@composurecdk/route53 0.7.0 → 0.8.1

package/dist/esm/a-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a-record-builder.js","sourceRoot":"","sources":["../../src/a-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,GAIR,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAgDlD,MAAM,cAAc;IAClB,KAAK,GAAiC,EAAE,CAAC;IAEzC,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,sDAAsD,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,mBAAmB,EAAE,0DAA0D,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,KAAK,SAAS,CAAC;QACzD,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACrC,GAAG,IAAI;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;YAC5B,MAAM,EAAE,cAAc;SACP,CAAC;QAElB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,+GAA+G;IAC/G,OAAO,OAAO,CAAsC,cAAc,CAAC,CAAC;AACtE,CAAC"}

package/dist/esm/aaaa-record-builder.d.ts

@@ -0,0 +1,44 @@
+import { AaaaRecord, type AaaaRecordProps, type IHostedZone, type RecordTarget } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 AAAA (IPv6) record builder.
+ *
+ * Extends the CDK {@link AaaaRecordProps} but replaces `zone` and `target`
+ * with {@link Resolvable} variants so they can be wired from other components
+ * in a composed system.
+ */
+export interface AaaaRecordBuilderProps extends Omit<AaaaRecordProps, "zone" | "target"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+    /** The record target. */
+    target?: Resolvable<RecordTarget>;
+}
+/**
+ * The build output of an {@link IAaaaRecordBuilder}.
+ */
+export interface AaaaRecordBuilderResult {
+    /** The Route53 AAAA record construct created by the builder. */
+    record: AaaaRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 AAAA (IPv6) record.
+ *
+ * Use this alongside an A record to expose a CloudFront distribution or ALB
+ * over both IPv4 and IPv6 — AWS alias targets support both families from a
+ * single resource.
+ */
+export type IAaaaRecordBuilder = IBuilder<AaaaRecordBuilderProps, AaaaRecordBuilder>;
+declare class AaaaRecordBuilder implements Lifecycle<AaaaRecordBuilderResult> {
+    props: Partial<AaaaRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): AaaaRecordBuilderResult;
+}
+/**
+ * Creates a new {@link IAaaaRecordBuilder} for configuring a Route53 AAAA
+ * (IPv6) record.
+ *
+ * @returns A fluent builder for a Route53 AAAA record.
+ */
+export declare function createAaaaRecordBuilder(): IAaaaRecordBuilder;
+export {};
+//# sourceMappingURL=aaaa-record-builder.d.ts.map

package/dist/esm/aaaa-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aaaa-record-builder.d.ts","sourceRoot":"","sources":["../../src/aaaa-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;;GAMG;AACH,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,QAAQ,CAAC;IACtF,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC/B,yBAAyB;IACzB,MAAM,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,gEAAgE;IAChE,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;;;;GAMG;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAErF,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,uBAAuB;CAyBhG;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAG5D"}

package/dist/esm/aaaa-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aaaa-record-builder.js","sourceRoot":"","sources":["../../src/aaaa-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,GAIX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAkCrD,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IAE5C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,sDAAsD,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,sBAAsB,EAAE,0DAA0D,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,KAAK,SAAS,CAAC;QACzD,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;YACxC,GAAG,IAAI;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;YAC5B,MAAM,EAAE,cAAc;SACJ,CAAC;QAErB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,+GAA+G;IAC/G,OAAO,OAAO,CAA4C,iBAAiB,CAAC,CAAC;AAC/E,CAAC"}

package/dist/esm/alias-targets.d.ts

@@ -0,0 +1,34 @@
+import { type IDistribution } from "aws-cdk-lib/aws-cloudfront";
+import { type IDomainName, type RestApiBase } from "aws-cdk-lib/aws-apigateway";
+import { RecordTarget } from "aws-cdk-lib/aws-route53";
+import { type Resolvable } from "@composurecdk/core";
+/**
+ * Builds an alias {@link RecordTarget} for a CloudFront distribution, usable
+ * as the `target` of an A or AAAA record. Accepts a {@link Resolvable} so a
+ * distribution produced by a composed `@composurecdk/cloudfront` component
+ * can be wired in via {@link ref}.
+ *
+ * @example
+ * ```ts
+ * createARecordBuilder()
+ *   .zone(ref("zone", (r: HostedZoneBuilderResult) => r.hostedZone))
+ *   .target(cloudfrontAliasTarget(
+ *     ref("cdn", (r: DistributionBuilderResult) => r.distribution),
+ *   ));
+ * ```
+ */
+export declare function cloudfrontAliasTarget(distribution: Resolvable<IDistribution>): Resolvable<RecordTarget>;
+/**
+ * Builds an alias {@link RecordTarget} for an API Gateway REST API that has a
+ * custom domain name configured via {@link RestApiBase}. Accepts a
+ * {@link Resolvable}.
+ */
+export declare function apiGatewayAliasTarget(api: Resolvable<RestApiBase>): Resolvable<RecordTarget>;
+/**
+ * Builds an alias {@link RecordTarget} for an API Gateway custom domain name
+ * (`apigateway.DomainName`). Use this when you manage the domain name resource
+ * separately from the REST API (e.g. to share a custom domain across multiple
+ * APIs). Accepts a {@link Resolvable}.
+ */
+export declare function apiGatewayDomainAliasTarget(domain: Resolvable<IDomainName>): Resolvable<RecordTarget>;
+//# sourceMappingURL=alias-targets.d.ts.map

package/dist/esm/alias-targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-targets.d.ts","sourceRoot":"","sources":["../../src/alias-targets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,GACtC,UAAU,CAAC,YAAY,CAAC,CAI1B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAI5F;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,GAC9B,UAAU,CAAC,YAAY,CAAC,CAI1B"}

package/dist/esm/alias-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias-targets.js","sourceRoot":"","sources":["../../src/alias-targets.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACjG,OAAO,EAAE,KAAK,EAAmB,MAAM,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAuC;IAEvC,OAAO,KAAK,CAAC,YAAY,CAAC;QACxB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAA4B;IAChE,OAAO,KAAK,CAAC,GAAG,CAAC;QACf,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA+B;IAE/B,OAAO,KAAK,CAAC,MAAM,CAAC;QAClB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/esm/caa-record-builder.d.ts

@@ -0,0 +1,44 @@
+import { CaaRecord, type CaaRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 CAA record builder.
+ *
+ * Extends the CDK {@link CaaRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface CaaRecordBuilderProps extends Omit<CaaRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link ICaaRecordBuilder}.
+ */
+export interface CaaRecordBuilderResult {
+    /** The Route53 CAA record construct created by the builder. */
+    record: CaaRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 CAA record.
+ *
+ * CAA records restrict which certificate authorities may issue certificates
+ * for the domain — a CA that does not match any permitted `issue` / `issuewild`
+ * entry must refuse to issue. When issuing via ACM, see
+ * `createCaaAmazonRecordBuilder` (not yet implemented — use a CAA record with
+ * `amazon.com` / `amazontrust.com` / `awstrust.com` / `amazonaws.com` values).
+ *
+ * @see https://docs.aws.amazon.com/acm/latest/userguide/setup-caa.html
+ */
+export type ICaaRecordBuilder = IBuilder<CaaRecordBuilderProps, CaaRecordBuilder>;
+declare class CaaRecordBuilder implements Lifecycle<CaaRecordBuilderResult> {
+    props: Partial<CaaRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): CaaRecordBuilderResult;
+}
+/**
+ * Creates a new {@link ICaaRecordBuilder} for configuring a Route53 CAA record.
+ *
+ * @returns A fluent builder for a Route53 CAA record.
+ */
+export declare function createCaaRecordBuilder(): ICaaRecordBuilder;
+export {};
+//# sourceMappingURL=caa-record-builder.d.ts.map

package/dist/esm/caa-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caa-record-builder.d.ts","sourceRoot":"","sources":["../../src/caa-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC;IACzE,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,MAAM,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;AAElF,cAAM,gBAAiB,YAAW,SAAS,CAAC,sBAAsB,CAAC;IACjE,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAM;IAE3C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,sBAAsB;CAwB/F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,CAG1D"}

package/dist/esm/caa-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caa-record-builder.js","sourceRoot":"","sources":["../../src/caa-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyC,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAmCpD,MAAM,gBAAgB;IACpB,KAAK,GAAmC,EAAE,CAAC;IAE3C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,sDAAsD,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,+BAA+B;gBACpD,+DAA+D,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,mBAAmB;YACtB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACX,CAAC;QAEpB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,+GAA+G;IAC/G,OAAO,OAAO,CAA0C,gBAAgB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/esm/cname-record-builder.d.ts

@@ -0,0 +1,42 @@
+import { CnameRecord, type CnameRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 CNAME record builder.
+ *
+ * Extends the CDK {@link CnameRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface CnameRecordBuilderProps extends Omit<CnameRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link ICnameRecordBuilder}.
+ */
+export interface CnameRecordBuilderResult {
+    /** The Route53 CNAME record construct created by the builder. */
+    record: CnameRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 CNAME record.
+ *
+ * Prefer {@link createARecordBuilder | A / AAAA alias records} when pointing
+ * at AWS resources — alias records are free, resolve in one hop, and can be
+ * used at the apex. Use CNAME for non-AWS targets or for sub-domain
+ * redirections where an alias is not available.
+ */
+export type ICnameRecordBuilder = IBuilder<CnameRecordBuilderProps, CnameRecordBuilder>;
+declare class CnameRecordBuilder implements Lifecycle<CnameRecordBuilderResult> {
+    props: Partial<CnameRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): CnameRecordBuilderResult;
+}
+/**
+ * Creates a new {@link ICnameRecordBuilder} for configuring a Route53 CNAME
+ * record.
+ *
+ * @returns A fluent builder for a Route53 CNAME record.
+ */
+export declare function createCnameRecordBuilder(): ICnameRecordBuilder;
+export {};
+//# sourceMappingURL=cname-record-builder.d.ts.map

package/dist/esm/cname-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cname-record-builder.d.ts","sourceRoot":"","sources":["../../src/cname-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC7E,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;GAOG;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;AAExF,cAAM,kBAAmB,YAAW,SAAS,CAAC,wBAAwB,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAM;IAE7C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,wBAAwB;CA+BjG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,mBAAmB,CAG9D"}

package/dist/esm/cname-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cname-record-builder.js","sourceRoot":"","sources":["../../src/cname-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA2C,MAAM,yBAAyB,CAAC;AAE/F,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAgCtD,MAAM,kBAAkB;IACtB,KAAK,GAAqC,EAAE,CAAC;IAE7C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,sDAAsD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,2BAA2B;gBAClD,qEAAqE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,2BAA2B;gBAClD,mFAAmF,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,qBAAqB;YACxB,GAAG,IAAI;YACP,UAAU;YACV,UAAU;YACV,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACT,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,+GAA+G;IAC/G,OAAO,OAAO,CAA8C,kBAAkB,CAAC,CAAC;AAClF,CAAC"}

package/dist/esm/defaults.d.ts

@@ -0,0 +1,119 @@
+import type { HostedZoneBuilderProps } from "./hosted-zone-builder.js";
+import type { ARecordBuilderProps } from "./a-record-builder.js";
+import type { AaaaRecordBuilderProps } from "./aaaa-record-builder.js";
+import type { CnameRecordBuilderProps } from "./cname-record-builder.js";
+import type { TxtRecordBuilderProps } from "./txt-record-builder.js";
+import type { MxRecordBuilderProps } from "./mx-record-builder.js";
+import type { SrvRecordBuilderProps } from "./srv-record-builder.js";
+import type { CaaRecordBuilderProps } from "./caa-record-builder.js";
+import type { NsRecordBuilderProps } from "./ns-record-builder.js";
+import type { DsRecordBuilderProps } from "./ds-record-builder.js";
+import type { HttpsRecordBuilderProps } from "./https-record-builder.js";
+import type { SvcbRecordBuilderProps } from "./svcb-record-builder.js";
+import type { HealthCheckBuilderProps } from "./health-check-builder.js";
+/**
+ * Naming prefix applied to every auto-created Route 53 query-log group. A
+ * single shared resource policy targets `<prefix>/*` so multiple hosted zones
+ * in the same stack share one `AWS::Logs::ResourcePolicy` (the per-region
+ * soft limit is 10). Matches the prefix the Route 53 console uses.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/APIReference/API_CreateQueryLoggingConfig.html
+ */
+export declare const QUERY_LOGGING_LOG_GROUP_NAME_PREFIX = "/aws/route53";
+/**
+ * Construct id of the shared `AWS::Logs::ResourcePolicy` materialised once
+ * per stack when any hosted zone in that stack uses auto-managed query
+ * logging. Package-internal — used by the dedup helper and the unit tests, and
+ * intentionally not re-exported from the package barrel; consumers should not
+ * reference the policy directly.
+ */
+export declare const QUERY_LOGGING_RESOURCE_POLICY_ID = "ComposureCDKRoute53QueryLoggingPolicy";
+/**
+ * Stable resource-policy name written into CloudWatch Logs so the policy is
+ * deduplicated when the same stack is re-synthesised across deployments.
+ */
+export declare const QUERY_LOGGING_RESOURCE_POLICY_NAME = "ComposureCDK-Route53QueryLogging";
+/**
+ * Secure, AWS-recommended defaults applied to every public hosted zone built
+ * with {@link createHostedZoneBuilder}. Each property can be individually
+ * overridden via the builder's fluent API.
+ *
+ * Query logging is enabled by default: the builder auto-creates a CloudWatch
+ * {@link import("aws-cdk-lib/aws-logs").LogGroup} under
+ * `${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/<zoneName>` and a single shared
+ * `AWS::Logs::ResourcePolicy` granting `route53.amazonaws.com` permission to
+ * write log streams. Disable with `.queryLogging(false)` or supply a managed
+ * log group via `.queryLogging({ logGroupArn })`.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/query-logs.html
+ */
+export declare const HOSTED_ZONE_DEFAULTS: Partial<HostedZoneBuilderProps>;
+/**
+ * Defaults for {@link createARecordBuilder}. Overridable via the fluent API.
+ * The builder skips the `ttl` default for alias targets — AWS ignores TTL on
+ * alias records and CDK emits a warning when one is set.
+ */
+export declare const A_RECORD_DEFAULTS: Partial<ARecordBuilderProps>;
+/**
+ * Defaults for {@link createAaaaRecordBuilder}. Overridable via the fluent API.
+ * Same alias-target caveat as {@link A_RECORD_DEFAULTS}.
+ */
+export declare const AAAA_RECORD_DEFAULTS: Partial<AaaaRecordBuilderProps>;
+/**
+ * Defaults for {@link createCnameRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const CNAME_RECORD_DEFAULTS: Partial<CnameRecordBuilderProps>;
+/**
+ * Defaults for {@link createTxtRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const TXT_RECORD_DEFAULTS: Partial<TxtRecordBuilderProps>;
+/**
+ * Defaults for {@link createMxRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const MX_RECORD_DEFAULTS: Partial<MxRecordBuilderProps>;
+/**
+ * Defaults for {@link createSrvRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const SRV_RECORD_DEFAULTS: Partial<SrvRecordBuilderProps>;
+/**
+ * Defaults for {@link createCaaRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const CAA_RECORD_DEFAULTS: Partial<CaaRecordBuilderProps>;
+/**
+ * Defaults for {@link createNsRecordBuilder}. Overridable via the fluent API.
+ *
+ * A longer TTL is appropriate for delegation records — resolvers cache NS
+ * responses, and frequent churn forces parent-side re-delegation lookups.
+ */
+export declare const NS_RECORD_DEFAULTS: Partial<NsRecordBuilderProps>;
+/**
+ * Defaults for {@link createDsRecordBuilder}. Overridable via the fluent API.
+ *
+ * DS records change rarely (key-signing rollovers); a long TTL reduces
+ * DNSSEC validation load on resolvers.
+ */
+export declare const DS_RECORD_DEFAULTS: Partial<DsRecordBuilderProps>;
+/**
+ * Defaults for {@link createHttpsRecordBuilder}. Overridable via the fluent API.
+ * Same alias-target caveat as {@link A_RECORD_DEFAULTS}.
+ */
+export declare const HTTPS_RECORD_DEFAULTS: Partial<HttpsRecordBuilderProps>;
+/**
+ * Defaults for {@link createSvcbRecordBuilder}. Overridable via the fluent API.
+ */
+export declare const SVCB_RECORD_DEFAULTS: Partial<SvcbRecordBuilderProps>;
+/**
+ * Defaults for {@link createHealthCheckBuilder}. Overridable via the fluent API.
+ *
+ * `failureThreshold` and `requestInterval` match CDK's defaults but are set
+ * explicitly so the values are surfaced in the package's defaults table and
+ * can be reasoned about without consulting CDK source. `measureLatency` is
+ * defaulted ON to align with the AWS Well-Architected operational-excellence
+ * pillar (per-region latency visibility on the Route 53 Health Checks
+ * console). It carries a small additional cost — disable explicitly via
+ * `.measureLatency(false)` if cost is a concern.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-determining-health-of-endpoints.html
+ */
+export declare const HEALTH_CHECK_DEFAULTS: Partial<HealthCheckBuilderProps>;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/esm/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC,iBAAiB,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,0CAA0C,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,kCAAkC,qCAAqC,CAAC;AAErF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,CAahE,CAAC;AAaF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAE1D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,CAEhE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,uBAAuB,CAElE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,qBAAqB,CAE9D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAE5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,qBAAqB,CAE9D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,qBAAqB,CAE9D,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAE5D,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAE5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,uBAAuB,CAElE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,CAEhE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,uBAAuB,CAIlE,CAAC"}

package/dist/{defaults.js → esm/defaults.js}

@@ -1,13 +1,39 @@
 import { Duration } from "aws-cdk-lib";
+/**
+ * Naming prefix applied to every auto-created Route 53 query-log group. A
+ * single shared resource policy targets `<prefix>/*` so multiple hosted zones
+ * in the same stack share one `AWS::Logs::ResourcePolicy` (the per-region
+ * soft limit is 10). Matches the prefix the Route 53 console uses.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/APIReference/API_CreateQueryLoggingConfig.html
+ */
+export const QUERY_LOGGING_LOG_GROUP_NAME_PREFIX = "/aws/route53";
+/**
+ * Construct id of the shared `AWS::Logs::ResourcePolicy` materialised once
+ * per stack when any hosted zone in that stack uses auto-managed query
+ * logging. Package-internal — used by the dedup helper and the unit tests, and
+ * intentionally not re-exported from the package barrel; consumers should not
+ * reference the policy directly.
+ */
+export const QUERY_LOGGING_RESOURCE_POLICY_ID = "ComposureCDKRoute53QueryLoggingPolicy";
+/**
+ * Stable resource-policy name written into CloudWatch Logs so the policy is
+ * deduplicated when the same stack is re-synthesised across deployments.
+ */
+export const QUERY_LOGGING_RESOURCE_POLICY_NAME = "ComposureCDK-Route53QueryLogging";
 /**
  * Secure, AWS-recommended defaults applied to every public hosted zone built
  * with {@link createHostedZoneBuilder}. Each property can be individually
  * overridden via the builder's fluent API.
  *
- * Query logging is not enabled by default: Route53 query logs must be written
- * to a CloudWatch log group in `us-east-1` with a resource policy granting
- * `route53.amazonaws.com` write access. Opt in explicitly by calling
- * `.queryLogsLogGroupArn(...)` with a pre-configured log group.
+ * Query logging is enabled by default: the builder auto-creates a CloudWatch
+ * {@link import("aws-cdk-lib/aws-logs").LogGroup} under
+ * `${QUERY_LOGGING_LOG_GROUP_NAME_PREFIX}/<zoneName>` and a single shared
+ * `AWS::Logs::ResourcePolicy` granting `route53.amazonaws.com` permission to
+ * write log streams. Disable with `.queryLogging(false)` or supply a managed
+ * log group via `.queryLogging({ logGroupArn })`.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/query-logs.html
  */
 export const HOSTED_ZONE_DEFAULTS = {
     /**
@@ -15,6 +41,13 @@ export const HOSTED_ZONE_DEFAULTS = {
      * fully-qualified domain. Matches the CDK default and RFC 1035.
      */
     addTrailingDot: true,
+    /**
+     * Enable DNS query logging out of the box, with the auto-managed log
+     * group and shared resource policy described above. Set to `false` or to
+     * `{ logGroupArn: '...' }` to deviate.
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/sec_detect_investigate_events_app_service_logging.html
+     */
+    queryLogging: {},
 };
 /**
  * Default TTL applied to records built by this package when no TTL is set.

package/dist/esm/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAevC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,cAAc,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,uCAAuC,CAAC;AAExF;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,kCAAkC,CAAC;AAErF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE;;;OAGG;IACH,cAAc,EAAE,IAAI;IACpB;;;;;OAKG;IACH,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAqC;IACrE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAmC;IACjE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkC;IAC/D,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAmC;IACjE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAmC;IACjE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkC;IAC/D,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;CACxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkC;IAC/D,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAqC;IACrE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE,GAAG,EAAE,kBAAkB;CACxB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAqC;IACrE,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,cAAc,EAAE,IAAI;CACrB,CAAC"}

package/dist/esm/ds-record-builder.d.ts

@@ -0,0 +1,42 @@
+import { DsRecord, type DsRecordProps, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import { type IConstruct } from "constructs";
+import { type IBuilder, type Lifecycle, type Resolvable } from "@composurecdk/core";
+/**
+ * Configuration properties for the Route53 DS record builder.
+ *
+ * Extends the CDK {@link DsRecordProps} but replaces `zone` with a
+ * {@link Resolvable} so it can be wired from composed components.
+ */
+export interface DsRecordBuilderProps extends Omit<DsRecordProps, "zone"> {
+    /** The hosted zone in which to create the record. */
+    zone?: Resolvable<IHostedZone>;
+}
+/**
+ * The build output of an {@link IDsRecordBuilder}.
+ */
+export interface DsRecordBuilderResult {
+    /** The Route53 DS record construct created by the builder. */
+    record: DsRecord;
+}
+/**
+ * A fluent builder for configuring and creating a Route53 DS record.
+ *
+ * DS (Delegation Signer) records establish the DNSSEC chain of trust from a
+ * parent zone to a delegated child zone. Each value is a rdata string of
+ * `keyTag algorithm digestType digest`.
+ *
+ * @see https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-chain-of-trust.html
+ */
+export type IDsRecordBuilder = IBuilder<DsRecordBuilderProps, DsRecordBuilder>;
+declare class DsRecordBuilder implements Lifecycle<DsRecordBuilderResult> {
+    props: Partial<DsRecordBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): DsRecordBuilderResult;
+}
+/**
+ * Creates a new {@link IDsRecordBuilder} for configuring a Route53 DS record.
+ *
+ * @returns A fluent builder for a Route53 DS record.
+ */
+export declare function createDsRecordBuilder(): IDsRecordBuilder;
+export {};
+//# sourceMappingURL=ds-record-builder.d.ts.map

package/dist/esm/ds-record-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ds-record-builder.d.ts","sourceRoot":"","sources":["../../src/ds-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,SAAS,EAEd,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAG5B;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;IACvE,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED;;;;;;;;GAQG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;AAE/E,cAAM,eAAgB,YAAW,SAAS,CAAC,qBAAqB,CAAC;IAC/D,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAM;IAE1C,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,qBAAqB;CAsB9F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,gBAAgB,CAGxD"}

package/dist/esm/ds-record-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ds-record-builder.js","sourceRoot":"","sources":["../../src/ds-record-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAwC,MAAM,yBAAyB,CAAC;AAEzF,OAAO,EACL,OAAO,EAGP,OAAO,GAER,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAiCnD,MAAM,eAAe;IACnB,KAAK,GAAkC,EAAE,CAAC;IAE1C,KAAK,CAAC,KAAiB,EAAE,EAAU,EAAE,OAAgC;QACnE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,oBAAoB,EAAE,+BAA+B;gBACnD,wFAAwF,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,kBAAkB;YACrB,GAAG,IAAI;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACZ,CAAC;QAEnB,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,+GAA+G;IAC/G,OAAO,OAAO,CAAwC,eAAe,CAAC,CAAC;AACzE,CAAC"}

package/dist/esm/health-check-alarm-builder.d.ts

@@ -0,0 +1,133 @@
+import { type IHealthCheck } from "aws-cdk-lib/aws-route53";
+import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import { type IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { HealthCheckAlarmConfig } from "./health-check-alarm-config.js";
+import type { HealthCheckBuilderResult } from "./health-check-builder.js";
+/**
+ * Configuration properties for {@link createHealthCheckAlarmBuilder}.
+ *
+ * The standalone alarm builder mirrors the alarm surface that
+ * {@link createHealthCheckBuilder} creates by default. It exists so that
+ * alarms can be created in a different stack from the health check itself —
+ * specifically a `us-east-1` stack, since Route 53 emits all health check
+ * metrics there regardless of the health check's stack region.
+ *
+ * @see ADR-0004 — Split-alarm builder pattern for fixed-region metrics
+ */
+export interface HealthCheckAlarmBuilderProps {
+    /**
+     * Configuration for AWS-recommended CloudWatch alarms.
+     *
+     * Mirrors {@link HealthCheckBuilderProps.recommendedAlarms}. Set to
+     * `false` to disable all recommended alarms. Custom alarms added via
+     * {@link IHealthCheckAlarmBuilder.addAlarm} are unaffected.
+     *
+     * No alarm actions are configured by default. Use `alarmActionsPolicy`
+     * (or an `afterBuild` hook) to wire SNS or other actions onto the
+     * resulting alarms.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#Route53
+     */
+    recommendedAlarms?: HealthCheckAlarmConfig | false;
+}
+/**
+ * The build output of an {@link IHealthCheckAlarmBuilder}.
+ */
+export interface HealthCheckAlarmBuilderResult {
+    /**
+     * The CloudWatch alarms created by this builder, keyed by alarm name.
+     * Uses the same key scheme as {@link HealthCheckBuilderResult.alarms}.
+     */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for Route 53 health-check CloudWatch alarms, decoupled
+ * from the health check itself. Use this when the health check lives in a
+ * stack outside `us-east-1` — route this component into a `us-east-1` stack
+ * via `compose().withStacks()` so the alarms land where Route 53 actually
+ * emits metrics.
+ *
+ * @see {@link createHealthCheckAlarmBuilder}
+ */
+export type IHealthCheckAlarmBuilder = ITaggedBuilder<HealthCheckAlarmBuilderProps, HealthCheckAlarmBuilder>;
+/**
+ * Shared alarm-assembly used by both {@link createHealthCheckBuilder} (in its
+ * own stack) and {@link createHealthCheckAlarmBuilder} (typically in a
+ * separate `us-east-1` stack). Materialises the recommended health-check
+ * alarm and any user-supplied custom alarms, emits the region warning if the
+ * resulting scope is not in `us-east-1`, and creates the alarm constructs.
+ *
+ * @internal
+ */
+export declare function buildHealthCheckAlarms(scope: IConstruct, id: string, target: Pick<HealthCheckBuilderResult, "healthCheck">, options?: {
+    recommendedAlarms?: HealthCheckAlarmConfig | false;
+    customAlarms?: AlarmDefinitionBuilder<IHealthCheck>[];
+}): Record<string, Alarm>;
+declare class HealthCheckAlarmBuilder implements Lifecycle<HealthCheckAlarmBuilderResult> {
+    #private;
+    props: Partial<HealthCheckAlarmBuilderProps>;
+    /**
+     * Sets the health check to alarm on. Pass the result of
+     * {@link createHealthCheckBuilder} (or a {@link Ref} to it). The builder
+     * reads the health check from the result.
+     *
+     * Pair with `compose().withStacks()` to route this component into a
+     * `us-east-1` stack while the health check itself lives elsewhere — set
+     * `crossRegionReferences: true` on both stacks so CDK can wire the
+     * `HealthCheckId` reference automatically.
+     */
+    healthCheck(healthCheck: Resolvable<HealthCheckBuilderResult>): this;
+    /**
+     * Adds a custom alarm against the health check. The configure callback
+     * receives a fresh {@link AlarmDefinitionBuilder} pre-set with the alarm's
+     * key; configure metric, threshold, comparison and any other options.
+     *
+     * The created alarm is materialised in this builder's stack — useful for
+     * cross-region setups where you want all health-check alarms to live with
+     * the recommended ones.
+     */
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<IHealthCheck>) => AlarmDefinitionBuilder<IHealthCheck>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: HealthCheckAlarmBuilder): void;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): HealthCheckAlarmBuilderResult;
+}
+/**
+ * Creates a new {@link IHealthCheckAlarmBuilder} for materialising Route 53
+ * health-check alarms in a stack separate from the health check itself.
+ *
+ * The recommended use is multi-region deployments: the health check lives in
+ * the application's stack (in any region — Route 53 health checks are
+ * global), and the alarms must live in a `us-east-1` stack so they can read
+ * the metrics Route 53 emits there.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     api: createHealthCheckBuilder()
+ *       .type(HealthCheckType.HTTPS)
+ *       .fqdn("api.example.com")
+ *       .recommendedAlarms(false),                  // suppress alarms in the api's own stack
+ *
+ *     apiAlarms: createHealthCheckAlarmBuilder()
+ *       .healthCheck(ref<HealthCheckBuilderResult>("api"))
+ *       .recommendedAlarms({ healthCheckStatus: { evaluationPeriods: 2 } }),
+ *   },
+ *   { api: [], apiAlarms: ["api"] },
+ * )
+ *   .withStacks({
+ *     api:       appStack,         // any region — health checks are global
+ *     apiAlarms: monitoringStack,  // us-east-1 — where AWS/Route53 metrics live
+ *   })
+ *   .build(app, "App");
+ * ```
+ *
+ * Set `crossRegionReferences: true` on both stacks so CDK can export the
+ * `HealthCheckId` from the app stack and import it in the alarm stack.
+ */
+export declare function createHealthCheckAlarmBuilder(): IHealthCheckAlarmBuilder;
+export {};
+//# sourceMappingURL=health-check-alarm-builder.d.ts.map

package/dist/esm/health-check-alarm-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-builder.d.ts","sourceRoot":"","sources":["../../src/health-check-alarm-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAgB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,cAAc,CACnD,4BAA4B,EAC5B,uBAAuB,CACxB,CAAC;AAsBF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,EACrD,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;IACnD,YAAY,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;CAClD,GACL,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAevB;AAED,cAAM,uBAAwB,YAAW,SAAS,CAAC,6BAA6B,CAAC;;IAC/E,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAM;IAIlD;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,wBAAwB,CAAC,GAAG,IAAI;IAKpE;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAKnD,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,6BAA6B;CAejC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,6BAA6B,IAAI,wBAAwB,CAIxE"}

package/dist/esm/health-check-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-check-alarm-builder.js","sourceRoot":"","sources":["../../src/health-check-alarm-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,UAAU,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAwD9E;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO;IACnC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,oCAAoC,EACpC,iFAAiF;QAC/E,gBAAgB,MAAM,8DAA8D;QACpF,yEAAyE;QACzE,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAiB,EACjB,EAAU,EACV,MAAqD,EACrD,UAGI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC9C,MAAM,eAAe,GACnB,WAAW,KAAK,KAAK,IAAI,WAAW,EAAE,OAAO,KAAK,KAAK;QACrD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,kCAAkC,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1E,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;IAE9D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,uBAAuB;IAC3B,KAAK,GAA0C,EAAE,CAAC;IAClD,YAAY,CAAwC;IAC3C,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAA+B;QAC1C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,4BAA4B,EAAE,6BAA6B;gBACzD,sEAAsE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE;gBAChD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAC/C,YAAY,EAAE,IAAI,CAAC,aAAa;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,aAAa,CAClB,uBAAuB,CACxB,CAAC;AACJ,CAAC"}