@composurecdk/route53 0.3.4 → 0.3.6

package/dist/zone/zone-dsl.d.ts

@@ -0,0 +1,252 @@
+import type { Duration } from "aws-cdk-lib";
+import { CaaTag, type HttpsRecordValue, type SvcbRecordValue } from "aws-cdk-lib/aws-route53";
+/**
+ * Sentinel name representing the zone apex (the zone-file `@`).
+ *
+ * Translated to an undefined CDK `recordName` when bound to a CDK construct.
+ */
+export declare const APEX = "@";
+/**
+ * Per-record options applied to the underlying CDK construct.
+ *
+ * Mirrors the optional fields shared by every Route 53 record builder. Each
+ * record-type DSL helper accepts these as a trailing options argument.
+ */
+export interface RecordOptions {
+    /** TTL for the record set. Falls back to the underlying builder's default. */
+    readonly ttl?: Duration;
+    /** Optional comment passed through to the CDK construct. */
+    readonly comment?: string;
+}
+export interface ARecordSpec extends RecordOptions {
+    readonly type: "A";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface AaaaRecordSpec extends RecordOptions {
+    readonly type: "AAAA";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface CnameRecordSpec extends RecordOptions {
+    readonly type: "CNAME";
+    readonly name: string;
+    readonly target: string;
+}
+export interface TxtRecordSpec extends RecordOptions {
+    readonly type: "TXT";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface MxRecordSpec extends RecordOptions {
+    readonly type: "MX";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly hostName: string;
+    }[];
+}
+export interface SrvRecordSpec extends RecordOptions {
+    readonly type: "SRV";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly weight: number;
+        readonly port: number;
+        readonly hostName: string;
+    }[];
+}
+export interface CaaRecordSpec extends RecordOptions {
+    readonly type: "CAA";
+    readonly name: string;
+    readonly values: readonly {
+        readonly flag: number;
+        readonly tag: CaaTag;
+        readonly value: string;
+    }[];
+}
+export interface NsRecordSpec extends RecordOptions {
+    readonly type: "NS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface DsRecordSpec extends RecordOptions {
+    readonly type: "DS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface HttpsRecordSpec extends RecordOptions {
+    readonly type: "HTTPS";
+    readonly name: string;
+    readonly values: readonly HttpsRecordValue[];
+}
+export interface SvcbRecordSpec extends RecordOptions {
+    readonly type: "SVCB";
+    readonly name: string;
+    readonly values: readonly SvcbRecordValue[];
+}
+export type RecordSpec = ARecordSpec | AaaaRecordSpec | CnameRecordSpec | TxtRecordSpec | MxRecordSpec | SrvRecordSpec | CaaRecordSpec | NsRecordSpec | DsRecordSpec | HttpsRecordSpec | SvcbRecordSpec;
+/** Record type discriminators surfaced by {@link RecordSpec}. */
+export type RecordType = RecordSpec["type"];
+/**
+ * IPv4 address record. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Multiple `A` calls for the same `name` are merged into a single CDK record
+ * set with all addresses; alternatively, pass an array as the second argument.
+ *
+ * @example
+ * ```ts
+ * A("@",  "1.2.3.4")
+ * A("ha", ["1.2.3.4", "5.6.7.8"])
+ * A("www", "1.2.3.4", { ttl: Duration.minutes(10) })
+ * ```
+ */
+export declare function A(name: string, address: string | readonly string[], options?: RecordOptions): ARecordSpec;
+/**
+ * IPv6 address record. See {@link A} for the merging / array semantics — they
+ * are identical.
+ */
+export declare function AAAA(name: string, address: string | readonly string[], options?: RecordOptions): AaaaRecordSpec;
+/**
+ * Canonical-name record. DNS forbids more than one CNAME per name, so a second
+ * `CNAME(name, …)` for the same name is a configuration error and is rejected
+ * when the records are bound to the zone.
+ *
+ * CNAMEs also cannot live at the zone apex — use an A/AAAA alias instead.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * CNAME("dkim1", "dkim1.39769.dkim.example.")
+ * ```
+ */
+export declare function CNAME(name: string, target: string, options?: RecordOptions): CnameRecordSpec;
+/**
+ * Text record. Pass a single string or an array of strings; multiple `TXT`
+ * calls for the same `name` are merged into one CDK record set.
+ *
+ * @example
+ * ```ts
+ * TXT("@",      "v=spf1 mx -all")
+ * TXT("_dmarc", "v=DMARC1; p=none;")
+ * TXT("multi",  ["one", "two"])
+ * ```
+ */
+export declare function TXT(name: string, value: string | readonly string[], options?: RecordOptions): TxtRecordSpec;
+/**
+ * Mail-exchanger record. The argument order matches BIND zone files
+ * (`name priority target`); multiple `MX(name, …)` calls for the same name are
+ * merged into one CDK record set with all `(priority, hostName)` pairs.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * MX("@", 10, "mail.example.com.")
+ * MX("@", 20, "backup.example.com.")
+ * ```
+ */
+export declare function MX(name: string, priority: number, hostName: string, options?: RecordOptions): MxRecordSpec;
+/**
+ * Service-locator record. The argument order matches BIND zone files
+ * (`name priority weight port target`); multiple `SRV(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * Record names typically follow the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ *
+ * @example
+ * ```ts
+ * SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com.")
+ * SRV("_sip._tcp", 10, 40, 5060, "sip2.example.com.")
+ * ```
+ */
+export declare function SRV(name: string, priority: number, weight: number, port: number, hostName: string, options?: RecordOptions): SrvRecordSpec;
+/**
+ * Certification-authority authorization record. Argument order matches BIND
+ * zone files (`name flag tag value`); multiple `CAA(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * For the common cases, prefer {@link CAA_ISSUE}, {@link CAA_ISSUEWILD}, or
+ * {@link CAA_IODEF}.
+ *
+ * @example
+ * ```ts
+ * CAA("@", 0, CaaTag.ISSUE, "amazon.com")
+ * ```
+ */
+export declare function CAA(name: string, flag: number, tag: CaaTag, value: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issue` record — authorizes a specific certificate authority to issue
+ * certificates for the name. Merges with other CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_ISSUE("@", "amazon.com")
+ * CAA_ISSUE("@", "amazontrust.com")
+ * ```
+ */
+export declare function CAA_ISSUE(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issuewild` record — authorizes a specific CA to issue wildcard
+ * certificates for the name. Merges with other CAA records at the same name.
+ */
+export declare function CAA_ISSUEWILD(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `iodef` record — reports policy violations to a URL. Merges with other
+ * CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_IODEF("@", "mailto:security@example.com")
+ * ```
+ */
+export declare function CAA_IODEF(name: string, url: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * Name-server delegation record. Delegates a subdomain to the supplied name
+ * servers. NS records cannot live at the zone apex — the apex NS set is
+ * managed by Route 53 itself.
+ *
+ * Multiple `NS(name, …)` calls for the same name are merged; alternatively,
+ * pass an array of host names.
+ *
+ * @example
+ * ```ts
+ * NS("internal", ["ns-1.awsdns-00.co.uk.", "ns-2.awsdns-00.com."])
+ * ```
+ */
+export declare function NS(name: string, hostName: string | readonly string[], options?: RecordOptions): NsRecordSpec;
+/**
+ * DNSSEC delegation-signer record. Each value is a full rdata string
+ * (`keyTag algorithm digestType digest`). Multiple `DS(name, …)` calls for the
+ * same name are merged.
+ *
+ * @example
+ * ```ts
+ * DS("secure", "60485 5 1 2BB183AF5F22588179A53B0A98631FAD1A292118")
+ * ```
+ */
+export declare function DS(name: string, rdata: string | readonly string[], options?: RecordOptions): DsRecordSpec;
+/**
+ * HTTPS service-binding record (RFC 9460). Accepts pre-constructed
+ * {@link HttpsRecordValue} instances from the CDK. For alias-mode HTTPS
+ * records (typically pointing at a CloudFront distribution), use
+ * `createHttpsRecordBuilder` directly — the DSL supports value-mode only.
+ *
+ * Multiple `HTTPS(name, …)` calls for the same name are merged.
+ *
+ * @example
+ * ```ts
+ * HTTPS("@", HttpsRecordValue.service({ alpn: [Alpn.H3, Alpn.H2] }))
+ * ```
+ */
+export declare function HTTPS(name: string, value: HttpsRecordValue | readonly HttpsRecordValue[], options?: RecordOptions): HttpsRecordSpec;
+/**
+ * Generic service-binding record (RFC 9460). For HTTPS specifically, prefer
+ * {@link HTTPS} — most clients only consult HTTPS records for web traffic.
+ *
+ * Multiple `SVCB(name, …)` calls for the same name are merged.
+ */
+export declare function SVCB(name: string, value: SvcbRecordValue | readonly SvcbRecordValue[], options?: RecordOptions): SvcbRecordSpec;
+//# sourceMappingURL=zone-dsl.d.ts.map

package/dist/zone/zone-dsl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.d.ts","sourceRoot":"","sources":["../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9F;;;;GAIG;AACH,eAAO,MAAM,IAAI,MAAM,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,cAAc,GACd,eAAe,GACf,aAAa,GACb,YAAY,GACZ,aAAa,GACb,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,cAAc,CAAC;AAEnB,iEAAiE;AACjE,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAK5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,CAAC,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,WAAW,CAEb;AAED;;;GAGG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,eAAe,CAEhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAErF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAEzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAE/E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACpC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;GASG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,gBAAgB,GAAG,SAAS,gBAAgB,EAAE,EACrD,OAAO,GAAE,aAAkB,GAC1B,eAAe,CAEjB;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,GAAG,SAAS,eAAe,EAAE,EACnD,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB"}

package/dist/zone/zone-dsl.js

@@ -0,0 +1,198 @@
+import { CaaTag } from "aws-cdk-lib/aws-route53";
+/**
+ * Sentinel name representing the zone apex (the zone-file `@`).
+ *
+ * Translated to an undefined CDK `recordName` when bound to a CDK construct.
+ */
+export const APEX = "@";
+const toArray = (x) => Array.isArray(x) ? x : [x];
+/**
+ * IPv4 address record. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Multiple `A` calls for the same `name` are merged into a single CDK record
+ * set with all addresses; alternatively, pass an array as the second argument.
+ *
+ * @example
+ * ```ts
+ * A("@",  "1.2.3.4")
+ * A("ha", ["1.2.3.4", "5.6.7.8"])
+ * A("www", "1.2.3.4", { ttl: Duration.minutes(10) })
+ * ```
+ */
+export function A(name, address, options = {}) {
+    return { type: "A", name, addresses: toArray(address), ...options };
+}
+/**
+ * IPv6 address record. See {@link A} for the merging / array semantics — they
+ * are identical.
+ */
+export function AAAA(name, address, options = {}) {
+    return { type: "AAAA", name, addresses: toArray(address), ...options };
+}
+/**
+ * Canonical-name record. DNS forbids more than one CNAME per name, so a second
+ * `CNAME(name, …)` for the same name is a configuration error and is rejected
+ * when the records are bound to the zone.
+ *
+ * CNAMEs also cannot live at the zone apex — use an A/AAAA alias instead.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * CNAME("dkim1", "dkim1.39769.dkim.example.")
+ * ```
+ */
+export function CNAME(name, target, options = {}) {
+    return { type: "CNAME", name, target, ...options };
+}
+/**
+ * Text record. Pass a single string or an array of strings; multiple `TXT`
+ * calls for the same `name` are merged into one CDK record set.
+ *
+ * @example
+ * ```ts
+ * TXT("@",      "v=spf1 mx -all")
+ * TXT("_dmarc", "v=DMARC1; p=none;")
+ * TXT("multi",  ["one", "two"])
+ * ```
+ */
+export function TXT(name, value, options = {}) {
+    return { type: "TXT", name, values: toArray(value), ...options };
+}
+/**
+ * Mail-exchanger record. The argument order matches BIND zone files
+ * (`name priority target`); multiple `MX(name, …)` calls for the same name are
+ * merged into one CDK record set with all `(priority, hostName)` pairs.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * MX("@", 10, "mail.example.com.")
+ * MX("@", 20, "backup.example.com.")
+ * ```
+ */
+export function MX(name, priority, hostName, options = {}) {
+    return { type: "MX", name, values: [{ priority, hostName }], ...options };
+}
+/**
+ * Service-locator record. The argument order matches BIND zone files
+ * (`name priority weight port target`); multiple `SRV(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * Record names typically follow the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ *
+ * @example
+ * ```ts
+ * SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com.")
+ * SRV("_sip._tcp", 10, 40, 5060, "sip2.example.com.")
+ * ```
+ */
+export function SRV(name, priority, weight, port, hostName, options = {}) {
+    return { type: "SRV", name, values: [{ priority, weight, port, hostName }], ...options };
+}
+/**
+ * Certification-authority authorization record. Argument order matches BIND
+ * zone files (`name flag tag value`); multiple `CAA(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * For the common cases, prefer {@link CAA_ISSUE}, {@link CAA_ISSUEWILD}, or
+ * {@link CAA_IODEF}.
+ *
+ * @example
+ * ```ts
+ * CAA("@", 0, CaaTag.ISSUE, "amazon.com")
+ * ```
+ */
+export function CAA(name, flag, tag, value, options = {}) {
+    return { type: "CAA", name, values: [{ flag, tag, value }], ...options };
+}
+/**
+ * CAA `issue` record — authorizes a specific certificate authority to issue
+ * certificates for the name. Merges with other CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_ISSUE("@", "amazon.com")
+ * CAA_ISSUE("@", "amazontrust.com")
+ * ```
+ */
+export function CAA_ISSUE(name, authority, options = {}) {
+    return CAA(name, 0, CaaTag.ISSUE, authority, options);
+}
+/**
+ * CAA `issuewild` record — authorizes a specific CA to issue wildcard
+ * certificates for the name. Merges with other CAA records at the same name.
+ */
+export function CAA_ISSUEWILD(name, authority, options = {}) {
+    return CAA(name, 0, CaaTag.ISSUEWILD, authority, options);
+}
+/**
+ * CAA `iodef` record — reports policy violations to a URL. Merges with other
+ * CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_IODEF("@", "mailto:security@example.com")
+ * ```
+ */
+export function CAA_IODEF(name, url, options = {}) {
+    return CAA(name, 0, CaaTag.IODEF, url, options);
+}
+/**
+ * Name-server delegation record. Delegates a subdomain to the supplied name
+ * servers. NS records cannot live at the zone apex — the apex NS set is
+ * managed by Route 53 itself.
+ *
+ * Multiple `NS(name, …)` calls for the same name are merged; alternatively,
+ * pass an array of host names.
+ *
+ * @example
+ * ```ts
+ * NS("internal", ["ns-1.awsdns-00.co.uk.", "ns-2.awsdns-00.com."])
+ * ```
+ */
+export function NS(name, hostName, options = {}) {
+    return { type: "NS", name, values: toArray(hostName), ...options };
+}
+/**
+ * DNSSEC delegation-signer record. Each value is a full rdata string
+ * (`keyTag algorithm digestType digest`). Multiple `DS(name, …)` calls for the
+ * same name are merged.
+ *
+ * @example
+ * ```ts
+ * DS("secure", "60485 5 1 2BB183AF5F22588179A53B0A98631FAD1A292118")
+ * ```
+ */
+export function DS(name, rdata, options = {}) {
+    return { type: "DS", name, values: toArray(rdata), ...options };
+}
+/**
+ * HTTPS service-binding record (RFC 9460). Accepts pre-constructed
+ * {@link HttpsRecordValue} instances from the CDK. For alias-mode HTTPS
+ * records (typically pointing at a CloudFront distribution), use
+ * `createHttpsRecordBuilder` directly — the DSL supports value-mode only.
+ *
+ * Multiple `HTTPS(name, …)` calls for the same name are merged.
+ *
+ * @example
+ * ```ts
+ * HTTPS("@", HttpsRecordValue.service({ alpn: [Alpn.H3, Alpn.H2] }))
+ * ```
+ */
+export function HTTPS(name, value, options = {}) {
+    return { type: "HTTPS", name, values: toArray(value), ...options };
+}
+/**
+ * Generic service-binding record (RFC 9460). For HTTPS specifically, prefer
+ * {@link HTTPS} — most clients only consult HTTPS records for web traffic.
+ *
+ * Multiple `SVCB(name, …)` calls for the same name are merged.
+ */
+export function SVCB(name, value, options = {}) {
+    return { type: "SVCB", name, values: toArray(value), ...options };
+}
+//# sourceMappingURL=zone-dsl.js.map

package/dist/zone/zone-dsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.js","sourceRoot":"","sources":["../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAA+C,MAAM,yBAAyB,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC;AA0GxB,MAAM,OAAO,GAAG,CAAI,CAAmB,EAAgB,EAAE,CACvD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAkB,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,CAAC,CACf,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc,EAAE,UAAyB,EAAE;IAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,IAAY,EACZ,GAAW,EACX,KAAa,EACb,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACpF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACxF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,UAAyB,EAAE;IAC9E,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAoC,EACpC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,KAAqD,EACrD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,KAAmD,EACnD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACpE,CAAC"}

package/dist/zone/zone-records.d.ts

@@ -0,0 +1,67 @@
+import { type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type AaaaRecordBuilderResult } from "../aaaa-record-builder.js";
+import { type ARecordBuilderResult } from "../a-record-builder.js";
+import { type CaaRecordBuilderResult } from "../caa-record-builder.js";
+import { type CnameRecordBuilderResult } from "../cname-record-builder.js";
+import { type DsRecordBuilderResult } from "../ds-record-builder.js";
+import { type HttpsRecordBuilderResult } from "../https-record-builder.js";
+import { type MxRecordBuilderResult } from "../mx-record-builder.js";
+import { type NsRecordBuilderResult } from "../ns-record-builder.js";
+import { type SrvRecordBuilderResult } from "../srv-record-builder.js";
+import { type SvcbRecordBuilderResult } from "../svcb-record-builder.js";
+import { type TxtRecordBuilderResult } from "../txt-record-builder.js";
+import { type RecordSpec } from "./zone-dsl.js";
+/**
+ * Build output of {@link zoneRecords}, split per record type. Each sub-map is
+ * keyed by the record's DNS name; the apex uses the {@link APEX} sentinel
+ * (`"@"`) so it never collides with a user-supplied label.
+ */
+export interface ZoneRecordsBuilderResult {
+    readonly a: Record<string, ARecordBuilderResult>;
+    readonly aaaa: Record<string, AaaaRecordBuilderResult>;
+    readonly cname: Record<string, CnameRecordBuilderResult>;
+    readonly txt: Record<string, TxtRecordBuilderResult>;
+    readonly mx: Record<string, MxRecordBuilderResult>;
+    readonly srv: Record<string, SrvRecordBuilderResult>;
+    readonly caa: Record<string, CaaRecordBuilderResult>;
+    readonly ns: Record<string, NsRecordBuilderResult>;
+    readonly ds: Record<string, DsRecordBuilderResult>;
+    readonly https: Record<string, HttpsRecordBuilderResult>;
+    readonly svcb: Record<string, SvcbRecordBuilderResult>;
+}
+/**
+ * Fluent builder that emits every record for a hosted zone from a
+ * {@link RecordSpec} list as a single composable {@link Lifecycle}.
+ *
+ * Records sharing `(type, name)` are merged into one CDK record set, matching
+ * DNS RR-set semantics. Every type uses its matching `@composurecdk/route53`
+ * builder, inheriting per-type TTL defaults.
+ */
+export interface IZoneRecordsBuilder extends Lifecycle<ZoneRecordsBuilderResult> {
+    /**
+     * The hosted zone to attach every record to. Accepts a {@link Resolvable},
+     * so a zone produced by a sibling compose component can be wired in via
+     * `ref("zone").get("hostedZone")`.
+     */
+    zone(zone: Resolvable<IHostedZone>): IZoneRecordsBuilder;
+}
+/**
+ * Creates a single compose component that emits every record in `specs`.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     zone: createHostedZoneBuilder().zoneName("example.com"),
+ *     records: zoneRecords([
+ *       A("@",     "1.2.3.4"),
+ *       MX("@", 10, "mail.example.com."),
+ *     ]).zone(ref<HostedZoneBuilderResult>("zone").get("hostedZone")),
+ *   },
+ *   { zone: [], records: ["zone"] },
+ * ).build(stack, "DNS");
+ * ```
+ */
+export declare function zoneRecords(specs: readonly RecordSpec[]): IZoneRecordsBuilder;
+//# sourceMappingURL=zone-records.d.ts.map

package/dist/zone/zone-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-records.d.ts","sourceRoot":"","sources":["../../src/zone/zone-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAgB,MAAM,yBAAyB,CAAC;AAEzE,OAAO,EAAe,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,KAAK,uBAAuB,EAA2B,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,KAAK,oBAAoB,EAAwB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,KAAK,uBAAuB,EAA2B,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAWL,KAAK,UAAU,EAIhB,MAAM,eAAe,CAAC;AAEvB;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,SAAS,CAAC,wBAAwB,CAAC;IAC9E;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,mBAAmB,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,mBAAmB,CAE7E"}