@flipboxlabs/aws-audit-sdk 1.1.0

package/dist/config.d.ts

@@ -0,0 +1,65 @@
+import { z } from "zod";
+/**
+ * Input configuration for defining audit apps and resource types.
+ */
+export interface AuditConfigInput {
+    readonly apps: readonly string[];
+    readonly resourceTypes: readonly string[];
+    readonly service?: string;
+}
+/**
+ * Creates an audit configuration object with typed schemas.
+ *
+ * The returned config object contains:
+ * - `service`: The service version (defaults to "v1")
+ * - `schemas.app`: Zod schema for validating app values
+ * - `schemas.resourceType`: Zod schema for validating resource type values
+ * - `schemas.resourceReference`: Zod schema for validating resource references
+ * - `_types`: Type helpers for extracting App and ResourceType union types
+ *
+ * @example
+ * ```typescript
+ * const config = defineAuditConfig({
+ *   apps: ['Orders', 'Inventory'] as const,
+ *   resourceTypes: ['Order', 'Product'] as const,
+ * });
+ *
+ * // Extract types for use in application code
+ * type App = typeof config._types.App; // 'Orders' | 'Inventory'
+ * type ResourceType = typeof config._types.ResourceType; // 'Order' | 'Product'
+ *
+ * // Use schemas for validation
+ * config.schemas.app.parse('Orders'); // ✅
+ * config.schemas.app.parse('Invalid'); // ❌ throws
+ * ```
+ */
+export declare function defineAuditConfig<const C extends AuditConfigInput>(input: C): {
+    service: string | undefined;
+} & C & {
+    schemas: {
+        app: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+        resourceType: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+        resourceReference: z.ZodObject<{
+            app: z.ZodEnum<{
+                [x: string]: string;
+            }>;
+            type: z.ZodEnum<{
+                [x: string]: string;
+            }>;
+            id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        }, z.core.$strip>;
+    };
+    _types: {
+        App: C["apps"][number];
+        ResourceType: C["resourceTypes"][number];
+    };
+};
+/**
+ * Type representing the return value of defineAuditConfig.
+ */
+export type AuditConfig = ReturnType<typeof defineAuditConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;YAkB5D;QACb,GAAG,oBAAM;QACT,YAAY,6BAAe;KAC3B;EAEF;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/config.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+/**
+ * Creates an audit configuration object with typed schemas.
+ *
+ * The returned config object contains:
+ * - `service`: The service version (defaults to "v1")
+ * - `schemas.app`: Zod schema for validating app values
+ * - `schemas.resourceType`: Zod schema for validating resource type values
+ * - `schemas.resourceReference`: Zod schema for validating resource references
+ * - `_types`: Type helpers for extracting App and ResourceType union types
+ *
+ * @example
+ * ```typescript
+ * const config = defineAuditConfig({
+ *   apps: ['Orders', 'Inventory'] as const,
+ *   resourceTypes: ['Order', 'Product'] as const,
+ * });
+ *
+ * // Extract types for use in application code
+ * type App = typeof config._types.App; // 'Orders' | 'Inventory'
+ * type ResourceType = typeof config._types.ResourceType; // 'Order' | 'Product'
+ *
+ * // Use schemas for validation
+ * config.schemas.app.parse('Orders'); // ✅
+ * config.schemas.app.parse('Invalid'); // ❌ throws
+ * ```
+ */
+export function defineAuditConfig(input) {
+    const schemas = {
+        app: z.enum(input.apps),
+        resourceType: z.enum(input.resourceTypes),
+        resourceReference: z.object({
+            app: z.enum(input.apps),
+            type: z.enum(input.resourceTypes),
+            id: z.union([z.string(), z.number()]).optional(),
+        }),
+    };
+    return {
+        service: process.env.SERVICE,
+        ...input,
+        schemas,
+        _types: {},
+    };
+}

package/dist/constants.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Identifier key used in CloudWatch structured logs to mark audit entries.
+ *
+ * When this key is present in a log object, it signals to log processors
+ * that the entry is an audit record that should be captured and stored.
+ *
+ * @example
+ * ```typescript
+ * const logEntry = {
+ *   [AUDIT_LOG_IDENTIFIER]: true,
+ *   operation: 'createUser',
+ *   // ...audit data
+ * };
+ * ```
+ */
+export declare const AUDIT_LOG_IDENTIFIER = "_audit";
+/**
+ * SDK version string for debugging and compatibility checks.
+ */
+export declare const SDK_VERSION = "1.0.0";
+/**
+ * Configuration for generating resource names.
+ */
+type NameConfig = {
+    /** Environment name (e.g., 'dev', 'staging', 'prod') */
+    env: string;
+    /** Service name used in naming resources */
+    service?: string;
+};
+/**
+ * Configuration for generating AWS resource ARNs.
+ * Extends NameConfig with AWS-specific identifiers.
+ */
+type ARNConfig = NameConfig & {
+    /** AWS account and region information */
+    aws: {
+        /** AWS region (e.g., 'us-east-1') */
+        region: string;
+        /** AWS account ID */
+        account: string;
+    };
+};
+/**
+ * DynamoDB configuration constants for the audit table.
+ *
+ * Provides table naming, key definitions, index names, and attribute constants
+ * used throughout the audit SDK for DynamoDB operations.
+ *
+ * @example
+ * ```typescript
+ * // Get table name for production
+ * const tableName = DynamoDB.Table.Name({ env: 'prod' });
+ * // Returns: "PROD-v1-Audit"
+ *
+ * // Access key names
+ * const pk = DynamoDB.Keys.PARTITION_KEY; // "PK"
+ * const sk = DynamoDB.Keys.SORT_KEY; // "SK"
+ * ```
+ */
+export declare const DynamoDB: {
+    /** Table name and ARN generators */
+    readonly Table: {
+        /** Generates the DynamoDB table name based on environment */
+        readonly Name: (config?: NameConfig) => string;
+        /** Generates the full DynamoDB table ARN */
+        readonly ARN: (config?: ARNConfig) => string;
+    };
+    /** DynamoDB key attribute names */
+    readonly Keys: {
+        /** Primary partition key */
+        readonly PARTITION_KEY: "PK";
+        /** Primary sort key */
+        readonly SORT_KEY: "SK";
+        /** GSI1 (String-String) partition key */
+        readonly GSI1_SS_PARTITION_KEY: "GSI1_SS_PK";
+        /** GSI1 (String-String) sort key */
+        readonly GSI1_SS_SORT_KEY: "GSI1_SS_SK";
+        /** GSI1 (String-Number) partition key */
+        readonly GSI1_SN_PARTITION_KEY: "GSI1_SN_PK";
+        /** GSI1 (String-Number) sort key */
+        readonly GSI1_SN_SORT_KEY: "GSI1_SN_SK";
+        /** LSI1 (String) sort key */
+        readonly LSI1_S_SORT_KEY: "LSI1_S_SK";
+        /** LSI1 (Numeric) sort key */
+        readonly LSI1_N_SORT_KEY: "LSI1_N_SK";
+    };
+    /** Secondary index names */
+    readonly Indexes: {
+        /** Global Secondary Index 1 - String partition, String sort */
+        readonly GSI1_SS: "GSI1_SS";
+        /** Global Secondary Index 1 - String partition, Numeric sort */
+        readonly GSI1_SN: "GSI1_SN";
+        /** Local Secondary Index 1 - String sort key */
+        readonly LSI1_S: "LSI1_S";
+        /** Local Secondary Index 1 - Numeric sort key */
+        readonly LSI1_N: "LSI1_N";
+    };
+    /** Special attribute names */
+    readonly Attributes: {
+        /** Time-to-live attribute for automatic item expiration */
+        readonly TTL: "ttl";
+    };
+};
+/**
+ * EventBridge configuration constants for the audit event bus.
+ *
+ * Provides bus naming, event source identifiers, and detail type constants
+ * used for publishing audit events to EventBridge.
+ *
+ * @example
+ * ```typescript
+ * // Get event bus name
+ * const busName = EventBridge.Bus.Name({ env: 'prod' });
+ * // Returns: "PROD-v1-Audit"
+ *
+ * // Use event types
+ * const event = {
+ *   Source: EventBridge.Source,
+ *   DetailType: EventBridge.DetailType.UPSERTED,
+ *   Detail: JSON.stringify(auditData),
+ * };
+ * ```
+ */
+export declare const EventBridge: {
+    /** Event bus name and ARN generators */
+    readonly Bus: {
+        /** Generates the EventBridge bus name based on environment */
+        readonly Name: (config?: NameConfig) => string;
+        /** Generates the full EventBridge bus ARN */
+        readonly ARN: (config?: ARNConfig) => string;
+    };
+    /** Source identifier for audit events */
+    readonly Source: "Audit";
+    /** Event detail types for different audit operations */
+    readonly DetailType: {
+        /** Emitted when an audit record is created or updated */
+        readonly UPSERTED: "Upserted";
+        /** Emitted when an audit record is deleted */
+        readonly DELETED: "Deleted";
+    };
+};
+/**
+ * Union type of all valid EventBridge detail types.
+ */
+export type AnyEventBridgeDetailType = (typeof EventBridge.DetailType)[keyof typeof EventBridge.DetailType];
+export {};
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC;;GAEG;AACH,KAAK,UAAU,GAAG;IACjB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IAEZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,KAAK,SAAS,GAAG,UAAU,GAAG;IAC7B,yCAAyC;IACzC,GAAG,EAAE;QACJ,qCAAqC;QACrC,MAAM,EAAE,MAAM,CAAC;QACf,qBAAqB;QACrB,OAAO,EAAE,MAAM,CAAC;KAChB,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,QAAQ;IACpB,oCAAoC;;QAEnC,6DAA6D;iCAC7C,UAAU;QAC1B,4CAA4C;gCAC7B,SAAS;;IAEzB,mCAAmC;;QAElC,4BAA4B;;QAE5B,uBAAuB;;QAGvB,yCAAyC;;QAEzC,oCAAoC;;QAGpC,yCAAyC;;QAEzC,oCAAoC;;QAGpC,6BAA6B;;QAE7B,8BAA8B;;;IAG/B,4BAA4B;;QAE3B,+DAA+D;;QAE/D,gEAAgE;;QAGhE,gDAAgD;;QAEhD,iDAAiD;;;IAGlD,8BAA8B;;QAE7B,2DAA2D;;;CAGnD,CAAC;AA4CX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,WAAW;IACvB,wCAAwC;;QAEvC,8DAA8D;iCAC9C,UAAU;QAC1B,6CAA6C;gCAC9B,SAAS;;IAEzB,yCAAyC;;IAEzC,wDAAwD;;QAEvD,yDAAyD;;QAEzD,8CAA8C;;;CAGtC,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,wBAAwB,GACnC,CAAC,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC"}

package/dist/constants.js

@@ -0,0 +1,191 @@
+/**
+ * Identifier key used in CloudWatch structured logs to mark audit entries.
+ *
+ * When this key is present in a log object, it signals to log processors
+ * that the entry is an audit record that should be captured and stored.
+ *
+ * @example
+ * ```typescript
+ * const logEntry = {
+ *   [AUDIT_LOG_IDENTIFIER]: true,
+ *   operation: 'createUser',
+ *   // ...audit data
+ * };
+ * ```
+ */
+export const AUDIT_LOG_IDENTIFIER = "_audit";
+/**
+ * SDK version string for debugging and compatibility checks.
+ */
+export const SDK_VERSION = "1.0.0";
+/**
+ * DynamoDB configuration constants for the audit table.
+ *
+ * Provides table naming, key definitions, index names, and attribute constants
+ * used throughout the audit SDK for DynamoDB operations.
+ *
+ * @example
+ * ```typescript
+ * // Get table name for production
+ * const tableName = DynamoDB.Table.Name({ env: 'prod' });
+ * // Returns: "PROD-v1-Audit"
+ *
+ * // Access key names
+ * const pk = DynamoDB.Keys.PARTITION_KEY; // "PK"
+ * const sk = DynamoDB.Keys.SORT_KEY; // "SK"
+ * ```
+ */
+export const DynamoDB = {
+    /** Table name and ARN generators */
+    Table: {
+        /** Generates the DynamoDB table name based on environment */
+        Name: (config) => buildDynamoDBName(config),
+        /** Generates the full DynamoDB table ARN */
+        ARN: (config) => buildDynamoDBArn(config),
+    },
+    /** DynamoDB key attribute names */
+    Keys: {
+        /** Primary partition key */
+        PARTITION_KEY: "PK",
+        /** Primary sort key */
+        SORT_KEY: "SK",
+        /** GSI1 (String-String) partition key */
+        GSI1_SS_PARTITION_KEY: "GSI1_SS_PK",
+        /** GSI1 (String-String) sort key */
+        GSI1_SS_SORT_KEY: "GSI1_SS_SK",
+        /** GSI1 (String-Number) partition key */
+        GSI1_SN_PARTITION_KEY: "GSI1_SN_PK",
+        /** GSI1 (String-Number) sort key */
+        GSI1_SN_SORT_KEY: "GSI1_SN_SK",
+        /** LSI1 (String) sort key */
+        LSI1_S_SORT_KEY: "LSI1_S_SK",
+        /** LSI1 (Numeric) sort key */
+        LSI1_N_SORT_KEY: "LSI1_N_SK",
+    },
+    /** Secondary index names */
+    Indexes: {
+        /** Global Secondary Index 1 - String partition, String sort */
+        GSI1_SS: "GSI1_SS",
+        /** Global Secondary Index 1 - String partition, Numeric sort */
+        GSI1_SN: "GSI1_SN",
+        /** Local Secondary Index 1 - String sort key */
+        LSI1_S: "LSI1_S",
+        /** Local Secondary Index 1 - Numeric sort key */
+        LSI1_N: "LSI1_N",
+    },
+    /** Special attribute names */
+    Attributes: {
+        /** Time-to-live attribute for automatic item expiration */
+        TTL: "ttl",
+    },
+};
+/**
+ * Builds a DynamoDB table name from service name and configuration.
+ *
+ * Format: `{ENV}-{service}-Audit` (e.g., "PROD-v1-Audit")
+ *
+ * @param name - Service name to include in table name
+ * @param config - Environment configuration (defaults to process.env.ENVIRONMENT)
+ * @returns Formatted table name string
+ * @internal
+ */
+function buildDynamoDBName(config = {
+    env: String(process.env.ENVIRONMENT),
+    service: process.env.SERVICE,
+}) {
+    return [`${config.env.toUpperCase()}`, config.service, "Audit"]
+        .filter(Boolean)
+        .join("-");
+}
+/**
+ * Builds a DynamoDB table ARN from service name and AWS configuration.
+ *
+ * @param name - Service name to include in table name
+ * @param config - AWS and environment configuration
+ * @returns Full DynamoDB table ARN
+ * @internal
+ */
+function buildDynamoDBArn(config = {
+    aws: {
+        region: String(process.env.AWS_REGION),
+        account: String(process.env.AWS_ACCOUNT),
+    },
+    env: String(process.env.ENVIRONMENT),
+    service: process.env.SERVICE,
+}) {
+    return `arn:aws:dynamodb:${config.aws.region}:${config.aws.account}:table/${buildDynamoDBName({ env: config.env, service: config.service })}`;
+}
+/**
+ * EventBridge configuration constants for the audit event bus.
+ *
+ * Provides bus naming, event source identifiers, and detail type constants
+ * used for publishing audit events to EventBridge.
+ *
+ * @example
+ * ```typescript
+ * // Get event bus name
+ * const busName = EventBridge.Bus.Name({ env: 'prod' });
+ * // Returns: "PROD-v1-Audit"
+ *
+ * // Use event types
+ * const event = {
+ *   Source: EventBridge.Source,
+ *   DetailType: EventBridge.DetailType.UPSERTED,
+ *   Detail: JSON.stringify(auditData),
+ * };
+ * ```
+ */
+export const EventBridge = {
+    /** Event bus name and ARN generators */
+    Bus: {
+        /** Generates the EventBridge bus name based on environment */
+        Name: (config) => buildEventBridgeName(config),
+        /** Generates the full EventBridge bus ARN */
+        ARN: (config) => buildEventBridgeArn(config),
+    },
+    /** Source identifier for audit events */
+    Source: "Audit",
+    /** Event detail types for different audit operations */
+    DetailType: {
+        /** Emitted when an audit record is created or updated */
+        UPSERTED: "Upserted",
+        /** Emitted when an audit record is deleted */
+        DELETED: "Deleted",
+    },
+};
+/**
+ * Builds an EventBridge bus name from service name and configuration.
+ *
+ * Format: `{ENV}-{service}-Audit` (e.g., "PROD-v1-Audit")
+ *
+ * @param name - Service name to include in bus name
+ * @param config - Environment configuration (defaults to process.env.ENVIRONMENT)
+ * @returns Formatted bus name string
+ * @internal
+ */
+function buildEventBridgeName(config = {
+    env: String(process.env.ENVIRONMENT),
+    service: process.env.SERVICE,
+}) {
+    return [`${config.env.toUpperCase()}`, config.service, "Audit"]
+        .filter(Boolean)
+        .join("-");
+}
+/**
+ * Builds an EventBridge bus ARN from service name and AWS configuration.
+ *
+ * @param name - Service name to include in bus name
+ * @param config - AWS and environment configuration
+ * @returns Full EventBridge bus ARN
+ * @internal
+ */
+function buildEventBridgeArn(config = {
+    aws: {
+        region: process.env.AWS_REGION ?? "us-east-1",
+        account: String(process.env.AWS_ACCOUNT),
+    },
+    env: String(process.env.ENVIRONMENT),
+    service: process.env.SERVICE,
+}) {
+    return `arn:aws:events:${config.aws.region}:${config.aws.account}:event-bus/${buildEventBridgeName({ env: config.env, service: config.service })}`;
+}

package/dist/events/batch-handler.d.ts

@@ -0,0 +1,62 @@
+import type { Logger } from "@aws-lambda-powertools/logger";
+import { type EventBridgeClient, type PutEventsRequestEntry, type PutEventsResultEntry } from "@aws-sdk/client-eventbridge";
+/**
+ * Handles batched EventBridge event publishing with automatic chunking.
+ *
+ * Provides a wrapper around the EventBridge PutEvents API that automatically
+ * splits large event arrays into compliant batch sizes and handles errors gracefully.
+ *
+ * @example
+ * ```typescript
+ * const handler = new BatchHandler(logger, eventBridgeClient);
+ *
+ * const results = await handler.putEvents([
+ *   { DetailType: 'OrderCreated', Detail: '{"orderId":"123"}', Source: 'orders' },
+ *   { DetailType: 'OrderCreated', Detail: '{"orderId":"456"}', Source: 'orders' },
+ * ]);
+ * ```
+ */
+export declare class BatchHandler {
+    private readonly logger;
+    private readonly client;
+    /**
+     * Creates a new BatchHandler instance.
+     *
+     * @param logger - Logger instance for debug and error logging
+     * @param client - EventBridge client for API calls
+     */
+    constructor(logger: Logger, client: EventBridgeClient);
+    /**
+     * Publishes events to EventBridge with automatic batching and error handling.
+     *
+     * Events are automatically chunked into batches of the specified size
+     * (default 10, the EventBridge maximum). On success, logs the results
+     * at debug level. On failure, logs at critical level and returns an empty array.
+     *
+     * @param entries - Array of EventBridge event entries to publish
+     * @param chunk - Batch size for chunking (default: 10)
+     * @returns Array of result entries from EventBridge, or empty array on error
+     *
+     * @example
+     * ```typescript
+     * const results = await handler.putEvents(events);
+     * console.log(`Published ${results.length} events`);
+     * ```
+     */
+    putEvents(entries: PutEventsRequestEntry[], chunk?: number): Promise<PutEventsResultEntry[]>;
+    /**
+     * Sends events to EventBridge in batches.
+     *
+     * Iterates through the entries array in chunks, sending each batch
+     * via the PutEvents API and collecting the results.
+     *
+     * @param client - EventBridge client for API calls
+     * @param entries - Array of event entries to send
+     * @param chunk - Number of entries per batch
+     * @returns Combined array of result entries from all batches
+     *
+     * @internal
+     */
+    private sendEventsViaBatch;
+}
+//# sourceMappingURL=batch-handler.d.ts.map

package/dist/events/batch-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-handler.d.ts","sourceRoot":"","sources":["../../src/events/batch-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EACN,KAAK,iBAAiB,EAEtB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAY;IAQvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARxB;;;;;OAKG;gBAEe,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,iBAAiB;IAG3C;;;;;;;;;;;;;;;;OAgBG;IACU,SAAS,CACrB,OAAO,EAAE,qBAAqB,EAAE,EAChC,KAAK,GAAE,MAAmB,GACxB,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAgBlC;;;;;;;;;;;;OAYG;YACW,kBAAkB;CAsBhC"}

package/dist/events/batch-handler.js

@@ -0,0 +1,92 @@
+import { PutEventsCommand, } from "@aws-sdk/client-eventbridge";
+/**
+ * Default batch size for EventBridge PutEvents API calls.
+ * EventBridge allows a maximum of 10 entries per PutEvents call.
+ */
+const CHUNK_SIZE = 10;
+/**
+ * Handles batched EventBridge event publishing with automatic chunking.
+ *
+ * Provides a wrapper around the EventBridge PutEvents API that automatically
+ * splits large event arrays into compliant batch sizes and handles errors gracefully.
+ *
+ * @example
+ * ```typescript
+ * const handler = new BatchHandler(logger, eventBridgeClient);
+ *
+ * const results = await handler.putEvents([
+ *   { DetailType: 'OrderCreated', Detail: '{"orderId":"123"}', Source: 'orders' },
+ *   { DetailType: 'OrderCreated', Detail: '{"orderId":"456"}', Source: 'orders' },
+ * ]);
+ * ```
+ */
+export class BatchHandler {
+    logger;
+    client;
+    /**
+     * Creates a new BatchHandler instance.
+     *
+     * @param logger - Logger instance for debug and error logging
+     * @param client - EventBridge client for API calls
+     */
+    constructor(logger, client) {
+        this.logger = logger;
+        this.client = client;
+    }
+    /**
+     * Publishes events to EventBridge with automatic batching and error handling.
+     *
+     * Events are automatically chunked into batches of the specified size
+     * (default 10, the EventBridge maximum). On success, logs the results
+     * at debug level. On failure, logs at critical level and returns an empty array.
+     *
+     * @param entries - Array of EventBridge event entries to publish
+     * @param chunk - Batch size for chunking (default: 10)
+     * @returns Array of result entries from EventBridge, or empty array on error
+     *
+     * @example
+     * ```typescript
+     * const results = await handler.putEvents(events);
+     * console.log(`Published ${results.length} events`);
+     * ```
+     */
+    async putEvents(entries, chunk = CHUNK_SIZE) {
+        try {
+            const result = await this.sendEventsViaBatch(this.client, entries, chunk);
+            this.logger.debug("Pushed event bridge events", {
+                events: result,
+            });
+            return result;
+        }
+        catch (error) {
+            this.logger.critical("Error pushing event bridge events", error);
+        }
+        return [];
+    }
+    /**
+     * Sends events to EventBridge in batches.
+     *
+     * Iterates through the entries array in chunks, sending each batch
+     * via the PutEvents API and collecting the results.
+     *
+     * @param client - EventBridge client for API calls
+     * @param entries - Array of event entries to send
+     * @param chunk - Number of entries per batch
+     * @returns Combined array of result entries from all batches
+     *
+     * @internal
+     */
+    async sendEventsViaBatch(client, entries, chunk = CHUNK_SIZE) {
+        const result = [];
+        // Chunk into batches
+        for (let i = 0, j = entries.length; i < j; i += chunk) {
+            const output = await client.send(new PutEventsCommand({
+                Entries: entries.slice(i, i + chunk),
+            }));
+            if (output.Entries) {
+                result.concat(output.Entries);
+            }
+        }
+        return result;
+    }
+}