDNS.octalToChar(rdata.slice(8))
+    const tag = unescaped.slice(0, taglen)
+    const fingerprint = unescaped.slice(taglen)
 
     return new CAA({
       owner: this.fullyQualify(fqdn),
@@ -111,17 +115,23 @@ export default class CAA extends RR {
       tag,
       value: fingerprint,
       timestamp: ts,
-      location: loc !== '' && loc !== '\n' ? loc : '',
+      location: loc?.trim() ?? '',
     })
   }
 
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  CAA flags, tags, value
-    const regex = /^([\S]+)\s+([0-9]{1,10})\s+(IN)\s+(CAA)\s+([0-9]+)\s+(\w+)\s+("[^"]+"|[\S]+?)$/i
-    const fields = opts.bindline.trim().match(regex)
-    if (!fields) this.throwHelp(`unable to parse: ${opts.bindline}`)
+    const regex =
+      /^(?<owner>\S+)\s+(?<ttl>\d{1,10})\s+(?<class>IN)\s+(?<type>CAA)\s+(?<flags>\d+)\s+(?<tag>\w+)\s+(?:"(?<quotedValue>[^"]+)"|(?<unquotedValue>\S+))$/i
+
+    const match = bindline.trim().match(regex)
+
+    if (!match) {
+      this.throwHelp(`unable to parse CAA: ${bindline}`)
+    }
+
+    const { owner, ttl, class: c, type, flags, tag, quotedValue, unquotedValue } = match.groups
 
-    const [owner, ttl, c, type, flags, tag, value] = fields.slice(1)
     return new CAA({
       owner,
       ttl: parseInt(ttl, 10),
@@ -129,21 +139,18 @@ export default class CAA extends RR {
       type,
       flags: parseInt(flags, 10),
       tag,
-      value,
+      value: quotedValue ?? unquotedValue,
     })
   }
 
   /******  EXPORTERS   *******/
 
   toTinydns() {
-    let rdata = ''
-    rdata += TINYDNS.UInt8toOctal(this.get('flags'))
-
-    rdata += TINYDNS.UInt8toOctal(this.get('tag').length)
-    rdata += TINYDNS.escapeOctal(/[\r\n\t:\\/]/, this.get('tag'))
-
-    rdata += TINYDNS.escapeOctal(/[\r\n\t:\\/]/, this.getQuoted('value'))
-
-    return this.getTinydnsGeneric(rdata)
+    return this.getTinydnsGeneric(
+      TINYDNS.UInt8toOctal(this.get('flags')) +
+        TINYDNS.UInt8toOctal(this.get('tag').length) +
+        TINYDNS.escapeOctal(/[\r\n\t:\\/]/, this.get('tag')) +
+        TINYDNS.escapeOctal(/[\r\n\t:\\/]/, this.getQuoted('value')),
+    )
   }
 }