@composurecdk/route53 0.7.0 → 0.8.0

package/dist/esm/query-logging.js

@@ -0,0 +1,133 @@
+import { Annotations, Aws, Stack, Token } from "aws-cdk-lib";
+import { Effect, PolicyStatement, ServicePrincipal } from "aws-cdk-lib/aws-iam";
+import { ResourcePolicy } from "aws-cdk-lib/aws-logs";
+import { createLogGroupBuilder } from "@composurecdk/logs";
+import { QUERY_LOGGING_LOG_GROUP_NAME_PREFIX, QUERY_LOGGING_RESOURCE_POLICY_ID, QUERY_LOGGING_RESOURCE_POLICY_NAME, } from "./defaults.js";
+const QUERY_LOG_REGION = "us-east-1";
+const QUERY_LOGGING_REGION_ANNOTATION = "@composurecdk/route53:query-logging-region";
+const QUERY_LOGGING_NAME_ANNOTATION = "@composurecdk/route53:query-logging-name";
+/**
+ * Resolve the query-logging configuration for a hosted zone build, creating
+ * the auxiliary `LogGroup` and shared `ResourcePolicy` constructs as needed.
+ *
+ * @internal
+ */
+export function resolveQueryLogging(scope, id, zoneName, cfg) {
+    if (cfg === false)
+        return {};
+    if (cfg?.logGroupArn !== undefined) {
+        if (cfg.configure !== undefined) {
+            throw new Error(`queryLogging: 'configure' cannot be combined with 'logGroupArn' — ` +
+                `the log group is user-managed and not built by this builder.`);
+        }
+        warnIfArnNotUsEast1(scope, cfg.logGroupArn);
+        return { queryLogsLogGroupArn: cfg.logGroupArn };
+    }
+    errorIfStackNotUsEast1(scope);
+    const defaultLogGroupName = `${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/${stripTrailingDot(zoneName)}`;
+    let subBuilder = createLogGroupBuilder().logGroupName(defaultLogGroupName);
+    if (cfg?.configure) {
+        subBuilder = cfg.configure(subBuilder);
+    }
+    const queryLogGroup = subBuilder.build(scope, `${id}QueryLogs`).logGroup;
+    warnIfLogGroupNameOutsidePrefix(scope, id, subBuilder.logGroupName());
+    return {
+        queryLogGroup,
+        queryLogsLogGroupArn: queryLogGroup.logGroupArn,
+        policy: ensureSharedResourcePolicy(scope),
+    };
+}
+function stripTrailingDot(name) {
+    return name.endsWith(".") ? name.slice(0, -1) : name;
+}
+function ensureSharedResourcePolicy(scope) {
+    const stack = Stack.of(scope);
+    const existing = stack.node.tryFindChild(QUERY_LOGGING_RESOURCE_POLICY_ID);
+    if (existing instanceof ResourcePolicy)
+        return existing;
+    return new ResourcePolicy(stack, QUERY_LOGGING_RESOURCE_POLICY_ID, {
+        resourcePolicyName: QUERY_LOGGING_RESOURCE_POLICY_NAME,
+        policyStatements: [
+            new PolicyStatement({
+                sid: "AllowRoute53QueryLogging",
+                effect: Effect.ALLOW,
+                principals: [new ServicePrincipal("route53.amazonaws.com")],
+                actions: ["logs:CreateLogStream", "logs:PutLogEvents"],
+                resources: [
+                    `arn:${Aws.PARTITION}:logs:${QUERY_LOG_REGION}:${Aws.ACCOUNT_ID}:log-group:${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/*:*`,
+                ],
+                conditions: {
+                    StringEquals: { "aws:SourceAccount": Aws.ACCOUNT_ID },
+                },
+            }),
+        ],
+    });
+}
+function errorIfStackNotUsEast1(scope) {
+    const region = Stack.of(scope).region;
+    if (Token.isUnresolved(region)) {
+        checkEnvAgnosticRegion(scope);
+        return;
+    }
+    if (region === QUERY_LOG_REGION)
+        return;
+    throw new Error(buildRegionErrorMessage(region));
+}
+// Env-agnostic stacks have no concrete region in the synthesised template, so
+// fall back to CDK_DEFAULT_REGION — the same env var the CDK toolkit uses to
+// fill the deploy region. Unset means we can't verify at synth time and warn
+// instead, so deploying outside us-east-1 still surfaces a clear synth-time
+// signal rather than the obscure CFN error.
+function checkEnvAgnosticRegion(scope) {
+    const envRegion = process.env.CDK_DEFAULT_REGION;
+    if (envRegion === undefined || envRegion === "") {
+        Annotations.of(scope).addWarningV2(QUERY_LOGGING_REGION_ANNOTATION, `Route 53 query logging is enabled by default and requires the CloudWatch log ` +
+            `group to live in ${QUERY_LOG_REGION}. This stack is env-agnostic and CDK_DEFAULT_REGION ` +
+            `is not set, so the deploy region cannot be verified at synth time. Deploying ` +
+            `outside ${QUERY_LOG_REGION} will fail with "InvalidInputException - The ARN for the ` +
+            `CloudWatch Logs log group is invalid". To silence this warning, either pin ` +
+            `env: { region: '${QUERY_LOG_REGION}' } on the stack, pass queryLogging({ logGroupArn }) ` +
+            `referencing a log group you own in ${QUERY_LOG_REGION}, or queryLogging(false) to opt out.`);
+        return;
+    }
+    if (envRegion === QUERY_LOG_REGION)
+        return;
+    throw new Error(buildRegionErrorMessage(envRegion));
+}
+function buildRegionErrorMessage(region) {
+    return (`Route 53 accepts DNS query logs only in ${QUERY_LOG_REGION}, but this stack is deployed in "${region}". ` +
+        `Without this check, the deploy fails late with "InvalidInputException - The ARN for the ` +
+        `CloudWatch Logs log group is invalid" after CloudFormation has already started rolling forward. ` +
+        `Either:\n` +
+        `  1. Deploy the stack containing this hosted zone in ${QUERY_LOG_REGION}, or\n` +
+        `  2. Pass queryLogging({ logGroupArn: 'arn:aws:logs:${QUERY_LOG_REGION}:...' }) referencing a log group ` +
+        `you own in ${QUERY_LOG_REGION}, or\n` +
+        `  3. Set queryLogging(false) to opt out.`);
+}
+function warnIfArnNotUsEast1(scope, arn) {
+    if (Token.isUnresolved(arn))
+        return;
+    const region = parseLogGroupArnRegion(arn);
+    if (region === undefined || region === QUERY_LOG_REGION)
+        return;
+    Annotations.of(scope).addWarningV2(QUERY_LOGGING_REGION_ANNOTATION, `queryLogging.logGroupArn references a log group in "${region}", but Route 53 query logs ` +
+        `are accepted only in ${QUERY_LOG_REGION}. The deploy will fail unless this ARN is corrected.`);
+}
+function warnIfLogGroupNameOutsidePrefix(scope, id, logGroupName) {
+    if (logGroupName === undefined || Token.isUnresolved(logGroupName))
+        return;
+    if (logGroupName.startsWith(`${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/`))
+        return;
+    Annotations.of(scope).addWarningV2(QUERY_LOGGING_NAME_ANNOTATION, `Hosted zone "${id}" query log group is named "${logGroupName}", which is outside the ` +
+        `"${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/*" prefix that the auto-managed resource policy ` +
+        `covers. Add a resource policy on this log group granting route53.amazonaws.com permission ` +
+        `to logs:CreateLogStream and logs:PutLogEvents, or change the name back to the default prefix.`);
+}
+function parseLogGroupArnRegion(arn) {
+    // arn:partition:logs:region:account:log-group:name
+    const parts = arn.split(":");
+    if (parts.length < 6 || parts[0] !== "arn" || parts[2] !== "logs")
+        return undefined;
+    return parts[3];
+}
+//# sourceMappingURL=query-logging.js.map

package/dist/esm/query-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-logging.js","sourceRoot":"","sources":["../../src/query-logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAiB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAyCvB,MAAM,gBAAgB,GAAG,WAAW,CAAC;AACrC,MAAM,+BAA+B,GAAG,4CAA4C,CAAC;AACrF,MAAM,6BAA6B,GAAG,0CAA0C,CAAC;AAgBjF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,EAAU,EACV,QAAgB,EAChB,GAAmC;IAEnC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAE7B,IAAI,GAAG,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,8DAA8D,CACjE,CAAC;QACJ,CAAC;QACD,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAE9B,MAAM,mBAAmB,GAAG,GAAG,mCAAmC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnG,IAAI,UAAU,GAAqB,qBAAqB,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC7F,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC;IACzE,+BAA+B,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IAEtE,OAAO;QACL,aAAa;QACb,oBAAoB,EAAE,aAAa,CAAC,WAAW;QAC/C,MAAM,EAAE,0BAA0B,CAAC,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAiB;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;IAC3E,IAAI,QAAQ,YAAY,cAAc;QAAE,OAAO,QAAQ,CAAC;IAExD,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,gCAAgC,EAAE;QACjE,kBAAkB,EAAE,kCAAkC;QACtD,gBAAgB,EAAE;YAChB,IAAI,eAAe,CAAC;gBAClB,GAAG,EAAE,0BAA0B;gBAC/B,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,UAAU,EAAE,CAAC,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;gBAC3D,OAAO,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;gBACtD,SAAS,EAAE;oBACT,OAAO,GAAG,CAAC,SAAS,SAAS,gBAAgB,IAAI,GAAG,CAAC,UAAU,cAAc,mCAAmC,MAAM;iBACvH;gBACD,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,UAAU,EAAE;iBACtD;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAiB;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO;IACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,4CAA4C;AAC5C,SAAS,sBAAsB,CAAC,KAAiB;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACjD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAChD,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,+BAA+B,EAC/B,+EAA+E;YAC7E,oBAAoB,gBAAgB,sDAAsD;YAC1F,+EAA+E;YAC/E,WAAW,gBAAgB,2DAA2D;YACtF,6EAA6E;YAC7E,mBAAmB,gBAAgB,uDAAuD;YAC1F,sCAAsC,gBAAgB,sCAAsC,CAC/F,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO;IAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO,CACL,2CAA2C,gBAAgB,oCAAoC,MAAM,KAAK;QAC1G,0FAA0F;QAC1F,kGAAkG;QAClG,WAAW;QACX,wDAAwD,gBAAgB,QAAQ;QAChF,uDAAuD,gBAAgB,mCAAmC;QAC1G,cAAc,gBAAgB,QAAQ;QACtC,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAiB,EAAE,GAAW;IACzD,IAAI,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO;IACpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO;IAChE,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,+BAA+B,EAC/B,uDAAuD,MAAM,6BAA6B;QACxF,wBAAwB,gBAAgB,sDAAsD,CACjG,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAiB,EACjB,EAAU,EACV,YAAgC;IAEhC,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;QAAE,OAAO;IAC3E,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,mCAAmC,GAAG,CAAC;QAAE,OAAO;IAC/E,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,6BAA6B,EAC7B,gBAAgB,EAAE,+BAA+B,YAAY,0BAA0B;QACrF,IAAI,mCAAmC,mDAAmD;QAC1F,4FAA4F;QAC5F,+FAA+F,CAClG,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,mDAAmD;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/esm/srv-record-builder.d.ts

@@ -0,0 +1,40 @@
+import { SrvRecord, type SrvRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 SRV record builder.
+ *
+ * Extends the CDK {@link SrvRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface SrvRecordBuilderProps extends Omit<SrvRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link ISrvRecordBuilder}.
+ */
+export interface SrvRecordBuilderResult {
+    /** The Route53 SRV record construct created by the builder. */
+    record: SrvRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 SRV record.
+ *
+ * SRV records advertise the location (host + port) of a named service, and
+ * the record name typically follows the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ */
+export type ISrvRecordBuilder = IBuilder<SrvRecordBuilderProps, SrvRecordBuilder>;
+declare class SrvRecordBuilder implements Lifecycle<SrvRecordBuilderResult> {
+    props: Partial<SrvRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): SrvRecordBuilderResult;
+}
+/**
+ * Creates a new {@link ISrvRecordBuilder} for configuring a Route53 SRV record.
+ *
+ * @returns A fluent builder for a Route53 SRV record.
+ */
+export declare function createSrvRecordBuilder(): ISrvRecordBuilder;
+export {};
+//# sourceMappingURL=srv-record-builder.d.ts.map

package/dist/esm/srv-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"srv-record-builder.d.ts","sourceRoot":"","sources":["../../src/srv-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;IACzE,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,MAAM,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;AAElF,cAAM,gBAAiB,YAAW,SAAS,CAAC,sBAAsB,CAAC;IACjE,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAM;IAE3C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,sBAAsB;CAwB/F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,CAG1D"}

package/dist/esm/srv-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"srv-record-builder.js","sourceRoot":"","sources":["../../src/srv-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyC,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AA+BpD,MAAM,gBAAgB;IACpB,KAAK,GAAmC,EAAE,CAAC;IAE3C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,sDAAsD,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,+BAA+B;gBACpD,+EAA+E,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,mBAAmB;YACtB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACX,CAAC;QAEpB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,+GAA+G;IAC/G,OAAO,OAAO,CAA0C,gBAAgB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/esm/svcb-record-builder.d.ts

@@ -0,0 +1,41 @@
+import { SvcbRecord, type SvcbRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 SVCB record builder.
+ *
+ * Extends the CDK {@link SvcbRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface SvcbRecordBuilderProps extends Omit<SvcbRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link ISvcbRecordBuilder}.
+ */
+export interface SvcbRecordBuilderResult {
+    /** The Route53 SVCB record construct created by the builder. */
+    record: SvcbRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 SVCB record.
+ *
+ * SVCB is the generic service-binding record type (RFC 9460). For HTTPS
+ * specifically, prefer {@link createHttpsRecordBuilder} — most clients only
+ * consult HTTPS records for web traffic.
+ */
+export type ISvcbRecordBuilder = IBuilder<SvcbRecordBuilderProps, SvcbRecordBuilder>;
+declare class SvcbRecordBuilder implements Lifecycle<SvcbRecordBuilderResult> {
+    props: Partial<SvcbRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): SvcbRecordBuilderResult;
+}
+/**
+ * Creates a new {@link ISvcbRecordBuilder} for configuring a Route53 SVCB
+ * record.
+ *
+ * @returns A fluent builder for a Route53 SVCB record.
+ */
+export declare function createSvcbRecordBuilder(): ISvcbRecordBuilder;
+export {};
+//# sourceMappingURL=svcb-record-builder.d.ts.map

package/dist/esm/svcb-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svcb-record-builder.d.ts","sourceRoot":"","sources":["../../src/svcb-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC;IAC3E,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gEAAgE;IAChE,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;;;;GAMG;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAErF,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,uBAAuB;CAwBhG;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAG5D"}

package/dist/esm/svcb-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svcb-record-builder.js","sourceRoot":"","sources":["../../src/svcb-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA0C,MAAM,yBAAyB,CAAC;AAE7F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA+BrD,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IAE5C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,sDAAsD,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,+BAA+B;gBACrD,0DAA0D,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,oBAAoB;YACvB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACV,CAAC;QAErB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,+GAA+G;IAC/G,OAAO,OAAO,CAA4C,iBAAiB,CAAC,CAAC;AAC/E,CAAC"}

package/dist/esm/txt-record-builder.d.ts

@@ -0,0 +1,38 @@
+import { TxtRecord, type TxtRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 TXT record builder.
+ *
+ * Extends the CDK {@link TxtRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface TxtRecordBuilderProps extends Omit<TxtRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link ITxtRecordBuilder}.
+ */
+export interface TxtRecordBuilderResult {
+    /** The Route53 TXT record construct created by the builder. */
+    record: TxtRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 TXT record.
+ *
+ * Commonly used for SPF, DKIM, DMARC, and domain-verification tokens.
+ */
+export type ITxtRecordBuilder = IBuilder<TxtRecordBuilderProps, TxtRecordBuilder>;
+declare class TxtRecordBuilder implements Lifecycle<TxtRecordBuilderResult> {
+    props: Partial<TxtRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): TxtRecordBuilderResult;
+}
+/**
+ * Creates a new {@link ITxtRecordBuilder} for configuring a Route53 TXT record.
+ *
+ * @returns A fluent builder for a Route53 TXT record.
+ */
+export declare function createTxtRecordBuilder(): ITxtRecordBuilder;
+export {};
+//# sourceMappingURL=txt-record-builder.d.ts.map

package/dist/esm/txt-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"txt-record-builder.d.ts","sourceRoot":"","sources":["../../src/txt-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;IACzE,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,MAAM,EAAE,SAAS,CAAC;CACnB;AAED;;;;GAIG;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;AAElF,cAAM,gBAAiB,YAAW,SAAS,CAAC,sBAAsB,CAAC;IACjE,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAM;IAE3C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,sBAAsB;CAwB/F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,CAG1D"}

package/dist/esm/txt-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"txt-record-builder.js","sourceRoot":"","sources":["../../src/txt-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyC,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AA6BpD,MAAM,gBAAgB;IACpB,KAAK,GAAmC,EAAE,CAAC;IAE3C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,sDAAsD,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,+BAA+B;gBACpD,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,mBAAmB;YACtB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACX,CAAC;QAEpB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,+GAA+G;IAC/G,OAAO,OAAO,CAA0C,gBAAgB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/esm/zone/index.d.ts

@@ -0,0 +1,3 @@
+export { APEX, A, AAAA, ALIAS, CNAME, TXT, MX, SRV, CAA, CAA_ISSUE, CAA_ISSUEWILD, CAA_IODEF, NS, DS, HTTPS, SVCB, type AliasRecordOptions, type RecordOptions, type RecordSpec, type RecordType, type ARecordSpec, type AaaaRecordSpec, type AliasRecordSpec, type CnameRecordSpec, type TxtRecordSpec, type MxRecordSpec, type SrvRecordSpec, type CaaRecordSpec, type NsRecordSpec, type DsRecordSpec, type HttpsRecordSpec, type SvcbRecordSpec, } from "./zone-dsl.js";
+export { zoneRecords, type IZoneRecordsBuilder, type ZoneRecordsBuilderResult, } from "./zone-records.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/zone/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/zone/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,CAAC,EACD,IAAI,EACJ,KAAK,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,GAAG,EACH,GAAG,EACH,SAAS,EACT,aAAa,EACb,SAAS,EACT,EAAE,EACF,EAAE,EACF,KAAK,EACL,IAAI,EACJ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC"}

package/dist/esm/zone/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/zone/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,CAAC,EACD,IAAI,EACJ,KAAK,EACL,KAAK,EACL,GAAG,EACH,EAAE,EACF,GAAG,EACH,GAAG,EACH,SAAS,EACT,aAAa,EACb,SAAS,EACT,EAAE,EACF,EAAE,EACF,KAAK,EACL,IAAI,GAiBL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,GAGZ,MAAM,mBAAmB,CAAC"}

package/dist/esm/zone/zone-dsl.d.ts

@@ -0,0 +1,296 @@
+import type { Duration } from "aws-cdk-lib";
+import { CaaTag, type HttpsRecordValue, type RecordTarget, type SvcbRecordValue } from "aws-cdk-lib/aws-route53";
+import type { Resolvable } from "@composurecdk/core";
+/**
+ * Sentinel name representing the zone apex (the zone-file `@`).
+ *
+ * Translated to an undefined CDK `recordName` when bound to a CDK construct.
+ */
+export declare const APEX = "@";
+/**
+ * Per-record options applied to the underlying CDK construct.
+ *
+ * Mirrors the optional fields shared by every Route 53 record builder. Each
+ * record-type DSL helper accepts these as a trailing options argument.
+ */
+export interface RecordOptions {
+    /** TTL for the record set. Falls back to the underlying builder's default. */
+    readonly ttl?: Duration;
+    /** Optional comment passed through to the CDK construct. */
+    readonly comment?: string;
+}
+export interface ARecordSpec extends RecordOptions {
+    readonly type: "A";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface AaaaRecordSpec extends RecordOptions {
+    readonly type: "AAAA";
+    readonly name: string;
+    readonly addresses: readonly string[];
+}
+export interface CnameRecordSpec extends RecordOptions {
+    readonly type: "CNAME";
+    readonly name: string;
+    readonly target: string;
+}
+export interface TxtRecordSpec extends RecordOptions {
+    readonly type: "TXT";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface MxRecordSpec extends RecordOptions {
+    readonly type: "MX";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly hostName: string;
+    }[];
+}
+export interface SrvRecordSpec extends RecordOptions {
+    readonly type: "SRV";
+    readonly name: string;
+    readonly values: readonly {
+        readonly priority: number;
+        readonly weight: number;
+        readonly port: number;
+        readonly hostName: string;
+    }[];
+}
+export interface CaaRecordSpec extends RecordOptions {
+    readonly type: "CAA";
+    readonly name: string;
+    readonly values: readonly {
+        readonly flag: number;
+        readonly tag: CaaTag;
+        readonly value: string;
+    }[];
+}
+export interface NsRecordSpec extends RecordOptions {
+    readonly type: "NS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface DsRecordSpec extends RecordOptions {
+    readonly type: "DS";
+    readonly name: string;
+    readonly values: readonly string[];
+}
+export interface HttpsRecordSpec extends RecordOptions {
+    readonly type: "HTTPS";
+    readonly name: string;
+    readonly values: readonly HttpsRecordValue[];
+}
+export interface SvcbRecordSpec extends RecordOptions {
+    readonly type: "SVCB";
+    readonly name: string;
+    readonly values: readonly SvcbRecordValue[];
+}
+export interface AliasRecordSpec extends RecordOptions {
+    readonly type: "ALIAS";
+    readonly name: string;
+    readonly target: Resolvable<RecordTarget>;
+    /** `false` emits an A alias (default); `true` emits an AAAA alias. */
+    readonly ipv6: boolean;
+}
+export type RecordSpec = ARecordSpec | AaaaRecordSpec | CnameRecordSpec | TxtRecordSpec | MxRecordSpec | SrvRecordSpec | CaaRecordSpec | NsRecordSpec | DsRecordSpec | HttpsRecordSpec | SvcbRecordSpec | AliasRecordSpec;
+/** Record type discriminators surfaced by {@link RecordSpec}. */
+export type RecordType = RecordSpec["type"];
+/**
+ * IPv4 address record. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Multiple `A` calls for the same `name` are merged into a single CDK record
+ * set with all addresses; alternatively, pass an array as the second argument.
+ *
+ * @example
+ * ```ts
+ * A("@",  "1.2.3.4")
+ * A("ha", ["1.2.3.4", "5.6.7.8"])
+ * A("www", "1.2.3.4", { ttl: Duration.minutes(10) })
+ * ```
+ */
+export declare function A(name: string, address: string | readonly string[], options?: RecordOptions): ARecordSpec;
+/**
+ * IPv6 address record. See {@link A} for the merging / array semantics — they
+ * are identical.
+ */
+export declare function AAAA(name: string, address: string | readonly string[], options?: RecordOptions): AaaaRecordSpec;
+/**
+ * Canonical-name record. DNS forbids more than one CNAME per name, so a second
+ * `CNAME(name, …)` for the same name is a configuration error and is rejected
+ * when the records are bound to the zone.
+ *
+ * CNAMEs also cannot live at the zone apex — use an A/AAAA alias instead.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * CNAME("dkim1", "dkim1.39769.dkim.example.")
+ * ```
+ */
+export declare function CNAME(name: string, target: string, options?: RecordOptions): CnameRecordSpec;
+/**
+ * Text record. Pass a single string or an array of strings; multiple `TXT`
+ * calls for the same `name` are merged into one CDK record set.
+ *
+ * @example
+ * ```ts
+ * TXT("@",      "v=spf1 mx -all")
+ * TXT("_dmarc", "v=DMARC1; p=none;")
+ * TXT("multi",  ["one", "two"])
+ * ```
+ */
+export declare function TXT(name: string, value: string | readonly string[], options?: RecordOptions): TxtRecordSpec;
+/**
+ * Mail-exchanger record. The argument order matches BIND zone files
+ * (`name priority target`); multiple `MX(name, …)` calls for the same name are
+ * merged into one CDK record set with all `(priority, hostName)` pairs.
+ *
+ * Targets containing dots should be fully qualified (trailing `.`).
+ *
+ * @example
+ * ```ts
+ * MX("@", 10, "mail.example.com.")
+ * MX("@", 20, "backup.example.com.")
+ * ```
+ */
+export declare function MX(name: string, priority: number, hostName: string, options?: RecordOptions): MxRecordSpec;
+/**
+ * Service-locator record. The argument order matches BIND zone files
+ * (`name priority weight port target`); multiple `SRV(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * Record names typically follow the `_service._proto` convention (e.g.
+ * `_sip._tcp`). Lower priority wins; weight distributes load across peers.
+ *
+ * @example
+ * ```ts
+ * SRV("_sip._tcp", 10, 60, 5060, "sip1.example.com.")
+ * SRV("_sip._tcp", 10, 40, 5060, "sip2.example.com.")
+ * ```
+ */
+export declare function SRV(name: string, priority: number, weight: number, port: number, hostName: string, options?: RecordOptions): SrvRecordSpec;
+/**
+ * Certification-authority authorization record. Argument order matches BIND
+ * zone files (`name flag tag value`); multiple `CAA(name, …)` calls for the
+ * same name are merged into one CDK record set.
+ *
+ * For the common cases, prefer {@link CAA_ISSUE}, {@link CAA_ISSUEWILD}, or
+ * {@link CAA_IODEF}.
+ *
+ * @example
+ * ```ts
+ * CAA("@", 0, CaaTag.ISSUE, "amazon.com")
+ * ```
+ */
+export declare function CAA(name: string, flag: number, tag: CaaTag, value: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issue` record — authorizes a specific certificate authority to issue
+ * certificates for the name. Merges with other CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_ISSUE("@", "amazon.com")
+ * CAA_ISSUE("@", "amazontrust.com")
+ * ```
+ */
+export declare function CAA_ISSUE(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `issuewild` record — authorizes a specific CA to issue wildcard
+ * certificates for the name. Merges with other CAA records at the same name.
+ */
+export declare function CAA_ISSUEWILD(name: string, authority: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * CAA `iodef` record — reports policy violations to a URL. Merges with other
+ * CAA records at the same name.
+ *
+ * @example
+ * ```ts
+ * CAA_IODEF("@", "mailto:security@example.com")
+ * ```
+ */
+export declare function CAA_IODEF(name: string, url: string, options?: RecordOptions): CaaRecordSpec;
+/**
+ * Name-server delegation record. Delegates a subdomain to the supplied name
+ * servers. NS records cannot live at the zone apex — the apex NS set is
+ * managed by Route 53 itself.
+ *
+ * Multiple `NS(name, …)` calls for the same name are merged; alternatively,
+ * pass an array of host names.
+ *
+ * @example
+ * ```ts
+ * NS("internal", ["ns-1.awsdns-00.co.uk.", "ns-2.awsdns-00.com."])
+ * ```
+ */
+export declare function NS(name: string, hostName: string | readonly string[], options?: RecordOptions): NsRecordSpec;
+/**
+ * DNSSEC delegation-signer record. Each value is a full rdata string
+ * (`keyTag algorithm digestType digest`). Multiple `DS(name, …)` calls for the
+ * same name are merged.
+ *
+ * @example
+ * ```ts
+ * DS("secure", "60485 5 1 2BB183AF5F22588179A53B0A98631FAD1A292118")
+ * ```
+ */
+export declare function DS(name: string, rdata: string | readonly string[], options?: RecordOptions): DsRecordSpec;
+/**
+ * HTTPS service-binding record (RFC 9460). Accepts pre-constructed
+ * {@link HttpsRecordValue} instances from the CDK. For alias-mode HTTPS
+ * records (typically pointing at a CloudFront distribution), use
+ * `createHttpsRecordBuilder` directly — the DSL supports value-mode only.
+ *
+ * Multiple `HTTPS(name, …)` calls for the same name are merged.
+ *
+ * @example
+ * ```ts
+ * HTTPS("@", HttpsRecordValue.service({ alpn: [Alpn.H3, Alpn.H2] }))
+ * ```
+ */
+export declare function HTTPS(name: string, value: HttpsRecordValue | readonly HttpsRecordValue[], options?: RecordOptions): HttpsRecordSpec;
+/**
+ * Generic service-binding record (RFC 9460). For HTTPS specifically, prefer
+ * {@link HTTPS} — most clients only consult HTTPS records for web traffic.
+ *
+ * Multiple `SVCB(name, …)` calls for the same name are merged.
+ */
+export declare function SVCB(name: string, value: SvcbRecordValue | readonly SvcbRecordValue[], options?: RecordOptions): SvcbRecordSpec;
+/**
+ * Options for {@link ALIAS}. Extends {@link RecordOptions} with `ipv6` to pick
+ * between A-alias (default) and AAAA-alias output.
+ */
+export interface AliasRecordOptions extends RecordOptions {
+    /** When `true`, emit an AAAA alias record instead of an A alias. */
+    readonly ipv6?: boolean;
+}
+/**
+ * Route 53 alias record — compiles to an A record (or AAAA when
+ * `options.ipv6` is `true`) whose target is an `aliasTarget` rather than a
+ * list of IP addresses. Use {@link APEX} (`"@"`) as `name` for the zone apex.
+ *
+ * Pair with the alias-target helpers in `@composurecdk/route53` —
+ * `cloudfrontAliasTarget`, `apiGatewayAliasTarget`, or
+ * `apiGatewayDomainAliasTarget` — which return `Resolvable<RecordTarget>`.
+ *
+ * Because DNS permits only one record set per `(type, name)`, an `ALIAS`
+ * cannot coexist with address-mode `A`/`AAAA` at the same name, and two
+ * `ALIAS` calls for the same `(type, name)` are a configuration error. Both
+ * cases are rejected at build time.
+ *
+ * TTL defaults do not apply to alias records — AWS ignores TTL on aliases and
+ * CDK warns if one is set — so the underlying builder suppresses them.
+ *
+ * @example
+ * ```ts
+ * ALIAS("@", cloudfrontAliasTarget(
+ *   ref<DistributionBuilderResult>("cdn").get("distribution"),
+ * ))
+ * ALIAS("@", cloudfrontAliasTarget(
+ *   ref<DistributionBuilderResult>("cdn").get("distribution"),
+ * ), { ipv6: true })
+ * ```
+ */
+export declare function ALIAS(name: string, target: Resolvable<RecordTarget>, options?: AliasRecordOptions): AliasRecordSpec;
+//# sourceMappingURL=zone-dsl.d.ts.map

package/dist/esm/zone/zone-dsl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.d.ts","sourceRoot":"","sources":["../../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,MAAM,EACN,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,IAAI,MAAM,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,cAAc,GACd,eAAe,GACf,aAAa,GACb,YAAY,GACZ,aAAa,GACb,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,cAAc,GACd,eAAe,CAAC;AAEpB,iEAAiE;AACjE,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAK5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,CAAC,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,WAAW,CAEb;AAED;;;GAGG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACnC,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,eAAe,CAEhG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,GAAG,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,aAAkB,GAC1B,aAAa,CAEf;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAErF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAEzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,iBAE/E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACpC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;GASG;AACH,wBAAgB,EAAE,CAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACjC,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAEd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,gBAAgB,GAAG,SAAS,gBAAgB,EAAE,EACrD,OAAO,GAAE,aAAkB,GAC1B,eAAe,CAEjB;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAClB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,GAAG,SAAS,eAAe,EAAE,EACnD,OAAO,GAAE,aAAkB,GAC1B,cAAc,CAEhB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,KAAK,CACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,EAChC,OAAO,GAAE,kBAAuB,GAC/B,eAAe,CAGjB"}

package/dist/esm/zone/zone-dsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-dsl.js","sourceRoot":"","sources":["../../../src/zone/zone-dsl.ts"],"names":[],"mappings":"AACA,OAAO,EACL,MAAM,GAIP,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC;AAmHxB,MAAM,OAAO,GAAG,CAAI,CAAmB,EAAgB,EAAE,CACvD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAkB,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,CAAC,CACf,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,OAAmC,EACnC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc,EAAE,UAAyB,EAAE;IAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,IAAY,EACZ,GAAW,EACX,KAAa,EACb,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACpF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAyB,EAAE;IACxF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,UAAyB,EAAE;IAC9E,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,QAAoC,EACpC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,EAAE,CAChB,IAAY,EACZ,KAAiC,EACjC,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,KAAqD,EACrD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,IAAY,EACZ,KAAmD,EACnD,UAAyB,EAAE;IAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;AACpE,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,MAAgC,EAChC,UAA8B,EAAE;IAEhC,MAAM,EAAE,IAAI,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;AACxD,CAAC"}