@composurecdk/route53 0.3.5 → 0.4.1

package/README.md

@@ -96,6 +96,105 @@ The defaults are exported as `HOSTED_ZONE_DEFAULTS`, `A_RECORD_DEFAULTS`, `AAAA_
 
 Route 53 health checks expose a `HealthCheckStatus` metric that [AWS recommends alarming on](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53). This package does not yet expose a `HealthCheckBuilder`; once it does, the recommended alarm will be enabled by default alongside the health check. Tracked in [#45](https://github.com/laazyj/composureCDK/issues/45).
 
+## Zone DSL
+
+Individual builders are convenient for AWS-service records wired to other constructs, but a real zone file — apex, www, mail, SPF/DMARC/DKIM, CAA, service records — is faster to read and write as a flat list of records. `@composurecdk/route53/zone` exposes a BIND-style DSL that compiles to the same builders:
+
+```ts
+import { compose, ref } from "@composurecdk/core";
+import { createHostedZoneBuilder, type HostedZoneBuilderResult } from "@composurecdk/route53";
+import {
+  A,
+  AAAA,
+  APEX,
+  CAA_ISSUE,
+  CAA_ISSUEWILD,
+  CNAME,
+  MX,
+  SRV,
+  TXT,
+  zoneRecords,
+} from "@composurecdk/route53/zone";
+
+compose(
+  {
+    zone: createHostedZoneBuilder().zoneName("example.com"),
+    records: zoneRecords([
+      A(APEX, "203.0.113.10"),
+      AAAA(APEX, "2001:db8::10"),
+      A("api", ["203.0.113.20", "203.0.113.21"]),
+
+      MX(APEX, 10, "mail1.example.com."),
+      MX(APEX, 20, "mail2.example.com."),
+      TXT(APEX, "v=spf1 mx -all"),
+      TXT("_dmarc", "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com"),
+      CNAME("k1._domainkey", "k1.dkim.esp.example.net."),
+
+      SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com."),
+
+      CAA_ISSUE(APEX, "amazon.com"),
+      CAA_ISSUEWILD(APEX, "amazon.com"),
+    ]).zone(ref<HostedZoneBuilderResult>("zone").get("hostedZone")),
+  },
+  { zone: [], records: ["zone"] },
+).build(stack, "DNS");
+```
+
+### Helpers
+
+| Helper                                       | Shape                 | Notes                                                        |
+| -------------------------------------------- | --------------------- | ------------------------------------------------------------ |
+| `A(name, addr \| addrs, opts?)`              | IPv4 addresses        | Repeat calls merge; use `APEX` for `@`                       |
+| `AAAA(name, addr \| addrs, opts?)`           | IPv6 addresses        | As `A`                                                       |
+| `CNAME(name, target, opts?)`                 | One canonical target  | Duplicate or apex CNAME is rejected                          |
+| `TXT(name, value \| values, opts?)`          | One or more strings   | Repeat calls merge                                           |
+| `MX(name, prio, host, opts?)`                | Mail exchanger        | Repeat calls merge `(priority, hostName)` pairs              |
+| `SRV(name, prio, weight, port, host, opts?)` | Service locator       | BIND order; repeat calls merge                               |
+| `CAA(name, flag, tag, value, opts?)`         | Raw CAA               | Prefer the wrappers below                                    |
+| `CAA_ISSUE(name, ca, opts?)`                 | `0 issue "ca"`        | Authorize a CA                                               |
+| `CAA_ISSUEWILD(name, ca, opts?)`             | `0 issuewild "ca"`    | Authorize a CA for wildcards                                 |
+| `CAA_IODEF(name, url, opts?)`                | `0 iodef "url"`       | Report policy violations                                     |
+| `NS(name, host \| hosts, opts?)`             | Delegation            | Apex NS is rejected (managed by Route 53)                    |
+| `DS(name, rdata \| rdatas, opts?)`           | DNSSEC chain-of-trust | Each value is a full `keyTag alg digestType digest` rdata    |
+| `HTTPS(name, value \| values, opts?)`        | RFC 9460 HTTPS record | Accepts `HttpsRecordValue.alias()`/`.service()` from the CDK |
+| `SVCB(name, value \| values, opts?)`         | RFC 9460 generic SVCB | As `HTTPS`; for web traffic prefer `HTTPS`                   |
+
+The trailing `opts` argument is `{ ttl?, comment? }`. When records with the same `(type, name)` are merged, the **first defined** `ttl`/`comment` in declaration order wins — so to give a merged group a TTL or comment, attach it to the first call:
+
+```ts
+// TTL of 10m applies to the whole merged RR-set. The later calls inherit it.
+A("api", "203.0.113.20", { ttl: Duration.minutes(10), comment: "primary" }),
+A("api", "203.0.113.21"),
+A("api", "203.0.113.22"),
+```
+
+Putting the TTL on a later call is silently ignored if an earlier call in the group already has one — this keeps merge output deterministic regardless of how the list is reordered.
+
+### APEX sentinel
+
+`APEX` (= `"@"`) stands in for the zone's own name, matching BIND zone-file convention. When records are bound to CDK the sentinel is translated to an undefined `recordName`, so CDK emits them at the zone apex.
+
+### RR-set merge semantics
+
+DNS resolvers see one record set per `(type, name)`, so the DSL groups every call sharing `(type, name)` into a single CDK record. Repeated `A`, `AAAA`, `TXT`, `MX`, `SRV`, `CAA`, `NS`, `DS`, `HTTPS`, and `SVCB` calls for the same name are merged; the order of values within the merged set matches the order of the DSL calls.
+
+Exact-duplicate string values (same IP appearing twice in an `A` merge, the same TXT string, the same NS hostname) are de-duplicated during merge — DNS RR-sets never want identical values and CDK rejects them with an opaque error. Structured values (MX `(priority, host)` pairs, SRV, CAA, HTTPS/SVCB) are passed through as given.
+
+### Errors surfaced at build time
+
+- `CNAME` at the apex — DNS forbids CNAMEs from coexisting with the mandatory apex SOA/NS records. Use an A/AAAA alias instead.
+- More than one `CNAME` for the same name — DNS allows at most one CNAME per name.
+- `NS` at the apex — Route 53 manages the apex NS set itself; recreating it clashes with the zone's delegation.
+- `zoneRecords(...).build(...)` without a `.zone(...)` call.
+
+### HTTPS / SVCB alias mode
+
+The DSL supports value-mode HTTPS/SVCB records (fixed advertised parameters). For alias-mode records — typically pointing at a CloudFront distribution — use `createHttpsRecordBuilder().target(cloudfrontAliasTarget(dist))` directly; `HTTPS(...)` is intentionally value-mode only to keep the DSL's merge semantics consistent.
+
+### Worked example
+
+A production-like zone with every record type is demonstrated in [`packages/examples/src/dns-zone-app.ts`](../examples/src/dns-zone-app.ts).
+
 ## Composing with ACM and CloudFront
 
 ```ts

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-export { createHostedZoneBuilder, type HostedZoneBuilderResult, type IHostedZoneBuilder, } from "./hosted-zone-builder.js";
-export { createARecordBuilder, type ARecordBuilderResult, type IARecordBuilder, } from "./a-record-builder.js";
-export { createAaaaRecordBuilder, type AaaaRecordBuilderResult, type IAaaaRecordBuilder, } from "./aaaa-record-builder.js";
-export { createCnameRecordBuilder, type CnameRecordBuilderResult, type ICnameRecordBuilder, } from "./cname-record-builder.js";
-export { createTxtRecordBuilder, type TxtRecordBuilderResult, type ITxtRecordBuilder, } from "./txt-record-builder.js";
-export { createMxRecordBuilder, type MxRecordBuilderResult, type IMxRecordBuilder, } from "./mx-record-builder.js";
-export { createSrvRecordBuilder, type SrvRecordBuilderResult, type ISrvRecordBuilder, } from "./srv-record-builder.js";
-export { createCaaRecordBuilder, type CaaRecordBuilderResult, type ICaaRecordBuilder, } from "./caa-record-builder.js";
-export { createNsRecordBuilder, type NsRecordBuilderResult, type INsRecordBuilder, } from "./ns-record-builder.js";
-export { createDsRecordBuilder, type DsRecordBuilderResult, type IDsRecordBuilder, } from "./ds-record-builder.js";
-export { createHttpsRecordBuilder, type HttpsRecordBuilderResult, type IHttpsRecordBuilder, } from "./https-record-builder.js";
-export { createSvcbRecordBuilder, type SvcbRecordBuilderResult, type ISvcbRecordBuilder, } from "./svcb-record-builder.js";
+export { createHostedZoneBuilder, type HostedZoneBuilderProps, type HostedZoneBuilderResult, type IHostedZoneBuilder, } from "./hosted-zone-builder.js";
+export { createARecordBuilder, type ARecordBuilderProps, type ARecordBuilderResult, type IARecordBuilder, } from "./a-record-builder.js";
+export { createAaaaRecordBuilder, type AaaaRecordBuilderProps, type AaaaRecordBuilderResult, type IAaaaRecordBuilder, } from "./aaaa-record-builder.js";
+export { createCnameRecordBuilder, type CnameRecordBuilderProps, type CnameRecordBuilderResult, type ICnameRecordBuilder, } from "./cname-record-builder.js";
+export { createTxtRecordBuilder, type TxtRecordBuilderProps, type TxtRecordBuilderResult, type ITxtRecordBuilder, } from "./txt-record-builder.js";
+export { createMxRecordBuilder, type MxRecordBuilderProps, type MxRecordBuilderResult, type IMxRecordBuilder, } from "./mx-record-builder.js";
+export { createSrvRecordBuilder, type SrvRecordBuilderProps, type SrvRecordBuilderResult, type ISrvRecordBuilder, } from "./srv-record-builder.js";
+export { createCaaRecordBuilder, type CaaRecordBuilderProps, type CaaRecordBuilderResult, type ICaaRecordBuilder, } from "./caa-record-builder.js";
+export { createNsRecordBuilder, type NsRecordBuilderProps, type NsRecordBuilderResult, type INsRecordBuilder, } from "./ns-record-builder.js";
+export { createDsRecordBuilder, type DsRecordBuilderProps, type DsRecordBuilderResult, type IDsRecordBuilder, } from "./ds-record-builder.js";
+export { createHttpsRecordBuilder, type HttpsRecordBuilderProps, type HttpsRecordBuilderResult, type IHttpsRecordBuilder, } from "./https-record-builder.js";
+export { createSvcbRecordBuilder, type SvcbRecordBuilderProps, type SvcbRecordBuilderResult, type ISvcbRecordBuilder, } from "./svcb-record-builder.js";
 export { cloudfrontAliasTarget, apiGatewayAliasTarget, apiGatewayDomainAliasTarget, } from "./alias-targets.js";
 export { HOSTED_ZONE_DEFAULTS, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, } from "./defaults.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,GAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,GAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,GAIrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/dist/zone/index.d.ts

@@ -0,0 +1,3 @@
+export { APEX, A, AAAA, CNAME, TXT, MX, SRV, CAA, CAA_ISSUE, CAA_ISSUEWILD, CAA_IODEF, NS, DS, HTTPS, SVCB, type RecordOptions, type RecordSpec, type RecordType, type ARecordSpec, type AaaaRecordSpec, type CnameRecordSpec, type TxtRecordSpec, type MxRecordSpec, type SrvRecordSpec, type CaaRecordSpec, type NsRecordSpec, type DsRecordSpec, type HttpsRecordSpec, type SvcbRecordSpec, } from "./zone-dsl.js";
+export { zoneRecords, type IZoneRecordsBuilder, type ZoneRecordsBuilderResult, } from "./zone-records.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/zone/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/zone/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,CAAC,EACD,IAAI,EACJ,KAAK,EACL,GAAG,EACH,EAAE,EACF,GAAG,EACH,GAAG,EACH,SAAS,EACT,aAAa,EACb,SAAS,EACT,EAAE,EACF,EAAE,EACF,KAAK,EACL,IAAI,EACJ,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC"}

package/dist/zone/index.js

@@ -0,0 +1,3 @@
+export { APEX, A, AAAA, CNAME, TXT, MX, SRV, CAA, CAA_ISSUE, CAA_ISSUEWILD, CAA_IODEF, NS, DS, HTTPS, SVCB, } from "./zone-dsl.js";
+export { zoneRecords, } from "./zone-records.js";
+//# sourceMappingURL=index.js.map

package/dist/zone/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/zone/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,CAAC,EACD,IAAI,EACJ,KAAK,EACL,GAAG,EACH,EAAE,EACF,GAAG,EACH,GAAG,EACH,SAAS,EACT,aAAa,EACb,SAAS,EACT,EAAE,EACF,EAAE,EACF,KAAK,EACL,IAAI,GAeL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,GAGZ,MAAM,mBAAmB,CAAC"}

package/dist/zone/zone-dsl.d.ts

@@ -0,0 +1,252 @@
+import type { Duration } from "aws-cdk-lib";
+import { CaaTag, type HttpsRecordValue, type SvcbRecordValue } from "aws-cdk-lib/aws-route53";
+/**
+ * Sentinel name representing the zone apex (the zone-file `@`).
+ *
+ * Translated to an undefined CDK `recordName` when bound to a CDK construct.
+ */
+export declare const APEX = "@";
+/**
+ * Per-record options applied to the underlying CDK construct.
+ *
+ * Mirrors the optional fields shared by every Route 53 record builder. Each
+ * record-type DSL helper accepts these as a trailing options argument.
+ */
+export interface RecordOptions {
+    /** TTL for the record set. Falls back to the underlying builder's default. */
+    readonly ttl?: Duration;
+    /** Optional comment passed through to the CDK construct. */
+    readonly comment?: string;
+}
+export interface ARecordSpec extends RecordOptions {
+    readonly type: "A";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface AaaaRecordSpec extends RecordOptions {
+    readonly type: "AAAA";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface CnameRecordSpec extends RecordOptions {
+    readonly type: "CNAME";
+    readonly name: string;
+    readonly target: string;
+}
+export interface TxtRecordSpec extends RecordOptions {
+    readonly type: "TXT";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface MxRecordSpec extends RecordOptions {
+    readonly type: "MX";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly hostName: string;
+    }[];
+}
+export interface SrvRecordSpec extends RecordOptions {
+    readonly type: "SRV";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly weight: number;
+        readonly port: number;
+        readonly hostName: string;
+    }[];
+}
+export interface CaaRecordSpec extends RecordOptions {
+    readonly type: "CAA";
+    readonly name: string;
+    readonly values: readonly {
+        readonly flag: number;
+        readonly tag: CaaTag;
+        readonly value: string;
+    }[];
+}
+export interface NsRecordSpec extends RecordOptions {
+    readonly type: "NS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface DsRecordSpec extends RecordOptions {
+    readonly type: "DS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface HttpsRecordSpec extends RecordOptions {
+    readonly type: "HTTPS";
+    readonly name: string;
+    readonly values: readonly HttpsRecordValue[];
+}
+export interface SvcbRecordSpec extends RecordOptions {
+    readonly type: "SVCB";
+    readonly name: string;
+    readonly values: readonly SvcbRecordValue[];
+}
+export type RecordSpec = ARecordSpec | AaaaRecordSpec | CnameRecordSpec | TxtRecordSpec | MxRecordSpec | SrvRecordSpec | CaaRecordSpec | NsRecordSpec | DsRecordSpec | HttpsRecordSpec | SvcbRecordSpec;
+/** Record type discriminators surfaced by {@link RecordSpec}. */
+export type RecordType = RecordSpec["type"];
+/**
+ * IPv4 address record. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Multiple `A` calls for the same `name` are merged into a single CDK record
+ * set with all addresses; alternatively, pass an array as the second argument.
+ *
+ * @example
+ * ```ts
+ * A("@",  "1.2.3.4")
+ * A("ha", ["1.2.3.4", "5.6.7.8"])
+ * A("www", "1.2.3.4", { ttl: Duration.minutes(10) })
+ * ```
+ */
+export declare function A(name: string, address: string | readonly string[], options?: RecordOptions): ARecordSpec;
+/**
+ * IPv6 address record. See {@link A} for the merging / array semantics — they
+ * are identical.
+ */
+export declare function AAAA(name: string, address: string | readonly string[], options?: RecordOptions): AaaaRecordSpec;
+/**
+ * Canonical-name record. DNS forbids more than one CNAME per name, so a second
+ * `CNAME(name, …)` for the same name is a configuration error and is rejected
+ * when the records are bound to the zone.
+ *
+ * CNAMEs also cannot live at the zone apex — use an A/AAAA alias instead.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * CNAME("dkim1", "dkim1.39769.dkim.example.")
+ * ```
+ */
+export declare function CNAME(name: string, target: string, options?: RecordOptions): CnameRecordSpec;
+/**
+ * Text record. Pass a single string or an array of strings; multiple `TXT`
+ * calls for the same `name` are merged into one CDK record set.
+ *
+ * @example
+ * ```ts
+ * TXT("@",      "v=spf1 mx -all")
+ * TXT("_dmarc", "v=DMARC1; p=none;")
+ * TXT("multi",  ["one", "two"])
+ * ```
+ */
+export declare function TXT(name: string, value: string | readonly string[], options?: RecordOptions): TxtRecordSpec;
+/**
+ * Mail-exchanger record. The argument order matches BIND zone files
+ * (`name priority target`); multiple `MX(name, …)` calls for the same name are
+ * merged into one CDK record set with all `(priority, hostName)` pairs.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * MX("@", 10, "mail.example.com.")
+ * MX("@", 20, "backup.example.com.")
+ * ```
+ */
+export declare function MX(name: string, priority: number, hostName: string, options?: RecordOptions): MxRecordSpec;
+/**
+ * Service-locator record. The argument order matches BIND zone files
+ * (`name priority weight port target`); multiple `SRV(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * Record names typically follow the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ *
+ * @example
+ * ```ts
+ * SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com.")
+ * SRV("_sip._tcp", 10, 40, 5060, "sip2.example.com.")
+ * ```
+ */
+export declare function SRV(name: string, priority: number, weight: number, port: number, hostName: string, options?: RecordOptions): SrvRecordSpec;
+/**
+ * Certification-authority authorization record. Argument order matches BIND
+ * zone files (`name flag tag value`); multiple `CAA(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * For the common cases, prefer {@link CAA_ISSUE}, {@link CAA_ISSUEWILD}, or
+ * {@link CAA_IODEF}.
+ *
+ * @example
+ * ```ts
+ * CAA("@", 0, CaaTag.ISSUE, "amazon.com")
+ * ```
+ */
+export declare function CAA(name: string, flag: number, tag: CaaTag, value: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issue` record — authorizes a specific certificate authority to issue
+ * certificates for the name. Merges with other CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_ISSUE("@", "amazon.com")
+ * CAA_ISSUE("@", "amazontrust.com")
+ * ```
+ */
+export declare function CAA_ISSUE(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issuewild` record — authorizes a specific CA to issue wildcard
+ * certificates for the name. Merges with other CAA records at the same name.
+ */
+export declare function CAA_ISSUEWILD(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `iodef` record — reports policy violations to a URL. Merges with other
+ * CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_IODEF("@", "mailto:security@example.com")
+ * ```
+ */
+export declare function CAA_IODEF(name: string, url: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * Name-server delegation record. Delegates a subdomain to the supplied name
+ * servers. NS records cannot live at the zone apex — the apex NS set is
+ * managed by Route 53 itself.
+ *
+ * Multiple `NS(name, …)` calls for the same name are merged; alternatively,
+ * pass an array of host names.
+ *
+ * @example
+ * ```ts
+ * NS("internal", ["ns-1.awsdns-00.co.uk.", "ns-2.awsdns-00.com."])
+ * ```
+ */
+export declare function NS(name: string, hostName: string | readonly string[], options?: RecordOptions): NsRecordSpec;
+/**
+ * DNSSEC delegation-signer record. Each value is a full rdata string
+ * (`keyTag algorithm digestType digest`). Multiple `DS(name, …)` calls for the
+ * same name are merged.
+ *
+ * @example
+ * ```ts
+ * DS("secure", "60485 5 1 2BB183AF5F22588179A53B0A98631FAD1A292118")
+ * ```
+ */
+export declare function DS(name: string, rdata: string | readonly string[], options?: RecordOptions): DsRecordSpec;
+/**
+ * HTTPS service-binding record (RFC 9460). Accepts pre-constructed
+ * {@link HttpsRecordValue} instances from the CDK. For alias-mode HTTPS
+ * records (typically pointing at a CloudFront distribution), use
+ * `createHttpsRecordBuilder` directly — the DSL supports value-mode only.
+ *
+ * Multiple `HTTPS(name, …)` calls for the same name are merged.
+ *
+ * @example
+ * ```ts
+ * HTTPS("@", HttpsRecordValue.service({ alpn: [Alpn.H3, Alpn.H2] }))
+ * ```
+ */
+export declare function HTTPS(name: string, value: HttpsRecordValue | readonly HttpsRecordValue[], options?: RecordOptions): HttpsRecordSpec;
+/**
+ * Generic service-binding record (RFC 9460). For HTTPS specifically, prefer
+ * {@link HTTPS} — most clients only consult HTTPS records for web traffic.
+ *
+ * Multiple `SVCB(name, …)` calls for the same name are merged.
+ */
+export declare function SVCB(name: string, value: SvcbRecordValue | readonly SvcbRecordValue[], options?: RecordOptions): SvcbRecordSpec;
+//# sourceMappingURL=zone-dsl.d.ts.map

package/dist/zone/zone-dsl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.d.ts","sourceRoot":"","sources":["../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9F;;;;GAIG;AACH,eAAO,MAAM,IAAI,MAAM,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,cAAc,GACd,eAAe,GACf,aAAa,GACb,YAAY,GACZ,aAAa,GACb,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,cAAc,CAAC;AAEnB,iEAAiE;AACjE,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAK5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,CAAC,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,WAAW,CAEb;AAED;;;GAGG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,eAAe,CAEhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAErF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAEzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAE/E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACpC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;GASG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,gBAAgB,GAAG,SAAS,gBAAgB,EAAE,EACrD,OAAO,GAAE,aAAkB,GAC1B,eAAe,CAEjB;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,GAAG,SAAS,eAAe,EAAE,EACnD,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB"}

package/dist/zone/zone-dsl.js

@@ -0,0 +1,198 @@
+import { CaaTag } from "aws-cdk-lib/aws-route53";
+/**
+ * Sentinel name representing the zone apex (the zone-file `@`).
+ *
+ * Translated to an undefined CDK `recordName` when bound to a CDK construct.
+ */
+export const APEX = "@";
+const toArray = (x) => Array.isArray(x) ? x : [x];
+/**
+ * IPv4 address record. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Multiple `A` calls for the same `name` are merged into a single CDK record
+ * set with all addresses; alternatively, pass an array as the second argument.
+ *
+ * @example
+ * ```ts
+ * A("@",  "1.2.3.4")
+ * A("ha", ["1.2.3.4", "5.6.7.8"])
+ * A("www", "1.2.3.4", { ttl: Duration.minutes(10) })
+ * ```
+ */
+export function A(name, address, options = {}) {
+    return { type: "A", name, addresses: toArray(address), ...options };
+}
+/**
+ * IPv6 address record. See {@link A} for the merging / array semantics — they
+ * are identical.
+ */
+export function AAAA(name, address, options = {}) {
+    return { type: "AAAA", name, addresses: toArray(address), ...options };
+}
+/**
+ * Canonical-name record. DNS forbids more than one CNAME per name, so a second
+ * `CNAME(name, …)` for the same name is a configuration error and is rejected
+ * when the records are bound to the zone.
+ *
+ * CNAMEs also cannot live at the zone apex — use an A/AAAA alias instead.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * CNAME("dkim1", "dkim1.39769.dkim.example.")
+ * ```
+ */
+export function CNAME(name, target, options = {}) {
+    return { type: "CNAME", name, target, ...options };
+}
+/**
+ * Text record. Pass a single string or an array of strings; multiple `TXT`
+ * calls for the same `name` are merged into one CDK record set.
+ *
+ * @example
+ * ```ts
+ * TXT("@",      "v=spf1 mx -all")
+ * TXT("_dmarc", "v=DMARC1; p=none;")
+ * TXT("multi",  ["one", "two"])
+ * ```
+ */
+export function TXT(name, value, options = {}) {
+    return { type: "TXT", name, values: toArray(value), ...options };
+}
+/**
+ * Mail-exchanger record. The argument order matches BIND zone files
+ * (`name priority target`); multiple `MX(name, …)` calls for the same name are
+ * merged into one CDK record set with all `(priority, hostName)` pairs.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * MX("@", 10, "mail.example.com.")
+ * MX("@", 20, "backup.example.com.")
+ * ```
+ */
+export function MX(name, priority, hostName, options = {}) {
+    return { type: "MX", name, values: [{ priority, hostName }], ...options };
+}
+/**
+ * Service-locator record. The argument order matches BIND zone files
+ * (`name priority weight port target`); multiple `SRV(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * Record names typically follow the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ *
+ * @example
+ * ```ts
+ * SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com.")
+ * SRV("_sip._tcp", 10, 40, 5060, "sip2.example.com.")
+ * ```
+ */
+export function SRV(name, priority, weight, port, hostName, options = {}) {
+    return { type: "SRV", name, values: [{ priority, weight, port, hostName }], ...options };
+}
+/**
+ * Certification-authority authorization record. Argument order matches BIND
+ * zone files (`name flag tag value`); multiple `CAA(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * For the common cases, prefer {@link CAA_ISSUE}, {@link CAA_ISSUEWILD}, or
+ * {@link CAA_IODEF}.
+ *
+ * @example
+ * ```ts
+ * CAA("@", 0, CaaTag.ISSUE, "amazon.com")
+ * ```
+ */
+export function CAA(name, flag, tag, value, options = {}) {
+    return { type: "CAA", name, values: [{ flag, tag, value }], ...options };
+}
+/**
+ * CAA `issue` record — authorizes a specific certificate authority to issue
+ * certificates for the name. Merges with other CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_ISSUE("@", "amazon.com")
+ * CAA_ISSUE("@", "amazontrust.com")
+ * ```
+ */
+export function CAA_ISSUE(name, authority, options = {}) {
+    return CAA(name, 0, CaaTag.ISSUE, authority, options);
+}
+/**
+ * CAA `issuewild` record — authorizes a specific CA to issue wildcard
+ * certificates for the name. Merges with other CAA records at the same name.
+ */
+export function CAA_ISSUEWILD(name, authority, options = {}) {
+    return CAA(name, 0, CaaTag.ISSUEWILD, authority, options);
+}
+/**
+ * CAA `iodef` record — reports policy violations to a URL. Merges with other
+ * CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_IODEF("@", "mailto:security@example.com")
+ * ```
+ */
+export function CAA_IODEF(name, url, options = {}) {
+    return CAA(name, 0, CaaTag.IODEF, url, options);
+}
+/**
+ * Name-server delegation record. Delegates a subdomain to the supplied name
+ * servers. NS records cannot live at the zone apex — the apex NS set is
+ * managed by Route 53 itself.
+ *
+ * Multiple `NS(name, …)` calls for the same name are merged; alternatively,
+ * pass an array of host names.
+ *
+ * @example
+ * ```ts
+ * NS("internal", ["ns-1.awsdns-00.co.uk.", "ns-2.awsdns-00.com."])
+ * ```
+ */
+export function NS(name, hostName, options = {}) {
+    return { type: "NS", name, values: toArray(hostName), ...options };
+}
+/**
+ * DNSSEC delegation-signer record. Each value is a full rdata string
+ * (`keyTag algorithm digestType digest`). Multiple `DS(name, …)` calls for the
+ * same name are merged.
+ *
+ * @example
+ * ```ts
+ * DS("secure", "60485 5 1 2BB183AF5F22588179A53B0A98631FAD1A292118")
+ * ```
+ */
+export function DS(name, rdata, options = {}) {
+    return { type: "DS", name, values: toArray(rdata), ...options };
+}
+/**
+ * HTTPS service-binding record (RFC 9460). Accepts pre-constructed
+ * {@link HttpsRecordValue} instances from the CDK. For alias-mode HTTPS
+ * records (typically pointing at a CloudFront distribution), use
+ * `createHttpsRecordBuilder` directly — the DSL supports value-mode only.
+ *
+ * Multiple `HTTPS(name, …)` calls for the same name are merged.
+ *
+ * @example
+ * ```ts
+ * HTTPS("@", HttpsRecordValue.service({ alpn: [Alpn.H3, Alpn.H2] }))
+ * ```
+ */
+export function HTTPS(name, value, options = {}) {
+    return { type: "HTTPS", name, values: toArray(value), ...options };
+}
+/**
+ * Generic service-binding record (RFC 9460). For HTTPS specifically, prefer
+ * {@link HTTPS} — most clients only consult HTTPS records for web traffic.
+ *
+ * Multiple `SVCB(name, …)` calls for the same name are merged.
+ */
+export function SVCB(name, value, options = {}) {
+    return { type: "SVCB", name, values: toArray(value), ...options };
+}
+//# sourceMappingURL=zone-dsl.js.map

package/dist/zone/zone-dsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.js","sourceRoot":"","sources":["../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAA+C,MAAM,yBAAyB,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC;AA0GxB,MAAM,OAAO,GAAG,CAAI,CAAmB,EAAgB,EAAE,CACvD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAkB,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,CAAC,CACf,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc,EAAE,UAAyB,EAAE;IAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,IAAY,EACZ,GAAW,EACX,KAAa,EACb,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACpF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACxF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,UAAyB,EAAE;IAC9E,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAoC,EACpC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,KAAqD,EACrD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,KAAmD,EACnD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACpE,CAAC"}

package/dist/zone/zone-records.d.ts

@@ -0,0 +1,67 @@
+import { type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type AaaaRecordBuilderResult } from "../aaaa-record-builder.js";
+import { type ARecordBuilderResult } from "../a-record-builder.js";
+import { type CaaRecordBuilderResult } from "../caa-record-builder.js";
+import { type CnameRecordBuilderResult } from "../cname-record-builder.js";
+import { type DsRecordBuilderResult } from "../ds-record-builder.js";
+import { type HttpsRecordBuilderResult } from "../https-record-builder.js";
+import { type MxRecordBuilderResult } from "../mx-record-builder.js";
+import { type NsRecordBuilderResult } from "../ns-record-builder.js";
+import { type SrvRecordBuilderResult } from "../srv-record-builder.js";
+import { type SvcbRecordBuilderResult } from "../svcb-record-builder.js";
+import { type TxtRecordBuilderResult } from "../txt-record-builder.js";
+import { type RecordSpec } from "./zone-dsl.js";
+/**
+ * Build output of {@link zoneRecords}, split per record type. Each sub-map is
+ * keyed by the record's DNS name; the apex uses the {@link APEX} sentinel
+ * (`"@"`) so it never collides with a user-supplied label.
+ */
+export interface ZoneRecordsBuilderResult {
+    readonly a: Record<string, ARecordBuilderResult>;
+    readonly aaaa: Record<string, AaaaRecordBuilderResult>;
+    readonly cname: Record<string, CnameRecordBuilderResult>;
+    readonly txt: Record<string, TxtRecordBuilderResult>;
+    readonly mx: Record<string, MxRecordBuilderResult>;
+    readonly srv: Record<string, SrvRecordBuilderResult>;
+    readonly caa: Record<string, CaaRecordBuilderResult>;
+    readonly ns: Record<string, NsRecordBuilderResult>;
+    readonly ds: Record<string, DsRecordBuilderResult>;
+    readonly https: Record<string, HttpsRecordBuilderResult>;
+    readonly svcb: Record<string, SvcbRecordBuilderResult>;
+}
+/**
+ * Fluent builder that emits every record for a hosted zone from a
+ * {@link RecordSpec} list as a single composable {@link Lifecycle}.
+ *
+ * Records sharing `(type, name)` are merged into one CDK record set, matching
+ * DNS RR-set semantics. Every type uses its matching `@composurecdk/route53`
+ * builder, inheriting per-type TTL defaults.
+ */
+export interface IZoneRecordsBuilder extends Lifecycle<ZoneRecordsBuilderResult> {
+    /**
+     * The hosted zone to attach every record to. Accepts a {@link Resolvable},
+     * so a zone produced by a sibling compose component can be wired in via
+     * `ref("zone").get("hostedZone")`.
+     */
+    zone(zone: Resolvable<IHostedZone>): IZoneRecordsBuilder;
+}
+/**
+ * Creates a single compose component that emits every record in `specs`.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     zone: createHostedZoneBuilder().zoneName("example.com"),
+ *     records: zoneRecords([
+ *       A("@",     "1.2.3.4"),
+ *       MX("@", 10, "mail.example.com."),
+ *     ]).zone(ref<HostedZoneBuilderResult>("zone").get("hostedZone")),
+ *   },
+ *   { zone: [], records: ["zone"] },
+ * ).build(stack, "DNS");
+ * ```
+ */
+export declare function zoneRecords(specs: readonly RecordSpec[]): IZoneRecordsBuilder;
+//# sourceMappingURL=zone-records.d.ts.map

package/dist/zone/zone-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-records.d.ts","sourceRoot":"","sources":["../../src/zone/zone-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAgB,MAAM,yBAAyB,CAAC;AAEzE,OAAO,EAAe,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,KAAK,uBAAuB,EAA2B,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,KAAK,oBAAoB,EAAwB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,KAAK,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,KAAK,uBAAuB,EAA2B,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAWL,KAAK,UAAU,EAIhB,MAAM,eAAe,CAAC;AAEvB;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,SAAS,CAAC,wBAAwB,CAAC;IAC9E;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,mBAAmB,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,mBAAmB,CAE7E"}

package/dist/zone/zone-records.js

@@ -0,0 +1,270 @@
+import { RecordTarget } from "aws-cdk-lib/aws-route53";
+import { Construct } from "constructs";
+import { constructId, resolve } from "@composurecdk/core";
+import { createAaaaRecordBuilder } from "../aaaa-record-builder.js";
+import { createARecordBuilder } from "../a-record-builder.js";
+import { createCaaRecordBuilder } from "../caa-record-builder.js";
+import { createCnameRecordBuilder, } from "../cname-record-builder.js";
+import { createDsRecordBuilder } from "../ds-record-builder.js";
+import { createHttpsRecordBuilder, } from "../https-record-builder.js";
+import { createMxRecordBuilder } from "../mx-record-builder.js";
+import { createNsRecordBuilder } from "../ns-record-builder.js";
+import { createSrvRecordBuilder } from "../srv-record-builder.js";
+import { createSvcbRecordBuilder } from "../svcb-record-builder.js";
+import { createTxtRecordBuilder } from "../txt-record-builder.js";
+import { APEX, } from "./zone-dsl.js";
+/**
+ * Creates a single compose component that emits every record in `specs`.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     zone: createHostedZoneBuilder().zoneName("example.com"),
+ *     records: zoneRecords([
+ *       A("@",     "1.2.3.4"),
+ *       MX("@", 10, "mail.example.com."),
+ *     ]).zone(ref<HostedZoneBuilderResult>("zone").get("hostedZone")),
+ *   },
+ *   { zone: [], records: ["zone"] },
+ * ).build(stack, "DNS");
+ * ```
+ */
+export function zoneRecords(specs) {
+    return new ZoneRecordsBuilder(specs);
+}
+class ZoneRecordsBuilder {
+    #zone;
+    #specs;
+    constructor(specs) {
+        this.#specs = specs;
+    }
+    zone(zone) {
+        this.#zone = zone;
+        return this;
+    }
+    build(scope, id, context) {
+        if (!this.#zone) {
+            throw new Error(`zoneRecords "${id}" requires a zone. Call .zone() with an IHostedZone.`);
+        }
+        validateSpecs(this.#specs);
+        const zone = resolve(this.#zone, context ?? {});
+        const result = {
+            a: {},
+            aaaa: {},
+            cname: {},
+            txt: {},
+            mx: {},
+            srv: {},
+            caa: {},
+            ns: {},
+            ds: {},
+            https: {},
+            svcb: {},
+        };
+        const root = new Construct(scope, id);
+        const subScopes = new Map();
+        const subScope = (bucket) => {
+            let s = subScopes.get(bucket);
+            if (!s) {
+                s = new Construct(root, bucket);
+                subScopes.set(bucket, s);
+            }
+            return s;
+        };
+        for (const group of groupRecords(this.#specs)) {
+            const head = group[0];
+            // Use the APEX sentinel ("@") as the result-map key, but a readable
+            // "Apex" as the construct id so the synthesised logical ID keeps a
+            // human-visible marker. ("@" sanitises to empty and produces opaque
+            // logical IDs like `DNSrecordsa85669662`.) CDK's duplicate-id check
+            // catches the rare case of a user-supplied label also spelled "Apex".
+            const key = head.name;
+            const childId = key === APEX ? "Apex" : constructId(key);
+            switch (head.type) {
+                case "A":
+                    result.a[key] = buildA(subScope("a"), childId, group, zone, context);
+                    break;
+                case "AAAA":
+                    result.aaaa[key] = buildAaaa(subScope("aaaa"), childId, group, zone, context);
+                    break;
+                case "CNAME":
+                    result.cname[key] = buildCname(subScope("cname"), childId, group, zone, context);
+                    break;
+                case "TXT":
+                    result.txt[key] = buildTxt(subScope("txt"), childId, group, zone, context);
+                    break;
+                case "MX":
+                    result.mx[key] = buildMx(subScope("mx"), childId, group, zone, context);
+                    break;
+                case "SRV":
+                    result.srv[key] = buildSrv(subScope("srv"), childId, group, zone, context);
+                    break;
+                case "CAA":
+                    result.caa[key] = buildCaa(subScope("caa"), childId, group, zone, context);
+                    break;
+                case "NS":
+                    result.ns[key] = buildNs(subScope("ns"), childId, group, zone, context);
+                    break;
+                case "DS":
+                    result.ds[key] = buildDs(subScope("ds"), childId, group, zone, context);
+                    break;
+                case "HTTPS":
+                    result.https[key] = buildHttps(subScope("https"), childId, group, zone, context);
+                    break;
+                case "SVCB":
+                    result.svcb[key] = buildSvcb(subScope("svcb"), childId, group, zone, context);
+                    break;
+                default: {
+                    const _exhaustive = head;
+                    throw new Error(`Unhandled record type: ${_exhaustive.type}`);
+                }
+            }
+        }
+        return result;
+    }
+}
+/** CDK-style record-name convention: apex is `undefined`. */
+const sub = (name) => (name === APEX ? undefined : name);
+/** Preserve insertion order while dropping duplicates. */
+const dedupe = (xs) => [...new Set(xs)];
+function validateSpecs(specs) {
+    for (const spec of specs) {
+        switch (spec.type) {
+            case "A":
+            case "AAAA":
+                if (spec.addresses.length === 0) {
+                    throw new Error(`${spec.type}("${spec.name}") must supply at least one address.`);
+                }
+                break;
+            case "TXT":
+            case "MX":
+            case "SRV":
+            case "CAA":
+            case "NS":
+            case "DS":
+            case "HTTPS":
+            case "SVCB":
+                if (spec.values.length === 0) {
+                    throw new Error(`${spec.type}("${spec.name}") must supply at least one value.`);
+                }
+                break;
+            case "CNAME":
+                // CNAME carries a single `target` string; the DSL factory cannot
+                // produce an empty one.
+                break;
+        }
+    }
+}
+/** Group records by `(type, name)`, preserving the insertion order of groups. */
+function groupRecords(specs) {
+    const groups = new Map();
+    for (const s of specs) {
+        const k = `${s.type}/${s.name}`;
+        const existing = groups.get(k);
+        if (existing)
+            existing.push(s);
+        else
+            groups.set(k, [s]);
+    }
+    return [...groups.values()];
+}
+/** First non-undefined value of `field` across the group, or `undefined`. */
+function pickOption(group, field) {
+    for (const s of group)
+        if (s[field] !== undefined)
+            return s[field];
+    return undefined;
+}
+function applyCommon(builder, specs, name) {
+    let b = builder;
+    if (name)
+        b = b.recordName(name);
+    const ttl = pickOption(specs, "ttl");
+    if (ttl)
+        b = b.ttl(ttl);
+    const comment = pickOption(specs, "comment");
+    if (comment)
+        b = b.comment(comment);
+    return b;
+}
+function buildA(scope, id, specs, zone, context) {
+    const addresses = dedupe(specs.flatMap((s) => [...s.addresses]));
+    const b = applyCommon(createARecordBuilder()
+        .zone(zone)
+        .target(RecordTarget.fromIpAddresses(...addresses)), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildAaaa(scope, id, specs, zone, context) {
+    const addresses = dedupe(specs.flatMap((s) => [...s.addresses]));
+    const b = applyCommon(createAaaaRecordBuilder()
+        .zone(zone)
+        .target(RecordTarget.fromIpAddresses(...addresses)), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildCname(scope, id, specs, zone, context) {
+    if (specs.length > 1) {
+        throw new Error(`CNAME for "${specs[0].name}" declared ${String(specs.length)} times. ` +
+            `DNS allows at most one CNAME per name.`);
+    }
+    const [spec] = specs;
+    const name = sub(spec.name);
+    if (!name)
+        throw new Error("CNAME records cannot live at the zone apex.");
+    let b = createCnameRecordBuilder().zone(zone).recordName(name).domainName(spec.target);
+    if (spec.ttl)
+        b = b.ttl(spec.ttl);
+    if (spec.comment)
+        b = b.comment(spec.comment);
+    return b.build(scope, id, context);
+}
+function buildTxt(scope, id, specs, zone, context) {
+    const values = dedupe(specs.flatMap((s) => [...s.values]));
+    const b = applyCommon(createTxtRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildMx(scope, id, specs, zone, context) {
+    const values = specs.flatMap((s) => s.values.map((v) => ({ priority: v.priority, hostName: v.hostName })));
+    const b = applyCommon(createMxRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildSrv(scope, id, specs, zone, context) {
+    const values = specs.flatMap((s) => s.values.map((v) => ({
+        priority: v.priority,
+        weight: v.weight,
+        port: v.port,
+        hostName: v.hostName,
+    })));
+    const b = applyCommon(createSrvRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildCaa(scope, id, specs, zone, context) {
+    const values = specs.flatMap((s) => s.values.map((v) => ({ flag: v.flag, tag: v.tag, value: v.value })));
+    const b = applyCommon(createCaaRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildNs(scope, id, specs, zone, context) {
+    const name = sub(specs[0].name);
+    if (!name) {
+        throw new Error(`NS records cannot live at the zone apex. The apex NS set is managed by Route 53.`);
+    }
+    const values = dedupe(specs.flatMap((s) => [...s.values]));
+    const b = applyCommon(createNsRecordBuilder().zone(zone).values(values), specs, name);
+    return b.build(scope, id, context);
+}
+function buildDs(scope, id, specs, zone, context) {
+    const values = dedupe(specs.flatMap((s) => [...s.values]));
+    const b = applyCommon(createDsRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildHttps(scope, id, specs, zone, context) {
+    const values = specs.flatMap((s) => [...s.values]);
+    const b = applyCommon(createHttpsRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+function buildSvcb(scope, id, specs, zone, context) {
+    const values = specs.flatMap((s) => [...s.values]);
+    const b = applyCommon(createSvcbRecordBuilder().zone(zone).values(values), specs, sub(specs[0].name));
+    return b.build(scope, id, context);
+}
+//# sourceMappingURL=zone-records.js.map

package/dist/zone/zone-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-records.js","sourceRoot":"","sources":["../../src/zone/zone-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAmB,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,WAAW,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAgC,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAA6B,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAA+B,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAEL,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAA8B,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAEL,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAA8B,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAA8B,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAA+B,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAgC,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAA+B,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EACL,IAAI,GAcL,MAAM,eAAe,CAAC;AAsCvB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CAAC,KAA4B;IACtD,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAeD,MAAM,kBAAkB;IACtB,KAAK,CAA2B;IACvB,MAAM,CAAwB;IAEvC,YAAY,KAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,IAA6B;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAC;QAC5F,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAsC;YAChD,CAAC,EAAE,EAAE;YACL,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;YACT,GAAG,EAAE,EAAE;YACP,EAAE,EAAE,EAAE;YACN,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,EAAE;YACP,EAAE,EAAE,EAAE;YACN,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE;SACT,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;QACnD,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAa,EAAE;YACjD,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACzD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,GAAG;oBACN,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAsB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBACtF,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAC1B,QAAQ,CAAC,MAAM,CAAC,EAChB,OAAO,EACP,KAAyB,EACzB,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAC5B,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,EACP,KAA0B,EAC1B,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,KAAK;oBACR,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CACxB,QAAQ,CAAC,KAAK,CAAC,EACf,OAAO,EACP,KAAwB,EACxB,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,IAAI;oBACP,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC1F,MAAM;gBACR,KAAK,KAAK;oBACR,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CACxB,QAAQ,CAAC,KAAK,CAAC,EACf,OAAO,EACP,KAAwB,EACxB,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,KAAK;oBACR,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CACxB,QAAQ,CAAC,KAAK,CAAC,EACf,OAAO,EACP,KAAwB,EACxB,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,IAAI;oBACP,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC1F,MAAM;gBACR,KAAK,IAAI;oBACP,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC1F,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAC5B,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,EACP,KAA0B,EAC1B,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAC1B,QAAQ,CAAC,MAAM,CAAC,EAChB,OAAO,EACP,KAAyB,EACzB,IAAI,EACJ,OAAO,CACR,CAAC;oBACF,MAAM;gBACR,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,IAAI,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,0BAA2B,WAA0B,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAID,6DAA6D;AAC7D,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEjE,0DAA0D;AAC1D,MAAM,MAAM,GAAG,CAAI,EAAgB,EAAO,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAE9D,SAAS,aAAa,CAAC,KAA4B;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,GAAG,CAAC;YACT,KAAK,MAAM;gBACT,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,sCAAsC,CAAC,CAAC;gBACpF,CAAC;gBACD,MAAM;YACR,KAAK,KAAK,CAAC;YACX,KAAK,IAAI,CAAC;YACV,KAAK,KAAK,CAAC;YACX,KAAK,KAAK,CAAC;YACX,KAAK,IAAI,CAAC;YACV,KAAK,IAAI,CAAC;YACV,KAAK,OAAO,CAAC;YACb,KAAK,MAAM;gBACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM;YACR,KAAK,OAAO;gBACV,iEAAiE;gBACjE,wBAAwB;gBACxB,MAAM;QACV,CAAC;IACH,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAA4B;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAC7E,SAAS,UAAU,CACjB,KAA+B,EAC/B,KAAQ;IAER,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,OAAU,EACV,KAA+B,EAC/B,IAAwB;IAExB,IAAI,CAAC,GAAG,OAAO,CAAC;IAChB,IAAI,IAAI;QAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CACb,KAAiB,EACjB,EAAU,EACV,KAAoB,EACpB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,WAAW,CACnB,oBAAoB,EAAE;SACnB,IAAI,CAAC,IAAI,CAAC;SACV,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,CAAC,EACrD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAChB,KAAiB,EACjB,EAAU,EACV,KAAuB,EACvB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,WAAW,CACnB,uBAAuB,EAAE;SACtB,IAAI,CAAC,IAAI,CAAC;SACV,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,CAAC,EACrD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CACjB,KAAiB,EACjB,EAAU,EACV,KAAwB,EACxB,IAAiB,EACjB,OAAgC;IAEhC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU;YACrE,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,wBAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,OAAO;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CACf,KAAiB,EACjB,EAAU,EACV,KAAsB,EACtB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,WAAW,CACnB,sBAAsB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAClD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CACd,KAAiB,EACjB,EAAU,EACV,KAAqB,EACrB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,GAAG,WAAW,CACnB,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACjD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CACf,KAAiB,EACjB,EAAU,EACV,KAAsB,EACtB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,CAAC,GAAG,WAAW,CACnB,sBAAsB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAClD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CACf,KAAiB,EACjB,EAAU,EACV,KAAsB,EACtB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,CAAC,GAAG,WAAW,CACnB,sBAAsB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAClD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CACd,KAAiB,EACjB,EAAU,EACV,KAAqB,EACrB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,WAAW,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CACd,KAAiB,EACjB,EAAU,EACV,KAAqB,EACrB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,WAAW,CACnB,qBAAqB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACjD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CACjB,KAAiB,EACjB,EAAU,EACV,KAAwB,EACxB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,WAAW,CACnB,wBAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACpD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAChB,KAAiB,EACjB,EAAU,EACV,KAAuB,EACvB,IAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,WAAW,CACnB,uBAAuB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EACnD,KAAK,EACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACnB,CAAC;IACF,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@composurecdk/route53",
-  "version": "0.3.5",
+  "version": "0.4.1",
   "description": "Composable Route53 hosted zone and record builders with well-architected defaults",
   "repository": {
     "type": "git",
@@ -13,6 +13,10 @@
     ".": {
       "import": "./dist/index.js",
       "types": "./dist/index.d.ts"
+    },
+    "./zone": {
+      "import": "./dist/zone/index.js",
+      "types": "./dist/zone/index.d.ts"
     }
   },
   "files": [
@@ -35,7 +39,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "@composurecdk/core": "^0.3.0",
+    "@composurecdk/core": "^0.4.0",
     "aws-cdk-lib": "^2.0.0",
     "constructs": "^10.0.0"
   },