@opusdns/api 1.85.0 → 1.87.0

package/package.json

@@ -3,7 +3,7 @@
     "@opusdns/api-spec-ts-generator": "^1.2.0"
   },
   "name": "@opusdns/api",
-  "version": "1.85.0",
+  "version": "1.87.0",
   "description": "TypeScript types for the OpusDNS OpenAPI specification",
   "main": "./src/index.ts",
   "module": "./src/index.ts",

package/src/helpers/keys.ts

@@ -1330,6 +1330,7 @@ export const KEY_DNS_CONFIGURATION_BASE_CZDS_AVAILABLE = 'czds_available' satisf
 export const KEY_DNS_CONFIGURATION_BASE_DNSSEC_ALLOWED = 'dnssec_allowed' satisfies keyof DnsConfigurationBase;
 export const KEY_DNS_CONFIGURATION_BASE_DNSSEC_MANDATORY = 'dnssec_mandatory' satisfies keyof DnsConfigurationBase;
 export const KEY_DNS_CONFIGURATION_BASE_DNSSEC_MODE = 'dnssec_mode' satisfies keyof DnsConfigurationBase;
+export const KEY_DNS_CONFIGURATION_BASE_DNSSEC_SUBMIT_DIGEST_TYPES = 'dnssec_submit_digest_types' satisfies keyof DnsConfigurationBase;
 export const KEY_DNS_CONFIGURATION_BASE_HOST_OBJECTS = 'host_objects' satisfies keyof DnsConfigurationBase;
 export const KEY_DNS_CONFIGURATION_BASE_HOST_PARENT_CHECK_TLDS = 'host_parent_check_tlds' satisfies keyof DnsConfigurationBase;
 export const KEY_DNS_CONFIGURATION_BASE_REGISTRY_NAMESERVER_CHECK = 'registry_nameserver_check' satisfies keyof DnsConfigurationBase;
@@ -1341,6 +1342,7 @@ export const KEYS_DNS_CONFIGURATION_BASE = [
   KEY_DNS_CONFIGURATION_BASE_DNSSEC_ALLOWED,
   KEY_DNS_CONFIGURATION_BASE_DNSSEC_MANDATORY,
   KEY_DNS_CONFIGURATION_BASE_DNSSEC_MODE,
+  KEY_DNS_CONFIGURATION_BASE_DNSSEC_SUBMIT_DIGEST_TYPES,
   KEY_DNS_CONFIGURATION_BASE_HOST_OBJECTS,
   KEY_DNS_CONFIGURATION_BASE_HOST_PARENT_CHECK_TLDS,
   KEY_DNS_CONFIGURATION_BASE_REGISTRY_NAMESERVER_CHECK,

package/src/helpers/responses.d.ts

@@ -1092,11 +1092,12 @@ export type POST_DnsByZoneNameDnssecDisable_Response_200 = DnsChanges;
 export type POST_DnsByZoneNameDnssecDisable_Response_400 = Problem;
 export type POST_DnsByZoneNameDnssecDisable_Response_422 = HTTPValidationError;
 
-export type POST_DnsByZoneNameDnssecEnable_Response = POST_DnsByZoneNameDnssecEnable_Response_200 | POST_DnsByZoneNameDnssecEnable_Response_400 | POST_DnsByZoneNameDnssecEnable_Response_422;
+export type POST_DnsByZoneNameDnssecEnable_Response = POST_DnsByZoneNameDnssecEnable_Response_200 | POST_DnsByZoneNameDnssecEnable_Response_400 | POST_DnsByZoneNameDnssecEnable_Response_409 | POST_DnsByZoneNameDnssecEnable_Response_422;
 
 export type POST_DnsByZoneNameDnssecEnable_Response_200 = DnsChanges;
 export type POST_DnsByZoneNameDnssecEnable_Response_400 = Problem;
-export type POST_DnsByZoneNameDnssecEnable_Response_422 = HTTPValidationError;
+export type POST_DnsByZoneNameDnssecEnable_Response_409 = Problem;
+export type POST_DnsByZoneNameDnssecEnable_Response_422 = Problem;
 
 export type POST_DomainForwards_Response = POST_DomainForwards_Response_201 | POST_DomainForwards_Response_401 | POST_DomainForwards_Response_403 | POST_DomainForwards_Response_404 | POST_DomainForwards_Response_409 | POST_DomainForwards_Response_422;
 
@@ -1130,11 +1131,12 @@ export type POST_DomainsByDomainReferenceDnssecDisable_Response = POST_DomainsBy
 export type POST_DomainsByDomainReferenceDnssecDisable_Response_404 = Problem;
 export type POST_DomainsByDomainReferenceDnssecDisable_Response_422 = HTTPValidationError;
 
-export type POST_DomainsByDomainReferenceDnssecEnable_Response = POST_DomainsByDomainReferenceDnssecEnable_Response_200 | POST_DomainsByDomainReferenceDnssecEnable_Response_404 | POST_DomainsByDomainReferenceDnssecEnable_Response_422;
+export type POST_DomainsByDomainReferenceDnssecEnable_Response = POST_DomainsByDomainReferenceDnssecEnable_Response_200 | POST_DomainsByDomainReferenceDnssecEnable_Response_404 | POST_DomainsByDomainReferenceDnssecEnable_Response_409 | POST_DomainsByDomainReferenceDnssecEnable_Response_422;
 
 export type POST_DomainsByDomainReferenceDnssecEnable_Response_200 = DomainDnssecData[];
 export type POST_DomainsByDomainReferenceDnssecEnable_Response_404 = Problem;
-export type POST_DomainsByDomainReferenceDnssecEnable_Response_422 = HTTPValidationError;
+export type POST_DomainsByDomainReferenceDnssecEnable_Response_409 = Problem;
+export type POST_DomainsByDomainReferenceDnssecEnable_Response_422 = Problem;
 
 export type POST_DomainsByDomainReferenceRenew_Response = POST_DomainsByDomainReferenceRenew_Response_200 | POST_DomainsByDomainReferenceRenew_Response_422;
 

package/src/openapi.yaml

@@ -2547,6 +2547,19 @@ components:
           - $ref: '#/components/schemas/DnssecModeType'
           - type: 'null'
           description: DNSSEC mode
+        dnssec_submit_digest_types:
+          anyOf:
+          - items:
+              type: integer
+            minItems: 1
+            type: array
+          - type: 'null'
+          description: 'Which DS digest types we submit to the registry for zones
+            we host, in order of preference: the first listed type the zone has a
+            DS record for is submitted, later entries are fallbacks. Absent means
+            submit every digest type the zone publishes. This is our submission policy,
+            not the set of digest types the registry accepts.'
+          title: Dnssec Submit Digest Types
         host_objects:
           description: Whether the registry supports host objects or use attributes
           title: Host Objects
@@ -14882,7 +14895,7 @@ info:
     \n\n"
   summary: OpusDNS - your gateway to a seamless domain management experience.
   title: OpusDNS API
-  version: 2026-07-28-150643
+  version: 2026-07-29-014404
   x-logo:
     altText: OpusDNS API Reference
     url: https://d24lr4zqs1tgqh.cloudfront.net/c9505a20-5ae1-406c-b060-d392569caebf.jpg
@@ -18513,19 +18526,24 @@ paths:
                       name: example.com.
                       rrsets:
                       - name: example.com.
-                        protected: false
+                        protected: true
+                        protected_reason: SYSTEM_MANAGED_SOA
                         records:
-                        - protected: false
+                        - protected: true
+                          protected_reason: SYSTEM_MANAGED_SOA
                           rdata: ns1.opusdns.com. hostmaster.opusdns.com. 2025111801
                             10800 3600 604800 300
                         ttl: 3600
                         type: SOA
                       - name: example.com.
-                        protected: false
+                        protected: true
+                        protected_reason: SYSTEM_MANAGED_NS
                         records:
-                        - protected: false
+                        - protected: true
+                          protected_reason: SYSTEM_MANAGED_NS
                           rdata: ns1.opusdns.com.
-                        - protected: false
+                        - protected: true
+                          protected_reason: SYSTEM_MANAGED_NS
                           rdata: ns2.opusdns.net.
                         ttl: 3600
                         type: NS
@@ -19287,12 +19305,35 @@ paths:
               schema:
                 $ref: '#/components/schemas/Problem'
           description: Bad Request
+        '409':
+          content:
+            application/problem+json:
+              example:
+                code: ERROR_DOMAIN_DNSSEC_ZONE_RECORDS_UNAVAILABLE
+                detail: DNS zone 'example.com.' is DNSSEC-enabled but has no usable
+                  DS records to publish
+                status: 409
+                title: DNSSEC Zone Records Unavailable
+                type: domain-dnssec-zone-records-unavailable
+                zone_name: example.com.
+              schema:
+                $ref: '#/components/schemas/Problem'
+          description: Conflict
         '422':
           content:
             application/problem+json:
+              example:
+                code: ERROR_DOMAIN_DNSSEC_DIGEST_POLICY
+                detail: The DNS zone publishes DS digest type(s) [4], but only digest
+                  type(s) [2] can be submitted for TLD 'it'
+                domain_name: example.it
+                status: 422
+                title: DNSSEC Digest Policy Error
+                tld: it
+                type: domain-dnssec-digest-policy
               schema:
-                $ref: '#/components/schemas/HTTPValidationError'
-          description: Validation Error
+                $ref: '#/components/schemas/Problem'
+          description: Unprocessable Content
       security:
       - OAuth2PasswordBearer: []
       - APIKeyHeader: []
@@ -24248,12 +24289,22 @@ paths:
         '422':
           content:
             application/problem+json:
-              example:
-                code: ERROR_POLICY_VALIDATION
-                detail: Additional error context.
-                status: 422
-                title: Policy Validation Error
-                type: policy-validation-error
+              examples:
+                Domain Management Error:
+                  value:
+                    code: ERROR_DOMAIN_DNSSEC_NOT_SUPPORTED
+                    detail: DNSSEC not supported for this TLD
+                    domain_name: Additional error context.
+                    status: 422
+                    title: Domain Management Error
+                    type: domain-dnssec-not-supported
+                Policy Validation Error:
+                  value:
+                    code: ERROR_POLICY_VALIDATION
+                    detail: Additional error context.
+                    status: 422
+                    title: Policy Validation Error
+                    type: policy-validation-error
               schema:
                 $ref: '#/components/schemas/Problem'
           description: Unprocessable Content
@@ -24355,12 +24406,45 @@ paths:
               schema:
                 $ref: '#/components/schemas/Problem'
           description: Not Found
+        '409':
+          content:
+            application/problem+json:
+              example:
+                code: ERROR_DOMAIN_DNSSEC_ZONE_RECORDS_UNAVAILABLE
+                detail: DNS zone 'example.com.' is DNSSEC-enabled but has no usable
+                  DS records to publish
+                status: 409
+                title: DNSSEC Zone Records Unavailable
+                type: domain-dnssec-zone-records-unavailable
+                zone_name: example.com.
+              schema:
+                $ref: '#/components/schemas/Problem'
+          description: Conflict
         '422':
           content:
             application/problem+json:
+              examples:
+                DNSSEC Digest Policy Error:
+                  value:
+                    code: ERROR_DOMAIN_DNSSEC_DIGEST_POLICY
+                    detail: The DNS zone publishes DS digest type(s) [4], but only
+                      digest type(s) [2] can be submitted for TLD 'it'
+                    domain_name: example.it
+                    status: 422
+                    title: DNSSEC Digest Policy Error
+                    tld: it
+                    type: domain-dnssec-digest-policy
+                Domain Management Error:
+                  value:
+                    code: ERROR_DOMAIN_DNSSEC_NOT_SUPPORTED
+                    detail: DNSSEC not supported for this TLD
+                    domain_name: Additional error context.
+                    status: 422
+                    title: Domain Management Error
+                    type: domain-dnssec-not-supported
               schema:
-                $ref: '#/components/schemas/HTTPValidationError'
-          description: Validation Error
+                $ref: '#/components/schemas/Problem'
+          description: Unprocessable Content
       security:
       - OAuth2PasswordBearer: []
       - APIKeyHeader: []

package/src/schema.d.ts

@@ -4586,6 +4586,11 @@ export interface components {
             dnssec_mandatory?: boolean | null;
             /** @description DNSSEC mode */
             dnssec_mode?: components["schemas"]["DnssecModeType"] | null;
+            /**
+             * Dnssec Submit Digest Types
+             * @description Which DS digest types we submit to the registry for zones we host, in order of preference: the first listed type the zone has a DS record for is submitted, later entries are fallbacks. Absent means submit every digest type the zone publishes. This is our submission policy, not the set of digest types the registry accepts.
+             */
+            dnssec_submit_digest_types?: number[] | null;
             /**
              * Host Objects
              * @description Whether the registry supports host objects or use attributes
@@ -16266,13 +16271,39 @@ export interface operations {
                     "application/problem+json": components["schemas"]["Problem"];
                 };
             };
-            /** @description Validation Error */
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /** @example {
+                     *       "code": "ERROR_DOMAIN_DNSSEC_ZONE_RECORDS_UNAVAILABLE",
+                     *       "detail": "DNS zone 'example.com.' is DNSSEC-enabled but has no usable DS records to publish",
+                     *       "status": 409,
+                     *       "title": "DNSSEC Zone Records Unavailable",
+                     *       "type": "domain-dnssec-zone-records-unavailable",
+                     *       "zone_name": "example.com."
+                     *     } */
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description Unprocessable Content */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/problem+json": components["schemas"]["HTTPValidationError"];
+                    /** @example {
+                     *       "code": "ERROR_DOMAIN_DNSSEC_DIGEST_POLICY",
+                     *       "detail": "The DNS zone publishes DS digest type(s) [4], but only digest type(s) [2] can be submitted for TLD 'it'",
+                     *       "domain_name": "example.it",
+                     *       "status": 422,
+                     *       "title": "DNSSEC Digest Policy Error",
+                     *       "tld": "it",
+                     *       "type": "domain-dnssec-digest-policy"
+                     *     } */
+                    "application/problem+json": components["schemas"]["Problem"];
                 };
             };
         };
@@ -19978,13 +20009,6 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    /** @example {
-                     *       "code": "ERROR_POLICY_VALIDATION",
-                     *       "detail": "Additional error context.",
-                     *       "status": 422,
-                     *       "title": "Policy Validation Error",
-                     *       "type": "policy-validation-error"
-                     *     } */
                     "application/problem+json": components["schemas"]["Problem"];
                 };
             };
@@ -20137,13 +20161,30 @@ export interface operations {
                     "application/problem+json": components["schemas"]["Problem"];
                 };
             };
-            /** @description Validation Error */
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /** @example {
+                     *       "code": "ERROR_DOMAIN_DNSSEC_ZONE_RECORDS_UNAVAILABLE",
+                     *       "detail": "DNS zone 'example.com.' is DNSSEC-enabled but has no usable DS records to publish",
+                     *       "status": 409,
+                     *       "title": "DNSSEC Zone Records Unavailable",
+                     *       "type": "domain-dnssec-zone-records-unavailable",
+                     *       "zone_name": "example.com."
+                     *     } */
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description Unprocessable Content */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/problem+json": components["schemas"]["HTTPValidationError"];
+                    "application/problem+json": components["schemas"]["Problem"];
                 };
             };
         };