spoonfeeder 0.1.0

package/templates/recipes/ci-cd/azure-devops/README.md

@@ -0,0 +1,32 @@
+# Azure DevOps Pipelines
+
+Stage-based CI/CD pipeline for Azure DevOps.
+
+## Documentation
+
+- [Azure Pipelines](https://learn.microsoft.com/en-us/azure/devops/pipelines/)
+- [YAML schema reference](https://learn.microsoft.com/en-us/azure/devops/pipelines/yaml-schema/)
+
+## Generated Files
+
+| File                  | Description                 |
+| --------------------- | --------------------------- |
+| `azure-pipelines.yml` | Multi-stage pipeline config |
+
+## Pipeline Stages
+
+### CI Stage
+
+Runs on every push and pull request to `main`:
+
+1. **Install** -- set up Node.js and pnpm, install frozen lockfile
+2. **Lint** -- run ESLint
+3. **Type check** -- `tsc --noEmit`
+4. **Unit tests** -- `pnpm test:unit`
+5. **Integration tests** -- `pnpm test:integration` with a Postgres service container
+6. **Build** -- compile to `dist/`
+7. **Security audit** -- `pnpm audit --audit-level=high`
+
+### Deploy Stage
+
+Runs after a successful CI stage on the `main` branch only. Uses an Azure DevOps deployment environment named `production` with a `runOnce` strategy. Add your deployment steps to the placeholder.

package/templates/recipes/ci-cd/azure-devops/azure-pipelines.yml

@@ -0,0 +1,79 @@
+trigger:
+  branches:
+    include:
+      - main
+
+pr:
+  branches:
+    include:
+      - main
+
+pool:
+  vmImage: 'ubuntu-latest'
+
+variables:
+  PNPM_VERSION: '10'
+  NODE_VERSION: '22'
+
+stages:
+  - stage: CI
+    displayName: 'CI'
+    jobs:
+      - job: Build
+        displayName: 'Build & Test'
+        services:
+          postgres:
+            image: postgres:16-alpine
+            ports:
+              - 5432:5432
+            env:
+              POSTGRES_USER: test
+              POSTGRES_PASSWORD: test
+              POSTGRES_DB: test_db
+        steps:
+          - task: UseNode@1
+            inputs:
+              version: $(NODE_VERSION)
+            displayName: 'Use Node.js'
+
+          - script: npm install -g pnpm@$(PNPM_VERSION)
+            displayName: 'Install pnpm'
+
+          - script: pnpm install --frozen-lockfile
+            displayName: 'Install dependencies'
+
+          - script: pnpm lint
+            displayName: 'Lint'
+
+          - script: pnpm exec tsc --noEmit
+            displayName: 'Type check'
+
+          - script: pnpm test:unit
+            displayName: 'Unit tests'
+
+          - script: pnpm test:integration
+            displayName: 'Integration tests'
+            env:
+              DATABASE_URL: postgres://test:test@localhost:5432/test_db
+
+          - script: pnpm build
+            displayName: 'Build'
+
+          - script: pnpm audit --audit-level=high
+            displayName: 'Security audit'
+            continueOnError: true
+
+  - stage: Deploy
+    displayName: 'Deploy'
+    dependsOn: CI
+    condition: and(succeeded(), eq(variables['Build.SourceBranch'], 'refs/heads/main'))
+    jobs:
+      - deployment: Production
+        displayName: 'Deploy to Production'
+        environment: 'production'
+        strategy:
+          runOnce:
+            deploy:
+              steps:
+                - script: echo "Add deployment steps here"
+                  displayName: 'Deploy'

package/templates/recipes/ci-cd/gcp-cloudbuild/README.md

@@ -0,0 +1,64 @@
+# GCP Cloud Build
+
+CI/CD pipeline configuration for Google Cloud Build.
+
+## Documentation
+
+- [Cloud Build overview](https://cloud.google.com/build/docs)
+- [Build configuration file schema](https://cloud.google.com/build/docs/build-config-file-schema)
+- [Substitution variables](https://cloud.google.com/build/docs/configuring-builds/substitute-variable-values)
+
+## Generated Files
+
+| File              | Description                        |
+| ----------------- | ---------------------------------- |
+| `cloudbuild.yaml` | Cloud Build pipeline configuration |
+
+## Pipeline Stages
+
+1. **Install** -- install pnpm globally and run `pnpm install --frozen-lockfile`
+2. **Lint** -- run ESLint via `pnpm lint`
+3. **Type check** -- `pnpm exec tsc --noEmit`
+4. **Unit tests** -- `pnpm test:unit`
+5. **Build** -- compile to `dist/`
+6. **Security audit** -- `pnpm audit --audit-level=high` (non-blocking)
+7. **Docker build** -- build the container image
+8. **Docker push** -- push to Artifact Registry
+
+## Substitution Variables
+
+| Variable      | Default        | Description                               |
+| ------------- | -------------- | ----------------------------------------- |
+| `_REGION`     | `europe-west1` | GCP region for Artifact Registry          |
+| `_REPOSITORY` | `app`          | Artifact Registry repository name         |
+| `_IMAGE`      | `api`          | Container image name                      |
+| `PROJECT_ID`  | _(built-in)_   | GCP project ID (provided automatically)   |
+| `SHORT_SHA`   | _(built-in)_   | Short commit SHA (provided automatically) |
+
+## Usage
+
+### Connecting a repository
+
+1. Go to **Cloud Build > Triggers** in the Google Cloud console.
+2. Connect your GitHub or GitLab repository via the **Cloud Build GitHub App** or **GitLab host connection**.
+3. Authorize access to the target repository.
+
+### Creating a trigger
+
+1. Click **Create Trigger**.
+2. Set the event (e.g. push to `main`, pull request).
+3. Under **Configuration**, select **Cloud Build configuration file** and point to `cloudbuild.yaml`.
+4. Override substitution variables if needed (region, repository, image name).
+5. Save and run the trigger manually to verify the pipeline.
+
+### Prerequisites
+
+- Enable the **Cloud Build API** and **Artifact Registry API** in your GCP project.
+- Create an Artifact Registry Docker repository:
+  ```bash
+  gcloud artifacts repositories create app \
+    --repository-format=docker \
+    --location=europe-west1 \
+    --description="Application container images"
+  ```
+- Grant the Cloud Build service account permission to push to Artifact Registry (the `roles/artifactregistry.writer` role).

package/templates/recipes/ci-cd/gcp-cloudbuild/cloudbuild.yaml

@@ -0,0 +1,53 @@
+steps:
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args:
+      - '-c'
+      - |
+        npm install -g pnpm@10
+        pnpm install --frozen-lockfile
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm lint']
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm exec tsc --noEmit']
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm test:unit']
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm test:integration']
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm build']
+
+  - name: 'node:22-alpine'
+    entrypoint: 'sh'
+    args: ['-c', 'pnpm audit --audit-level=high || true']
+
+  # Docker build and push to Artifact Registry
+  - name: 'gcr.io/cloud-builders/docker'
+    args:
+      - 'build'
+      - '-t'
+      - '${_REGION}-docker.pkg.dev/${PROJECT_ID}/${_REPOSITORY}/${_IMAGE}:${SHORT_SHA}'
+      - '.'
+
+  - name: 'gcr.io/cloud-builders/docker'
+    args:
+      - 'push'
+      - '${_REGION}-docker.pkg.dev/${PROJECT_ID}/${_REPOSITORY}/${_IMAGE}:${SHORT_SHA}'
+
+substitutions:
+  _REGION: 'europe-west1'
+  _REPOSITORY: 'app'
+  _IMAGE: 'api'
+
+options:
+  logging: CLOUD_LOGGING_ONLY

package/templates/recipes/ci-cd/github-actions/.github/workflows/cd.yml

@@ -0,0 +1,35 @@
+name: CD
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    needs: []
+    environment: production
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build
+        run: pnpm build
+
+      # Add deployment steps here based on your target:
+      # - Docker build & push to registry
+      # - Deploy to Kubernetes
+      # - Deploy to AWS Lambda
+      # - etc.

package/templates/recipes/ci-cd/github-actions/.github/workflows/ci.yml

@@ -0,0 +1,62 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16-alpine
+        env:
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+          POSTGRES_DB: test_db
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint
+        run: pnpm lint
+
+      - name: Type check
+        run: pnpm exec tsc --noEmit
+
+      - name: Unit tests
+        run: pnpm test:unit
+
+      - name: Integration tests
+        run: pnpm test:integration
+        env:
+          DATABASE_URL: postgres://test:test@localhost:5432/test_db
+
+      - name: Build
+        run: pnpm build
+
+      - name: Security audit
+        run: pnpm audit --audit-level=high
+        continue-on-error: true

package/templates/recipes/ci-cd/github-actions/README.md

@@ -0,0 +1,29 @@
+# GitHub Actions
+
+CI/CD workflow files for GitHub Actions.
+
+## Documentation
+
+- [GitHub Actions](https://docs.github.com/en/actions)
+- [Workflow syntax](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions)
+
+## Generated Files
+
+| File                       | Description                     |
+| -------------------------- | ------------------------------- |
+| `.github/workflows/ci.yml` | Continuous integration workflow |
+| `.github/workflows/cd.yml` | Continuous deployment workflow  |
+
+## CI Pipeline Stages
+
+1. **Install** -- checkout, set up pnpm and Node.js, install frozen lockfile
+2. **Lint** -- run ESLint
+3. **Type check** -- `tsc --noEmit`
+4. **Unit tests** -- `pnpm test:unit`
+5. **Integration tests** -- `pnpm test:integration` with a Postgres service container
+6. **Build** -- compile to `dist/`
+7. **Security audit** -- `pnpm audit --audit-level=high`
+
+## CD Pipeline
+
+Triggers on push to `main`. Installs dependencies, builds the project, then deploys to the configured production environment. Add your deployment steps (Docker push, Kubernetes deploy, Lambda deploy, etc.) to the placeholder in `cd.yml`.

package/templates/recipes/circuit-breaker/README.md

@@ -0,0 +1,45 @@
+# Circuit Breaker
+
+Fault tolerance pattern using Opossum to prevent cascading failures in distributed systems.
+
+## Links
+
+- [Opossum on npm](https://www.npmjs.com/package/opossum)
+- [Opossum on GitHub](https://github.com/nodeshift/opossum)
+- [Circuit Breaker Pattern (Martin Fowler)](https://martinfowler.com/bliki/CircuitBreaker.html)
+
+## Dependencies
+
+| Package   | Version | Purpose                        |
+| --------- | ------- | ------------------------------ |
+| `opossum` | `8.1.4` | Circuit breaker implementation |
+
+## Usage
+
+```typescript
+import { CircuitBreakerWrapper } from '@/shared/utils/circuit-breaker';
+import { ConfigService } from '@nestjs/config';
+
+// With ConfigService — reads CIRCUIT_BREAKER_TIMEOUT, CIRCUIT_BREAKER_THRESHOLD,
+// and CIRCUIT_BREAKER_RESET_TIMEOUT from the environment:
+const breaker = new CircuitBreakerWrapper(
+  () => httpService.get('https://external-api.com/data'),
+  {},
+  configService,
+);
+
+// With explicit overrides (take precedence over env vars):
+const breaker = new CircuitBreakerWrapper(
+  () => httpService.get('https://external-api.com/data'),
+  { timeout: 5000 },
+  configService,
+);
+
+const result = await breaker.fire();
+```
+
+## Generated Files
+
+| File                                  | Description                                  |
+| ------------------------------------- | -------------------------------------------- |
+| `src/shared/utils/circuit-breaker.ts` | Opossum circuit breaker wrapper with logging |

package/templates/recipes/circuit-breaker/src/shared/utils/circuit-breaker.ts

@@ -0,0 +1,100 @@
+import { Logger } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import CircuitBreaker from 'opossum';
+
+export interface CircuitBreakerOptions {
+  /** Time in ms before a request is considered timed out */
+  timeout?: number;
+  /** Percentage of failures before opening the circuit */
+  errorThresholdPercentage?: number;
+  /** Time in ms to wait before attempting to close the circuit */
+  resetTimeout?: number;
+  /** Number of requests to allow in half-open state */
+  rollingCountBuckets?: number;
+  /** Time in ms for the rolling statistical window */
+  rollingCountTimeout?: number;
+}
+
+const HARDCODED_DEFAULTS: CircuitBreakerOptions = {
+  timeout: 3000,
+  errorThresholdPercentage: 50,
+  resetTimeout: 30_000,
+  rollingCountBuckets: 10,
+  rollingCountTimeout: 10_000,
+};
+
+/**
+ * Build default options by reading CIRCUIT_BREAKER_* env vars via ConfigService.
+ * Falls back to hardcoded defaults when the env vars are not set or no ConfigService is provided.
+ */
+function buildDefaults(configService?: ConfigService): CircuitBreakerOptions {
+  if (!configService) {
+    return { ...HARDCODED_DEFAULTS };
+  }
+
+  return {
+    timeout: configService.get<number>('CIRCUIT_BREAKER_TIMEOUT', HARDCODED_DEFAULTS.timeout!),
+    errorThresholdPercentage: configService.get<number>(
+      'CIRCUIT_BREAKER_THRESHOLD',
+      HARDCODED_DEFAULTS.errorThresholdPercentage!,
+    ),
+    resetTimeout: configService.get<number>(
+      'CIRCUIT_BREAKER_RESET_TIMEOUT',
+      HARDCODED_DEFAULTS.resetTimeout!,
+    ),
+    rollingCountBuckets: HARDCODED_DEFAULTS.rollingCountBuckets,
+    rollingCountTimeout: HARDCODED_DEFAULTS.rollingCountTimeout,
+  };
+}
+
+export class CircuitBreakerWrapper<TResult = unknown> {
+  private readonly logger = new Logger(CircuitBreakerWrapper.name);
+  private readonly breaker: CircuitBreaker<unknown[], TResult>;
+
+  constructor(
+    action: (...args: unknown[]) => Promise<TResult>,
+    options: CircuitBreakerOptions = {},
+    configService?: ConfigService,
+  ) {
+    const mergedOptions = { ...buildDefaults(configService), ...options };
+
+    this.breaker = new CircuitBreaker(action, mergedOptions);
+
+    this.breaker.on('open', () => {
+      this.logger.warn('Circuit breaker opened — requests will be short-circuited');
+    });
+
+    this.breaker.on('halfOpen', () => {
+      this.logger.log('Circuit breaker half-open — testing with next request');
+    });
+
+    this.breaker.on('close', () => {
+      this.logger.log('Circuit breaker closed — normal operation resumed');
+    });
+
+    this.breaker.on('fallback', () => {
+      this.logger.debug('Circuit breaker fallback triggered');
+    });
+
+    this.breaker.on('timeout', () => {
+      this.logger.warn('Circuit breaker request timed out');
+    });
+  }
+
+  async fire(...args: unknown[]): Promise<TResult> {
+    return this.breaker.fire(...args);
+  }
+
+  fallback(fn: (...args: unknown[]) => TResult): this {
+    this.breaker.fallback(fn);
+    return this;
+  }
+
+  get isOpen(): boolean {
+    return !this.breaker.closed;
+  }
+
+  get stats(): CircuitBreaker.Stats {
+    return this.breaker.stats;
+  }
+}

package/templates/recipes/circuit-breaker/tests/unit/shared/utils/circuit-breaker.spec.ts

@@ -0,0 +1,28 @@
+import { CircuitBreakerWrapper } from '@/shared/utils/circuit-breaker';
+
+describe('CircuitBreakerWrapper', () => {
+  it('should create an instance wrapping the provided action', () => {
+    const action = jest.fn().mockResolvedValue('ok');
+    const wrapper = new CircuitBreakerWrapper(action);
+
+    expect(wrapper).toBeDefined();
+    expect(wrapper.isOpen).toBe(false);
+  });
+
+  it('should delegate fire() to the underlying breaker and return the result', async () => {
+    const action = jest.fn().mockResolvedValue('result');
+    const wrapper = new CircuitBreakerWrapper(action);
+
+    const result = await wrapper.fire('arg1');
+
+    expect(result).toBe('result');
+    expect(action).toHaveBeenCalledWith('arg1');
+  });
+
+  it('should return itself when registering a fallback', () => {
+    const wrapper = new CircuitBreakerWrapper(jest.fn().mockResolvedValue('ok'));
+    const result = wrapper.fallback(() => 'fallback');
+
+    expect(result).toBe(wrapper);
+  });
+});

package/templates/recipes/cloud-aws/README.md

@@ -0,0 +1,20 @@
+# AWS Cloud Recipes
+
+Amazon Web Services integrations for NestJS applications.
+
+## Recipes
+
+| Recipe                                | Description                                                  |
+| ------------------------------------- | ------------------------------------------------------------ |
+| [CloudFront](./cloudfront/)           | CDN integration with signed URLs                             |
+| [CloudWatch](./cloudwatch/)           | Ship application logs to CloudWatch Logs                     |
+| [Cognito](./cognito/)                 | User pool authentication and authorization                   |
+| [DynamoDB](./dynamodb/)               | NoSQL database integration                                   |
+| [ElastiCache](./elasticache/)         | Managed Redis caching service                                |
+| [EventBridge](./eventbridge/)         | Event-driven architecture with EventBridge                   |
+| [RDS](./rds/)                         | Managed database connection with IAM authentication          |
+| [S3](./s3/)                           | Object storage for file uploads and downloads                |
+| [Secrets Manager](./secrets-manager/) | Retrieve and cache secrets                                   |
+| [SNS](./sns/)                         | Pub/sub messaging with Simple Notification Service           |
+| [SQS](./sqs/)                         | Reliable message queuing with Simple Queue Service           |
+| [SSM Parameter Store](./ssm/)         | Configuration retrieval from Systems Manager Parameter Store |

package/templates/recipes/cloud-aws/cloudfront/README.md

@@ -0,0 +1,50 @@
+# AWS CloudFront
+
+AWS CloudFront CDN integration with signed URLs for NestJS.
+
+## Documentation
+
+- [AWS CloudFront Developer Guide](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/)
+- [CloudFront Signed URLs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.html)
+- [@aws-sdk/client-cloudfront on npm](https://www.npmjs.com/package/@aws-sdk/client-cloudfront)
+
+## Dependencies
+
+| Package                      | Version   | Purpose                      |
+| ---------------------------- | --------- | ---------------------------- |
+| `@aws-sdk/client-cloudfront` | `3.712.0` | AWS SDK v3 CloudFront client |
+
+## Environment Variables
+
+| Variable                     | Default     | Description                    |
+| ---------------------------- | ----------- | ------------------------------ |
+| `AWS_REGION`                 | `eu-west-1` | AWS region                     |
+| `CLOUDFRONT_DISTRIBUTION_ID` | —           | CloudFront distribution ID     |
+| `CLOUDFRONT_DOMAIN`          | —           | CloudFront distribution domain |
+| `CLOUDFRONT_KEY_PAIR_ID`     | —           | Key pair ID for signed URLs    |
+
+## Usage
+
+```typescript
+import { CloudFrontService } from '@/aws/cloudfront.service';
+
+@Injectable()
+export class AssetService {
+  constructor(private readonly cdn: CloudFrontService) {}
+
+  getSignedUrl(objectKey: string, expiresInSeconds: number): string {
+    return this.cdn.createSignedUrl({
+      url: `https://${this.configService.get('CLOUDFRONT_DOMAIN')}/${objectKey}`,
+      keyPairId: this.configService.get('CLOUDFRONT_KEY_PAIR_ID'),
+      dateLessThan: new Date(Date.now() + expiresInSeconds * 1000).toISOString(),
+    });
+  }
+
+  async invalidateCache(paths: string[]): Promise<void> {
+    await this.cdn.createInvalidation({
+      distributionId: this.configService.get('CLOUDFRONT_DISTRIBUTION_ID'),
+      paths,
+    });
+  }
+}
+```

package/templates/recipes/cloud-aws/cloudfront/src/infrastructure/aws/cloudfront.module.ts

@@ -0,0 +1,8 @@
+import { Module } from '@nestjs/common';
+import { CloudFrontService } from './cloudfront.service';
+
+@Module({
+  providers: [CloudFrontService],
+  exports: [CloudFrontService],
+})
+export class CloudFrontModule {}

package/templates/recipes/cloud-aws/cloudfront/src/infrastructure/aws/cloudfront.service.ts

@@ -0,0 +1,29 @@
+import { Injectable, Logger } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { getSignedUrl } from '@aws-sdk/cloudfront-signer';
+
+@Injectable()
+export class CloudFrontService {
+  private readonly keyPairId: string;
+  private readonly privateKey: string;
+  private readonly logger = new Logger(CloudFrontService.name);
+
+  constructor(private readonly configService: ConfigService) {
+    this.keyPairId = this.configService.getOrThrow<string>('CLOUDFRONT_KEY_PAIR_ID');
+    this.privateKey = this.configService.getOrThrow<string>('CLOUDFRONT_PRIVATE_KEY');
+  }
+
+  getSignedUrl(url: string, expiresInSeconds = 3600): string {
+    const dateLessThan = new Date(Date.now() + expiresInSeconds * 1000).toISOString();
+
+    const signedUrl = getSignedUrl({
+      url,
+      keyPairId: this.keyPairId,
+      privateKey: this.privateKey,
+      dateLessThan,
+    });
+
+    this.logger.debug(`Generated signed URL for ${url}`);
+    return signedUrl;
+  }
+}

package/templates/recipes/cloud-aws/cloudwatch/README.md

@@ -0,0 +1,40 @@
+# AWS CloudWatch Logs
+
+Ship application logs to AWS CloudWatch Logs from NestJS.
+
+## Documentation
+
+- [AWS CloudWatch Logs User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/)
+- [@aws-sdk/client-cloudwatch-logs on npm](https://www.npmjs.com/package/@aws-sdk/client-cloudwatch-logs)
+- [NestJS Logger](https://docs.nestjs.com/techniques/logger)
+
+## Dependencies
+
+| Package                           | Version   | Purpose                           |
+| --------------------------------- | --------- | --------------------------------- |
+| `@aws-sdk/client-cloudwatch-logs` | `3.712.0` | AWS SDK v3 CloudWatch Logs client |
+
+## Environment Variables
+
+| Variable               | Default       | Description               |
+| ---------------------- | ------------- | ------------------------- |
+| `AWS_REGION`           | `eu-west-1`   | AWS region                |
+| `CLOUDWATCH_LOG_GROUP` | `/app/nestjs` | CloudWatch log group name |
+
+## Usage
+
+```typescript
+import { CloudWatchLoggerService } from '@/aws/cloudwatch-logger.service';
+
+@Injectable()
+export class AppLogger {
+  constructor(private readonly cwLogger: CloudWatchLoggerService) {}
+
+  async info(message: string, context: Record<string, unknown>): Promise<void> {
+    await this.cwLogger.log({
+      logGroupName: this.configService.get('CLOUDWATCH_LOG_GROUP'),
+      message: JSON.stringify({ level: 'info', message, ...context }),
+    });
+  }
+}
+```