@opusdns/api 1.159.0 → 1.161.0

package/src/openapi.yaml

@@ -536,6 +536,17 @@ components:
       - canceled
       title: BillingTransactionStatus
       type: string
+    Body_upload_whitelabel_asset_v1_whitelabel_branding_assets_post:
+      properties:
+        file:
+          contentMediaType: application/octet-stream
+          description: Asset file (image/font)
+          title: File
+          type: string
+      required:
+      - file
+      title: Body_upload_whitelabel_asset_v1_whitelabel_branding_assets_post
+      type: object
     Brand:
       properties:
         logo:
@@ -551,6 +562,38 @@ components:
           title: Name
       title: Brand
       type: object
+    BrandingAsset:
+      properties:
+        asset_id:
+          description: Opaque handle used to delete or reference the asset
+          title: Asset Id
+          type: string
+        asset_url:
+          description: Public URL of the asset
+          title: Asset Url
+          type: string
+        content_type:
+          anyOf:
+          - type: string
+          - type: 'null'
+          description: MIME type of the asset
+          title: Content Type
+        size_bytes:
+          description: Asset size in bytes
+          title: Size Bytes
+          type: integer
+        updated_on:
+          description: Last-modified timestamp
+          format: date-time
+          title: Updated On
+          type: string
+      required:
+      - asset_id
+      - asset_url
+      - size_bytes
+      - updated_on
+      title: BrandingAsset
+      type: object
     BrandingDocument:
       properties:
         auth:
@@ -4002,28 +4045,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -4122,14 +4174,14 @@ components:
           - type: 'null'
           description: "Override attributes for this domain.\n\nAdditional attributes\
             \ of the domain, keyed by attribute name. Values are strings.\n\nCustomer-settable\
-            \ keys:\n\n- `auto_renew_period`: `monthly` or `yearly`. All TLDs on create\
-            \ and transfer-in, `.de` only on update. Selects the\n  period of the\
-            \ next renewal; the current expiry date does not move. On transfer-in\
-            \ without `period` it also sets the\n  period added by the transfer. `monthly`\
-            \ is rejected on transfer-in and ignored at renewal when the TLD has no\n\
-            \  month-unit renewal period.\n- `music_registrant_attestation`: `true`.\
-            \ `.music` registration.\n- `nic_it_compliance_confirmation`: `true`.\
-            \ `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
+            \ keys:\n\n- `auto_renew_period`: `monthly` or `yearly`. All TLDs on create,\
+            \ transfer-in and update. Selects the\n  period of the next renewal; the\
+            \ current expiry date does not move. On transfer-in without `period` it\
+            \ also sets the\n  period added by the transfer. When the TLD has no month-unit\
+            \ renewal period, `monthly` is rejected on update and on\n  a transfer-in\
+            \ that omits `period`, and ignored at renewal.\n- `music_registrant_attestation`:\
+            \ `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
+            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
             \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
             \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
             \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
@@ -4140,11 +4192,19 @@ components:
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           title: Attributes
         auth_code:
           anyOf:
@@ -4228,28 +4288,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           title: Attributes
         auth_code:
           anyOf:
@@ -4323,28 +4392,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -6205,14 +6283,14 @@ components:
           - type: 'null'
           description: "Override attributes for this domain.\n\nAdditional attributes\
             \ of the domain, keyed by attribute name. Values are strings.\n\nCustomer-settable\
-            \ keys:\n\n- `auto_renew_period`: `monthly` or `yearly`. All TLDs on create\
-            \ and transfer-in, `.de` only on update. Selects the\n  period of the\
-            \ next renewal; the current expiry date does not move. On transfer-in\
-            \ without `period` it also sets the\n  period added by the transfer. `monthly`\
-            \ is rejected on transfer-in and ignored at renewal when the TLD has no\n\
-            \  month-unit renewal period.\n- `music_registrant_attestation`: `true`.\
-            \ `.music` registration.\n- `nic_it_compliance_confirmation`: `true`.\
-            \ `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
+            \ keys:\n\n- `auto_renew_period`: `monthly` or `yearly`. All TLDs on create,\
+            \ transfer-in and update. Selects the\n  period of the next renewal; the\
+            \ current expiry date does not move. On transfer-in without `period` it\
+            \ also sets the\n  period added by the transfer. When the TLD has no month-unit\
+            \ renewal period, `monthly` is rejected on update and on\n  a transfer-in\
+            \ that omits `period`, and ignored at renewal.\n- `music_registrant_attestation`:\
+            \ `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
+            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
             \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
             \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
             \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
@@ -6223,11 +6301,19 @@ components:
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           title: Attributes
         auth_code:
           anyOf:
@@ -6311,28 +6397,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           title: Attributes
         contacts:
           $ref: '#/components/schemas/DomainContactHandles'
@@ -6400,28 +6495,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -6489,28 +6593,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -6623,28 +6736,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -6866,28 +6988,37 @@ components:
           - type: 'null'
           description: "Additional attributes of the domain, keyed by attribute name.\
             \ Values are strings.\n\nCustomer-settable keys:\n\n- `auto_renew_period`:\
-            \ `monthly` or `yearly`. All TLDs on create and transfer-in, `.de` only\
-            \ on update. Selects the\n  period of the next renewal; the current expiry\
-            \ date does not move. On transfer-in without `period` it also sets the\n\
-            \  period added by the transfer. `monthly` is rejected on transfer-in\
-            \ and ignored at renewal when the TLD has no\n  month-unit renewal period.\n\
-            - `music_registrant_attestation`: `true`. `.music` registration.\n- `nic_it_compliance_confirmation`:\
-            \ `true`. `.it` registration and transfer.\n- `travel_industry_acknowledgement`:\
-            \ `true`. `.travel` registration.\n- `internet_ee_registrant_agreement`:\
-            \ `true`. `.ee` registration.\n- `punktum_dk_terms_acceptance`: `true`.\
-            \ `.dk` registration and registrant change.\n- `de_general_request_contact`,\
-            \ `de_abuse_contact`: id of a contact whose `.de` attribute set has `DE_CONTACT_TYPE`\
-            \ =\n  `REQUEST`. `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\
-            \nWritten by the platform and rejected if supplied: `verification_required`,\
-            \ `promotion`, `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
+            \ `monthly` or `yearly`. All TLDs on create, transfer-in and update. Selects\
+            \ the\n  period of the next renewal; the current expiry date does not\
+            \ move. On transfer-in without `period` it also sets the\n  period added\
+            \ by the transfer. When the TLD has no month-unit renewal period, `monthly`\
+            \ is rejected on update and on\n  a transfer-in that omits `period`, and\
+            \ ignored at renewal.\n- `music_registrant_attestation`: `true`. `.music`\
+            \ registration.\n- `nic_it_compliance_confirmation`: `true`. `.it` registration\
+            \ and transfer.\n- `travel_industry_acknowledgement`: `true`. `.travel`\
+            \ registration.\n- `internet_ee_registrant_agreement`: `true`. `.ee` registration.\n\
+            - `punktum_dk_terms_acceptance`: `true`. `.dk` registration and registrant\
+            \ change.\n- `de_general_request_contact`, `de_abuse_contact`: id of a\
+            \ contact whose `.de` attribute set has `DE_CONTACT_TYPE` =\n  `REQUEST`.\
+            \ `.de` only.\n\nBoolean keys also accept `1` and `yes`.\n\nWritten by\
+            \ the platform and rejected if supplied: `verification_required`, `promotion`,\
+            \ `promotion_eligibility`,\n`nor_id_declaration`, `nor_id_declaration_token`,\
             \ `punktum_dk_tracking_no`, `domain_contact_attributes`. They are never\n\
             returned under `attributes`; inline contact attributes surface on the\
             \ matching `contacts` entry instead.\n\nDerived from the signed `.no`\
-            \ applicant declaration and ignored if supplied: `nor_id_applicant_version`,\n\
+            \ applicant declaration and ignored if supplied on create: `nor_id_applicant_version`,\n\
             `nor_id_applicant_accept_name`, `nor_id_applicant_accept_date`.\n\nOn\
-            \ update, only `.de` stores attributes and an empty value removes the\
-            \ stored attribute; `.dk` reads\n`punktum_dk_terms_acceptance` to confirm\
-            \ a registrant change and other registries ignore attributes.\n"
+            \ update, every registry stores the supplied attributes, and the update\
+            \ is not sent to the registry unless they\nstore; a registry that rejects\
+            \ the change stores nothing. An empty value removes the stored attribute,\
+            \ except for\n`auto_renew_period`, whose only accepted values are `monthly`\
+            \ and `yearly`. `.dk` also reads\n`punktum_dk_terms_acceptance` to confirm\
+            \ a registrant change. An update cannot change what the registrant accepted\
+            \ at\nregistration, so these are rejected on update: `music_registrant_attestation`,\
+            \ `nic_it_compliance_confirmation`,\n`travel_industry_acknowledgement`,\
+            \ `internet_ee_registrant_agreement` and the three `nor_id_applicant_*`\
+            \ keys.\n`punktum_dk_terms_acceptance` stays settable for a registrant\
+            \ change but cannot be removed with an empty value.\n"
           examples:
           - auto_renew_period: monthly
           title: Attributes
@@ -9421,6 +9552,16 @@ components:
       - confirmation
       title: LegalRequirementType
       type: string
+    ListBrandingAssetsResponse:
+      properties:
+        assets:
+          description: Uploaded assets, most recent first
+          items:
+            $ref: '#/components/schemas/BrandingAsset'
+          title: Assets
+          type: array
+      title: ListBrandingAssetsResponse
+      type: object
     ListVanityNameserverSetsRes:
       properties:
         pagination:
@@ -9525,12 +9666,7 @@ components:
       title: Logo
       type: object
     MailTemplate:
-      description: 'One editable transactional email template. This is the public
-        catalog entry:
-
-        mail-service''s operational fields (engine, internal, whitelabel, brand_defaults)
-
-        are deliberately not declared, so the response model drops them.'
+      description: One editable transactional email template in the catalog.
       properties:
         blocks:
           additionalProperties:
@@ -9604,12 +9740,8 @@ components:
       title: MailTemplateCatalogRes
       type: object
     MailTemplateCategory:
-      description: 'Category a template is grouped under in the editor. mail-service
-        owns the set
-
-        and validates it; a value it adds before this enum is updated decodes to UNKNOWN
-
-        rather than failing the catalog (see MailTemplate._coerce_category).'
+      description: Category a template is grouped under in the editor. An unrecognised
+        value decodes to `unknown`.
       enum:
       - organization
       - billing
@@ -12180,10 +12312,16 @@ components:
           anyOf:
           - $ref: '#/components/schemas/BrandingDocument'
           - type: 'null'
+          description: Draft branding document to render the preview with; omit to
+            preview with the default OpusDNS branding. Only the fields the template
+            uses are applied, the rest are ignored.
         language_code:
+          description: Locale to render in (e.g. en); falls back to the template's
+            default
           title: Language Code
           type: string
         template_name:
+          description: Template to render, as listed by the template catalog
           title: Template Name
           type: string
       required:
@@ -15299,14 +15437,13 @@ components:
         custom domain is untouched - it is re-pointed by its hostnames through recheck)
         and `enabled`
 
-        starts or stops serving - both applied asynchronously via the reconcile job,
-        neither a purchase.
+        starts or stops serving - both applied asynchronously, neither a purchase.
+        `renewal_mode` sets the
 
-        `renewal_mode` sets the subscription''s auto-renew intent synchronously (EXPIRE
-        = cancel at period
+        subscription''s auto-renew intent synchronously (EXPIRE = cancel at period
+        end, RENEW = un-cancel);
 
-        end, RENEW = un-cancel); it is not a purchase either - no price change. At
-        least one must be given.'
+        it is not a purchase either - no price change. At least one must be given.'
       properties:
         enabled:
           anyOf:
@@ -15646,19 +15783,16 @@ components:
       title: WhitelabelRenewalMode
       type: string
     WhitelabelSubscriptionInfo:
-      description: 'The whitelabel''s billing-lifecycle state, a pass-through read
-        from the subscription at the api
+      description: 'The whitelabel''s billing-lifecycle state, grouped into its own
+        block: the parent''s
 
-        layer (product-service owns it; the branding row does not). Grouped into its
-        own object so it
+        `subscription` is null when the config has no live subscription (still provisioning,
+        or
 
-        reads as one all-or-nothing block: the parent''s `subscription` is null when
-        the config has no live
+        terminated). A cancelled whitelabel reads as renewal_mode=expire with expires_on
+        set to when
 
-        subscription (still provisioning, or terminated). renewal_mode EXPIRE + expires_on
-        is how a
-
-        cancelled whitelabel reads: "cancelled, served until expires_on".'
+        serving stops.'
       properties:
         expires_on:
           anyOf:
@@ -16250,7 +16384,7 @@ info:
     \n\n"
   summary: OpusDNS - your gateway to a seamless domain management experience.
   title: OpusDNS API
-  version: 2026-09-08-081758
+  version: 2026-09-08-180300
   x-logo:
     altText: OpusDNS API Reference
     url: https://d24lr4zqs1tgqh.cloudfront.net/c9505a20-5ae1-406c-b060-d392569caebf.jpg
@@ -34054,6 +34188,179 @@ paths:
       - whitelabel
       x-required-permissions:
       - whitelabel_branding:manage
+  /v1/whitelabel-branding/assets:
+    get:
+      operationId: list_whitelabel_assets_v1_whitelabel_branding_assets_get
+      parameters:
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ListBrandingAssetsResponse'
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: List uploaded branding assets
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:read
+    post:
+      operationId: upload_whitelabel_asset_v1_whitelabel_branding_assets_post
+      parameters:
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      requestBody:
+        content:
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/Body_upload_whitelabel_asset_v1_whitelabel_branding_assets_post'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BrandingAsset'
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: Upload a branding asset
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:manage
+  /v1/whitelabel-branding/assets/{asset_id}:
+    delete:
+      operationId: delete_whitelabel_asset_v1_whitelabel_branding_assets__asset_id__delete
+      parameters:
+      - in: path
+        name: asset_id
+        required: true
+        schema:
+          title: Asset Id
+          type: string
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      responses:
+        '204':
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: Delete an uploaded branding asset
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:manage
+  /v1/whitelabel-branding/document:
+    get:
+      operationId: get_whitelabel_document_v1_whitelabel_branding_document_get
+      parameters:
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BrandingDocument'
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: Get the stored branding document
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:read
+    post:
+      operationId: put_whitelabel_document_v1_whitelabel_branding_document_post
+      parameters:
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/BrandingDocument'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BrandingDocument'
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: Upsert the branding document
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:manage
+    put:
+      operationId: put_whitelabel_document_v1_whitelabel_branding_document_put
+      parameters:
+      - $ref: '#/components/parameters/DatetimeFormatHeader'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/BrandingDocument'
+        required: true
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BrandingDocument'
+          description: Successful Response
+        '422':
+          content:
+            application/problem+json:
+              schema:
+                $ref: '#/components/schemas/HTTPValidationError'
+          description: Validation Error
+      security:
+      - OAuth2PasswordBearer: []
+      - APIKeyHeader: []
+      summary: Upsert the branding document
+      tags:
+      - whitelabel
+      x-required-permissions:
+      - whitelabel_branding:manage
   /v1/whitelabel-branding/email/preview:
     post:
       operationId: preview_whitelabel_email_v1_whitelabel_branding_email_preview_post
@@ -34671,16 +34978,19 @@ tags:
     "auth_subdomain": "auth", "period": {...}}`.
 
     A `label` is required for both tiers: every whitelabel keeps a managed subdomain,
-    composed by branding-service as `<label>-<hash>.<base-tier suffix>` and `<label>-<hash>-auth.<base-tier
-    suffix>`, where the hash comes from a per-organization secret it alone holds.
+    composed as `app.<label>.<base-tier suffix>` (dashboard) and `auth.<label>.<base-tier
+    suffix>` (login).
 
-    For base, that composed pair is what gets served; onboarding skips DNS verification
-    and the edge CNAME, because that zone has wildcard DNS and a wildcard certificate.
+    For base, that composed pair is what gets served: onboarding skips domain verification
+    (the zone is OpusDNS-owned) but still points each host at the whitelabel edge,
+    which issues a per-host certificate on demand.
 
     For plus, the customer''s own domain is served instead (omitting `dashboard_subdomain`
     serves the dashboard on the apex); the domain must be an OpusDNS-hosted zone owned
     by the organization, which onboarding verifies before pointing both hosts at the
-    whitelabel edge.
+    whitelabel edge. Set `create_zone: true` to have onboarding stand the zone up
+    if it does not already exist. The managed base pair is published alongside the
+    custom domain as a backup address.
 
     Labels are validated on the way in, and branding-service additionally rejects
     reserved ones (that rejection surfaces as a 400).
@@ -34718,20 +35028,22 @@ tags:
 
 
     A disabled whitelabel answers 409 to both `/recheck` and `/tier`: re-enable it
-    first (`PATCH {"enabled": true}` alone re-runs the reconcile).
+    first (`PATCH {"enabled": true}` alone re-runs onboarding).
 
 
     `PATCH /v1/whitelabel-branding` changes the config without touching its subscription
     or price.
 
-    `{"label": "newname"}` moves a base-tier whitelabel to a different subdomain,
-    accepted only before provisioning has started (a plus whitelabel has no served
-    label - it is re-pointed by its hostnames through recheck).
+    `{"label": "newname"}` moves the managed subdomain to a different label at any
+    time, including while the whitelabel is active. On base this changes the served
+    host; on plus it moves the backup pair, leaving the custom domain unchanged (re-point
+    that through recheck).
 
     `{"enabled": false}` stops serving the whitelabel: its login client is disabled
-    and OpusDNS withdraws its routing - the managed subdomain is unpublished for base,
-    the DNS edge records are removed for plus (a plus host whose DNS is pointed at
-    the edge manually keeps reaching the branded dashboard, but its login stays disabled).
+    and OpusDNS withdraws its routing - the edge records for the served hosts are
+    removed and the managed subdomain unpublished (a plus host whose DNS is still
+    pointed at the edge keeps reaching the branded dashboard, but its login stays
+    disabled).
 
     The configuration, the branding document and the provisioning history are kept,
     so `{"enabled": true}` brings it back without re-provisioning.