@composurecdk/route53 0.6.0 → 0.8.0

package/dist/{health-check-alarm-builder.js → esm/health-check-alarm-builder.js}

@@ -1,5 +1,6 @@
 import { Annotations, Stack, Token } from "aws-cdk-lib";
-import { Builder, resolve, } from "@composurecdk/core";
+import { COPY_STATE, resolve } from "@composurecdk/core";
+import { taggedBuilder } from "@composurecdk/cloudformation";
 import { AlarmDefinitionBuilder, createAlarms } from "@composurecdk/cloudwatch";
 import { resolveHealthCheckAlarmDefinitions } from "./health-check-alarms.js";
 /**
@@ -72,6 +73,11 @@ class HealthCheckAlarmBuilder {
         this.#customAlarms.push(configure(new AlarmDefinitionBuilder(key)));
         return this;
     }
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target) {
+        target.#healthCheck = this.#healthCheck;
+        target.#customAlarms.push(...this.#customAlarms);
+    }
     build(scope, id, context) {
         if (!this.#healthCheck) {
             throw new Error(`HealthCheckAlarmBuilder "${id}" requires a health check. ` +
@@ -121,6 +127,6 @@ class HealthCheckAlarmBuilder {
  * `HealthCheckId` from the app stack and import it in the alarm stack.
  */
 export function createHealthCheckAlarmBuilder() {
-    return Builder(HealthCheckAlarmBuilder);
+    return taggedBuilder(HealthCheckAlarmBuilder);
 }
 //# sourceMappingURL=health-check-alarm-builder.js.map

package/dist/esm/health-check-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-builder.js","sourceRoot":"","sources":["../../src/health-check-alarm-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,UAAU,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAwD9E;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO;IACnC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,oCAAoC,EACpC,iFAAiF;QAC/E,gBAAgB,MAAM,8DAA8D;QACpF,yEAAyE;QACzE,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAiB,EACjB,EAAU,EACV,MAAqD,EACrD,UAGI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC9C,MAAM,eAAe,GACnB,WAAW,KAAK,KAAK,IAAI,WAAW,EAAE,OAAO,KAAK,KAAK;QACrD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,kCAAkC,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1E,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;IAE9D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,uBAAuB;IAC3B,KAAK,GAA0C,EAAE,CAAC;IAClD,YAAY,CAAwC;IAC3C,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAA+B;QAC1C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,6BAA6B;gBACzD,sEAAsE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE;gBAChD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAC/C,YAAY,EAAE,IAAI,CAAC,aAAa;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,aAAa,CAClB,uBAAuB,CACxB,CAAC;AACJ,CAAC"}

package/dist/esm/health-check-alarm-config.d.ts

@@ -0,0 +1,39 @@
+import type { AlarmConfig } from "@composurecdk/cloudwatch";
+/**
+ * Controls which recommended alarms are created for a Route 53 health check.
+ * The single recommended alarm — `healthCheckStatus` — is enabled by default
+ * with the AWS-recommended threshold. Set it to `false` to disable, or
+ * provide an {@link AlarmConfig} to tune the threshold or evaluation window.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+ */
+export interface HealthCheckAlarmConfig {
+    /**
+     * Master switch: set to `false` to disable all recommended alarms.
+     * Individual alarms can also be disabled via their own entry.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when the health check is reporting unhealthy.
+     *
+     * Metric: `AWS/Route53 HealthCheckStatus`, statistic Minimum, period
+     * 1 minute, dimension `HealthCheckId`. Minimum is the AWS-recommended
+     * statistic — it surfaces "at least one Route 53 checker sees it down"
+     * during the period.
+     *
+     * Default threshold: `< 1` for one consecutive 1-minute period.
+     * Default `treatMissingData: breaching` — missing data is treated as
+     * unhealthy, matching the AWS example.
+     *
+     * Note: `AWS/Route53` metrics are emitted only in `us-east-1`. Alarms
+     * created against this metric in any other region will never receive
+     * data. The builder emits a synth-time warning when this happens; for
+     * stacks outside `us-east-1`, route the alarm into a `us-east-1` stack
+     * via `createHealthCheckAlarmBuilder()` and `compose().withStacks()`.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+     */
+    healthCheckStatus?: AlarmConfig | false;
+}
+//# sourceMappingURL=health-check-alarm-config.d.ts.map

package/dist/esm/health-check-alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-config.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACzC"}

package/dist/esm/health-check-alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-config.js","sourceRoot":"","sources":["../../src/health-check-alarm-config.ts"],"names":[],"mappings":""}

package/dist/esm/health-check-alarm-defaults.d.ts

@@ -0,0 +1,13 @@
+import type { AlarmConfigDefaults } from "@composurecdk/cloudwatch";
+interface HealthCheckAlarmDefaults {
+    enabled: true;
+    healthCheckStatus: AlarmConfigDefaults;
+}
+/**
+ * AWS-recommended default alarm configuration for Route 53 health checks.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+ */
+export declare const HEALTH_CHECK_ALARM_DEFAULTS: HealthCheckAlarmDefaults;
+export {};
+//# sourceMappingURL=health-check-alarm-defaults.d.ts.map

package/dist/esm/health-check-alarm-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-defaults.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,wBAAwB;IAChC,OAAO,EAAE,IAAI,CAAC;IACd,iBAAiB,EAAE,mBAAmB,CAAC;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,wBAmBzC,CAAC"}

package/dist/esm/health-check-alarm-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-defaults.js","sourceRoot":"","sources":["../../src/health-check-alarm-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAQ9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA6B;IACnE,OAAO,EAAE,IAAI;IAEb;;;;;;;;;OASG;IACH,iBAAiB,EAAE;QACjB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,SAAS;KAC7C;CACF,CAAC"}

package/dist/esm/health-check-alarms.d.ts

@@ -0,0 +1,15 @@
+import type { IHealthCheck } from "aws-cdk-lib/aws-route53";
+import type { AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
+/**
+ * Resolves the recommended alarm configuration into fully-resolved
+ * {@link AlarmDefinition}s for a Route 53 health check.
+ *
+ * Period and statistic are fixed at the AWS-recommended values
+ * (1 minute, Minimum) and not exposed as configuration knobs — they are
+ * load-bearing for the recommended semantics ("the worst checker reading
+ * per minute"). Threshold, evaluation periods, datapoints, and missing-data
+ * behaviour remain user-configurable via {@link HealthCheckAlarmConfig}.
+ */
+export declare function resolveHealthCheckAlarmDefinitions(healthCheck: IHealthCheck, config: HealthCheckAlarmConfig | undefined): AlarmDefinition[];
+//# sourceMappingURL=health-check-alarms.d.ts.map

package/dist/esm/health-check-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarms.d.ts","sourceRoot":"","sources":["../../src/health-check-alarms.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAK7E;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,YAAY,EACzB,MAAM,EAAE,sBAAsB,GAAG,SAAS,GACzC,eAAe,EAAE,CA8BnB"}

package/dist/esm/health-check-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarms.js","sourceRoot":"","sources":["../../src/health-check-alarms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,UAAU,kCAAkC,CAChD,WAAyB,EACzB,MAA0C;IAE1C,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,IAAI,MAAM,EAAE,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,kBAAkB,CAC5B,MAAM,EAAE,iBAAiB,EACzB,2BAA2B,CAAC,iBAAiB,CAC9C,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,mBAAmB;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,MAAM,CAAC;gBACjB,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,mBAAmB;gBAC/B,aAAa,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE;gBAC3D,SAAS,EAAE,KAAK,CAAC,OAAO;gBACxB,MAAM,EAAE,aAAa;aACtB,CAAC;YACF,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,mBAAmB;YAC1D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,gFAAgF,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB;SAC1I,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/esm/health-check-builder.d.ts

@@ -0,0 +1,103 @@
+import { HealthCheck, type HealthCheckProps, type IHealthCheck } from "aws-cdk-lib/aws-route53";
+import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import { type IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
+/**
+ * Configuration properties for the Route 53 health-check builder.
+ *
+ * Extends the CDK {@link HealthCheckProps} with builder-specific options for
+ * AWS-recommended CloudWatch alarms.
+ */
+export interface HealthCheckBuilderProps extends HealthCheckProps {
+    /**
+     * Configuration for AWS-recommended CloudWatch alarms.
+     *
+     * By default, the builder creates a recommended `healthCheckStatus`
+     * alarm matching AWS guidance (`HealthCheckStatus < 1` for one minute,
+     * `treatMissingData: breaching`). The alarm can be customised or
+     * disabled. Set to `false` to disable all alarms.
+     *
+     * No alarm actions are configured by default since notification methods
+     * are user-specific. Access alarms from the build result or use an
+     * `afterBuild` hook (or `alarmActionsPolicy`) to apply actions.
+     *
+     * Note: `AWS/Route53` metrics are emitted only in `us-east-1`. If this
+     * builder is used outside `us-east-1`, the synthesised alarm will never
+     * receive data — the builder emits a synth-time warning. For non-`us-east-1`
+     * stacks, suppress this builder's alarms with `recommendedAlarms: false`
+     * and create alarms in a `us-east-1` stack via
+     * {@link createHealthCheckAlarmBuilder}.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+     */
+    recommendedAlarms?: HealthCheckAlarmConfig | false;
+}
+/**
+ * The build output of an {@link IHealthCheckBuilder}.
+ */
+export interface HealthCheckBuilderResult {
+    /** The Route 53 health check construct created by the builder. */
+    healthCheck: HealthCheck;
+    /**
+     * CloudWatch alarms created for the health check, keyed by alarm name.
+     *
+     * Includes both AWS-recommended alarms and any custom alarms added via
+     * {@link IHealthCheckBuilder.addAlarm}. Access individual alarms by key
+     * (e.g. `result.alarms.healthCheckStatus`).
+     *
+     * No alarm actions are configured — apply them via the result or an
+     * `afterBuild` hook.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+     */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for configuring and creating a Route 53 health check.
+ *
+ * Each configuration property from the CDK {@link HealthCheckProps} is
+ * exposed as an overloaded method: call with a value to set it (returns the
+ * builder for chaining), or call with no arguments to read the current value.
+ *
+ * The builder also creates the AWS-recommended `healthCheckStatus`
+ * CloudWatch alarm by default. Alarms can be customised or disabled via the
+ * `recommendedAlarms` property.
+ *
+ * @example
+ * ```ts
+ * const hc = createHealthCheckBuilder()
+ *   .type(HealthCheckType.HTTPS)
+ *   .fqdn("api.example.com")
+ *   .resourcePath("/health");
+ * ```
+ */
+export type IHealthCheckBuilder = ITaggedBuilder<HealthCheckBuilderProps, HealthCheckBuilder>;
+declare class HealthCheckBuilder implements Lifecycle<HealthCheckBuilderResult> {
+    #private;
+    props: Partial<HealthCheckBuilderProps>;
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<IHealthCheck>) => AlarmDefinitionBuilder<IHealthCheck>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: HealthCheckBuilder): void;
+    build(scope: IConstruct, id: string): HealthCheckBuilderResult;
+}
+/**
+ * Creates a new {@link IHealthCheckBuilder} for configuring a Route 53
+ * health check.
+ *
+ * @returns A fluent builder for a Route 53 health check.
+ *
+ * @example
+ * ```ts
+ * const hc = createHealthCheckBuilder()
+ *   .type(HealthCheckType.HTTPS)
+ *   .fqdn("api.example.com");
+ *
+ * const result = hc.build(stack, "ApiHealthCheck");
+ * ```
+ */
+export declare function createHealthCheckBuilder(): IHealthCheckBuilder;
+export {};
+//# sourceMappingURL=health-check-builder.d.ts.map

package/dist/esm/health-check-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-builder.d.ts","sourceRoot":"","sources":["../../src/health-check-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAI7E;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,gBAAgB;IAC/D;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,WAAW,EAAE,WAAW,CAAC;IAEzB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAE9F,cAAM,kBAAmB,YAAW,SAAS,CAAC,wBAAwB,CAAC;;IACrE,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAM;IAG7C,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAI9C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,wBAAwB;CA4B/D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,mBAAmB,CAE9D"}

package/dist/{health-check-builder.js → esm/health-check-builder.js}

@@ -1,5 +1,6 @@
 import { HealthCheck } from "aws-cdk-lib/aws-route53";
-import { Builder } from "@composurecdk/core";
+import { COPY_STATE } from "@composurecdk/core";
+import { taggedBuilder } from "@composurecdk/cloudformation";
 import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
 import { buildHealthCheckAlarms } from "./health-check-alarm-builder.js";
 import { HEALTH_CHECK_DEFAULTS } from "./defaults.js";
@@ -10,6 +11,10 @@ class HealthCheckBuilder {
         this.#customAlarms.push(configure(new AlarmDefinitionBuilder(key)));
         return this;
     }
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target) {
+        target.#customAlarms.push(...this.#customAlarms);
+    }
     build(scope, id) {
         const { recommendedAlarms, ...rest } = this.props;
         if (!rest.type) {
@@ -43,6 +48,6 @@ class HealthCheckBuilder {
  * ```
  */
 export function createHealthCheckBuilder() {
-    return Builder(HealthCheckBuilder);
+    return taggedBuilder(HealthCheckBuilder);
 }
 //# sourceMappingURL=health-check-builder.js.map

package/dist/esm/health-check-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-builder.js","sourceRoot":"","sources":["../../src/health-check-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA4C,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AA4EtD,MAAM,kBAAkB;IACtB,KAAK,GAAqC,EAAE,CAAC;IACpC,aAAa,GAA2C,EAAE,CAAC;IAEpE,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAA0B;QACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAElD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,+DAA+D,CACzF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,qBAAqB;YACxB,GAAG,IAAI;SACY,CAAC;QAEtB,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,EACL,EAAE,EACF,EAAE,WAAW,EAAE,EACf;YACE,iBAAiB;YACjB,YAAY,EAAE,IAAI,CAAC,aAAa;SACjC,CACF,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,aAAa,CAA8C,kBAAkB,CAAC,CAAC;AACxF,CAAC"}

package/dist/esm/hosted-zone-builder.d.ts

@@ -0,0 +1,95 @@
+import { PublicHostedZone, type PublicHostedZoneProps } from "aws-cdk-lib/aws-route53";
+import { type LogGroup } from "aws-cdk-lib/aws-logs";
+import { type IConstruct } from "constructs";
+import { type Lifecycle } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { type QueryLoggingConfig } from "./query-logging.js";
+/**
+ * Configuration properties for the Route53 public hosted zone builder.
+ *
+ * Hides the CDK `queryLogsLogGroupArn` field in favour of {@link queryLogging}
+ * — a discriminated config that supports a `false` opt-out, a user-supplied
+ * pre-existing log group ARN, or a customizable auto-managed `LogGroup`
+ * provisioned alongside the hosted zone.
+ */
+export interface HostedZoneBuilderProps extends Omit<PublicHostedZoneProps, "queryLogsLogGroupArn"> {
+    /**
+     * See {@link QueryLoggingConfig}. Defaults to an auto-managed CloudWatch
+     * log group and a single shared resource policy granting Route 53 write
+     * access — the secure path is the easy path. Set to `false` to opt out, or
+     * to `{ logGroupArn }` to bring your own log group.
+     */
+    queryLogging?: QueryLoggingConfig;
+}
+/**
+ * The build output of an {@link IHostedZoneBuilder}. Contains the CDK
+ * constructs created during {@link Lifecycle.build}, keyed by role.
+ */
+export interface HostedZoneBuilderResult {
+    /** The Route53 public hosted zone construct created by the builder. */
+    hostedZone: PublicHostedZone;
+    /**
+     * The CloudWatch log group auto-created for DNS query logging, or
+     * `undefined` when query logging was disabled or the user supplied their
+     * own log group ARN. The shared `AWS::Logs::ResourcePolicy` is
+     * intentionally not exposed: it is stack-scoped, shared across every
+     * hosted zone in the stack, and not safe to mutate from a single
+     * builder's result.
+     */
+    queryLogGroup?: LogGroup;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 public hosted zone.
+ *
+ * Each configuration property from the CDK {@link PublicHostedZoneProps} is
+ * exposed as an overloaded method: call with a value to set it (returns the
+ * builder for chaining), or call with no arguments to read the current value.
+ *
+ * The builder implements {@link Lifecycle}, so it can be used directly as a
+ * component in a {@link compose | composed system}. When built, it creates a
+ * public hosted zone with the configured properties — including the
+ * auto-managed DNS query-log group and shared resource policy — and returns a
+ * {@link HostedZoneBuilderResult}.
+ *
+ * @example
+ * ```ts
+ * const zone = createHostedZoneBuilder()
+ *   .zoneName("example.com")
+ *   .comment("Primary customer-facing domain");
+ * ```
+ */
+export type IHostedZoneBuilder = ITaggedBuilder<HostedZoneBuilderProps, HostedZoneBuilder>;
+declare class HostedZoneBuilder implements Lifecycle<HostedZoneBuilderResult> {
+    props: Partial<HostedZoneBuilderProps>;
+    build(scope: IConstruct, id: string): HostedZoneBuilderResult;
+}
+/**
+ * Creates a new {@link IHostedZoneBuilder} for configuring a Route53 public
+ * hosted zone.
+ *
+ * This is the entry point for defining a public hosted zone component. The
+ * returned builder exposes every {@link HostedZoneBuilderProps} property as a
+ * fluent setter/getter and implements {@link Lifecycle} for use with
+ * {@link compose}.
+ *
+ * @returns A fluent builder for a Route53 public hosted zone.
+ *
+ * @example
+ * ```ts
+ * const zone = createHostedZoneBuilder().zoneName("example.com");
+ *
+ * // Use standalone:
+ * const result = zone.build(stack, "SiteZone");
+ *
+ * // Or compose into a system:
+ * const system = compose(
+ *   { zone, cert: createCertificateBuilder()
+ *       .domainName("example.com")
+ *       .validationZone(ref("zone", (r: HostedZoneBuilderResult) => r.hostedZone)) },
+ *   { zone: [], cert: ["zone"] },
+ * );
+ * ```
+ */
+export declare function createHostedZoneBuilder(): IHostedZoneBuilder;
+export {};
+//# sourceMappingURL=hosted-zone-builder.d.ts.map

package/dist/esm/hosted-zone-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-zone-builder.d.ts","sourceRoot":"","sources":["../../src/hosted-zone-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAClD,qBAAqB,EACrB,sBAAsB,CACvB;IACC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,uEAAuE;IACvE,UAAU,EAAE,gBAAgB,CAAC;IAC7B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE3F,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB;CA8B9D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAE5D"}

package/dist/{hosted-zone-builder.js → esm/hosted-zone-builder.js}

@@ -1,6 +1,7 @@
 import { PublicHostedZone } from "aws-cdk-lib/aws-route53";
-import { Builder } from "@composurecdk/core";
+import { taggedBuilder } from "@composurecdk/cloudformation";
 import { HOSTED_ZONE_DEFAULTS } from "./defaults.js";
+import { resolveQueryLogging } from "./query-logging.js";
 class HostedZoneBuilder {
     props = {};
     build(scope, id) {
@@ -8,12 +9,19 @@ class HostedZoneBuilder {
             throw new Error(`HostedZoneBuilder "${id}" requires a zoneName. ` +
                 `Call .zoneName() with a fully-qualified domain.`);
         }
-        const mergedProps = {
+        const { queryLogging, ...zoneProps } = {
             ...HOSTED_ZONE_DEFAULTS,
             ...this.props,
         };
-        const hostedZone = new PublicHostedZone(scope, id, mergedProps);
-        return { hostedZone };
+        const { queryLogGroup, queryLogsLogGroupArn, policy } = resolveQueryLogging(scope, id, this.props.zoneName, queryLogging);
+        const hostedZone = new PublicHostedZone(scope, id, {
+            ...zoneProps,
+            zoneName: this.props.zoneName,
+            queryLogsLogGroupArn,
+        });
+        if (policy)
+            hostedZone.node.addDependency(policy);
+        return { hostedZone, queryLogGroup };
     }
 }
 /**
@@ -44,6 +52,6 @@ class HostedZoneBuilder {
  * ```
  */
 export function createHostedZoneBuilder() {
-    return Builder(HostedZoneBuilder);
+    return taggedBuilder(HostedZoneBuilder);
 }
 //# sourceMappingURL=hosted-zone-builder.js.map

package/dist/esm/hosted-zone-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-zone-builder.js","sourceRoot":"","sources":["../../src/hosted-zone-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA8B,MAAM,yBAAyB,CAAC;AAIvF,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAA2B,MAAM,oBAAoB,CAAC;AA+DlF,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IAE5C,KAAK,CAAC,KAAiB,EAAE,EAAU;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,yBAAyB;gBAC/C,iDAAiD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,GAAG;YACrC,GAAG,oBAAoB;YACvB,GAAG,IAAI,CAAC,KAAK;SACd,CAAC;QAEF,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,mBAAmB,CACzE,KAAK,EACL,EAAE,EACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EACnB,YAAY,CACb,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE;YACjD,GAAG,SAAS;YACZ,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,oBAAoB;SACrB,CAAC,CAAC;QAEH,IAAI,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,aAAa,CAA4C,iBAAiB,CAAC,CAAC;AACrF,CAAC"}

package/dist/esm/https-record-builder.d.ts

@@ -0,0 +1,45 @@
+import { HttpsRecord, type HttpsRecordProps, type IHostedZone, type RecordTarget } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 HTTPS record builder.
+ *
+ * Extends the CDK {@link HttpsRecordProps} but replaces `zone` and `target`
+ * with {@link Resolvable} variants so they can be wired from composed
+ * components (e.g. a CloudFront distribution used as an alias target).
+ */
+export interface HttpsRecordBuilderProps extends Omit<HttpsRecordProps, "zone" | "target"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+    /** The record target — mutually exclusive with `values`. */
+    target?: Resolvable<RecordTarget>;
+}
+/**
+ * The build output of an {@link IHttpsRecordBuilder}.
+ */
+export interface HttpsRecordBuilderResult {
+    /** The Route53 HTTPS record construct created by the builder. */
+    record: HttpsRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 HTTPS record.
+ *
+ * HTTPS records (RFC 9460) advertise protocol hints — ALPN, port, IP hints —
+ * that clients can use before opening a connection, enabling one-round-trip
+ * HTTP/3 upgrades. Specify exactly one of `values` (explicit parameter list)
+ * or `target` (alias, typically a CloudFront distribution).
+ */
+export type IHttpsRecordBuilder = IBuilder<HttpsRecordBuilderProps, HttpsRecordBuilder>;
+declare class HttpsRecordBuilder implements Lifecycle<HttpsRecordBuilderResult> {
+    props: Partial<HttpsRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): HttpsRecordBuilderResult;
+}
+/**
+ * Creates a new {@link IHttpsRecordBuilder} for configuring a Route53 HTTPS
+ * record.
+ *
+ * @returns A fluent builder for a Route53 HTTPS record.
+ */
+export declare function createHttpsRecordBuilder(): IHttpsRecordBuilder;
+export {};
+//# sourceMappingURL=https-record-builder.d.ts.map

package/dist/esm/https-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-record-builder.d.ts","sourceRoot":"","sources":["../../src/https-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,QAAQ,CAAC;IACxF,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC/B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;GAOG;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAExF,cAAM,kBAAmB,YAAW,SAAS,CAAC,wBAAwB,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAM;IAE7C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,wBAAwB;CAiCjG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,mBAAmB,CAG9D"}

package/dist/{https-record-builder.js → esm/https-record-builder.js}

@@ -36,6 +36,7 @@ class HttpsRecordBuilder {
  * @returns A fluent builder for a Route53 HTTPS record.
  */
 export function createHttpsRecordBuilder() {
+    // eslint-disable-next-line composurecdk/builder-must-be-tagged -- AWS::Route53::RecordSet has no Tags property
     return Builder(HttpsRecordBuilder);
 }
 //# sourceMappingURL=https-record-builder.js.map

package/dist/esm/https-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-record-builder.js","sourceRoot":"","sources":["../../src/https-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,GAIZ,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAmCtD,MAAM,kBAAkB;IACtB,KAAK,GAAqC,EAAE,CAAC;IAE7C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,sDAAsD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,+BAA+B;gBACtD,qFAAqF,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC;QACvC,IAAI,SAAS,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,6DAA6D,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,OAAO,GAAG,cAAc,EAAE,WAAW,KAAK,SAAS,CAAC;QAC1D,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC;YACzC,GAAG,IAAI;YACP,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACT,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,+GAA+G;IAC/G,OAAO,OAAO,CAA8C,kBAAkB,CAAC,CAAC;AAClF,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,20 @@
+export { createHostedZoneBuilder, type HostedZoneBuilderProps, type HostedZoneBuilderResult, type IHostedZoneBuilder, } from "./hosted-zone-builder.js";
+export { type QueryLoggingConfig } from "./query-logging.js";
+export { createARecordBuilder, type ARecordBuilderProps, type ARecordBuilderResult, type IARecordBuilder, } from "./a-record-builder.js";
+export { createAaaaRecordBuilder, type AaaaRecordBuilderProps, type AaaaRecordBuilderResult, type IAaaaRecordBuilder, } from "./aaaa-record-builder.js";
+export { createCnameRecordBuilder, type CnameRecordBuilderProps, type CnameRecordBuilderResult, type ICnameRecordBuilder, } from "./cname-record-builder.js";
+export { createTxtRecordBuilder, type TxtRecordBuilderProps, type TxtRecordBuilderResult, type ITxtRecordBuilder, } from "./txt-record-builder.js";
+export { createMxRecordBuilder, type MxRecordBuilderProps, type MxRecordBuilderResult, type IMxRecordBuilder, } from "./mx-record-builder.js";
+export { createSrvRecordBuilder, type SrvRecordBuilderProps, type SrvRecordBuilderResult, type ISrvRecordBuilder, } from "./srv-record-builder.js";
+export { createCaaRecordBuilder, type CaaRecordBuilderProps, type CaaRecordBuilderResult, type ICaaRecordBuilder, } from "./caa-record-builder.js";
+export { createNsRecordBuilder, type NsRecordBuilderProps, type NsRecordBuilderResult, type INsRecordBuilder, } from "./ns-record-builder.js";
+export { createDsRecordBuilder, type DsRecordBuilderProps, type DsRecordBuilderResult, type IDsRecordBuilder, } from "./ds-record-builder.js";
+export { createHttpsRecordBuilder, type HttpsRecordBuilderProps, type HttpsRecordBuilderResult, type IHttpsRecordBuilder, } from "./https-record-builder.js";
+export { createSvcbRecordBuilder, type SvcbRecordBuilderProps, type SvcbRecordBuilderResult, type ISvcbRecordBuilder, } from "./svcb-record-builder.js";
+export { createHealthCheckBuilder, type HealthCheckBuilderProps, type HealthCheckBuilderResult, type IHealthCheckBuilder, } from "./health-check-builder.js";
+export { createHealthCheckAlarmBuilder, type HealthCheckAlarmBuilderProps, type HealthCheckAlarmBuilderResult, type IHealthCheckAlarmBuilder, } from "./health-check-alarm-builder.js";
+export type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
+export { HEALTH_CHECK_ALARM_DEFAULTS } from "./health-check-alarm-defaults.js";
+export { cloudfrontAliasTarget, apiGatewayAliasTarget, apiGatewayDomainAliasTarget, } from "./alias-targets.js";
+export { HOSTED_ZONE_DEFAULTS, QUERY_LOGGING_LOG_GROUP_NAME_PREFIX, QUERY_LOGGING_RESOURCE_POLICY_NAME, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, HEALTH_CHECK_DEFAULTS, } from "./defaults.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,mCAAmC,EACnC,kCAAkC,EAClC,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC"}

package/dist/{index.js → esm/index.js}

@@ -14,5 +14,5 @@ export { createHealthCheckBuilder, } from "./health-check-builder.js";
 export { createHealthCheckAlarmBuilder, } from "./health-check-alarm-builder.js";
 export { HEALTH_CHECK_ALARM_DEFAULTS } from "./health-check-alarm-defaults.js";
 export { cloudfrontAliasTarget, apiGatewayAliasTarget, apiGatewayDomainAliasTarget, } from "./alias-targets.js";
-export { HOSTED_ZONE_DEFAULTS, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, HEALTH_CHECK_DEFAULTS, } from "./defaults.js";
+export { HOSTED_ZONE_DEFAULTS, QUERY_LOGGING_LOG_GROUP_NAME_PREFIX, QUERY_LOGGING_RESOURCE_POLICY_NAME, A_RECORD_DEFAULTS, AAAA_RECORD_DEFAULTS, CNAME_RECORD_DEFAULTS, TXT_RECORD_DEFAULTS, MX_RECORD_DEFAULTS, SRV_RECORD_DEFAULTS, CAA_RECORD_DEFAULTS, NS_RECORD_DEFAULTS, DS_RECORD_DEFAULTS, HTTPS_RECORD_DEFAULTS, SVCB_RECORD_DEFAULTS, HEALTH_CHECK_DEFAULTS, } from "./defaults.js";
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,GAIrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAItB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,GAI9B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,mCAAmC,EACnC,kCAAkC,EAClC,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC"}

package/dist/esm/mx-record-builder.d.ts

@@ -0,0 +1,40 @@
+import { MxRecord, type MxRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 MX record builder.
+ *
+ * Extends the CDK {@link MxRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface MxRecordBuilderProps extends Omit<MxRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link IMxRecordBuilder}.
+ */
+export interface MxRecordBuilderResult {
+    /** The Route53 MX record construct created by the builder. */
+    record: MxRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 MX record.
+ *
+ * MX records direct inbound mail to the host(s) responsible for accepting it.
+ * Each value pairs a priority (lower wins) with a fully-qualified mail-server
+ * host name. Pair with SPF/DKIM/DMARC TXT records for authenticated email.
+ */
+export type IMxRecordBuilder = IBuilder<MxRecordBuilderProps, MxRecordBuilder>;
+declare class MxRecordBuilder implements Lifecycle<MxRecordBuilderResult> {
+    props: Partial<MxRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): MxRecordBuilderResult;
+}
+/**
+ * Creates a new {@link IMxRecordBuilder} for configuring a Route53 MX record.
+ *
+ * @returns A fluent builder for a Route53 MX record.
+ */
+export declare function createMxRecordBuilder(): IMxRecordBuilder;
+export {};
+//# sourceMappingURL=mx-record-builder.d.ts.map

package/dist/esm/mx-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mx-record-builder.d.ts","sourceRoot":"","sources":["../../src/mx-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;IACvE,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED;;;;;;GAMG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;AAE/E,cAAM,eAAgB,YAAW,SAAS,CAAC,qBAAqB,CAAC;IAC/D,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAM;IAE1C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,qBAAqB;CAsB9F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,gBAAgB,CAGxD"}

package/dist/{mx-record-builder.js → esm/mx-record-builder.js}

@@ -28,6 +28,7 @@ class MxRecordBuilder {
  * @returns A fluent builder for a Route53 MX record.
  */
 export function createMxRecordBuilder() {
+    // eslint-disable-next-line composurecdk/builder-must-be-tagged -- AWS::Route53::RecordSet has no Tags property
     return Builder(MxRecordBuilder);
 }
 //# sourceMappingURL=mx-record-builder.js.map

package/dist/esm/mx-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mx-record-builder.js","sourceRoot":"","sources":["../../src/mx-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,yBAAyB,CAAC;AAEzF,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AA+BnD,MAAM,eAAe;IACnB,KAAK,GAAkC,EAAE,CAAC;IAE1C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,oBAAoB,EAAE,+BAA+B;gBACnD,iEAAiE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,kBAAkB;YACrB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACZ,CAAC;QAEnB,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,+GAA+G;IAC/G,OAAO,OAAO,CAAwC,eAAe,CAAC,CAAC;AACzE,CAAC"}

package/dist/esm/ns-record-builder.d.ts

@@ -0,0 +1,40 @@
+import { NsRecord, type NsRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 NS record builder.
+ *
+ * Extends the CDK {@link NsRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface NsRecordBuilderProps extends Omit<NsRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link INsRecordBuilder}.
+ */
+export interface NsRecordBuilderResult {
+    /** The Route53 NS record construct created by the builder. */
+    record: NsRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 NS record.
+ *
+ * Use NS records to delegate a subdomain to a different set of name servers
+ * (including another Route53 hosted zone). The apex NS record set is managed
+ * by Route53 itself and should not be recreated here.
+ */
+export type INsRecordBuilder = IBuilder<NsRecordBuilderProps, NsRecordBuilder>;
+declare class NsRecordBuilder implements Lifecycle<NsRecordBuilderResult> {
+    props: Partial<NsRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): NsRecordBuilderResult;
+}
+/**
+ * Creates a new {@link INsRecordBuilder} for configuring a Route53 NS record.
+ *
+ * @returns A fluent builder for a Route53 NS record.
+ */
+export declare function createNsRecordBuilder(): INsRecordBuilder;
+export {};
+//# sourceMappingURL=ns-record-builder.d.ts.map