@exabugs/dynamodb-client 0.3.7 → 0.4.0

package/dist/server/handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v0.3.7
-// Built: 2025-12-19T01:31:05.616Z
+// @exabugs/dynamodb-client v0.4.0
+// Built: 2025-12-22T15:24:28.032Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -1241,12 +1241,12 @@ var require_dist_cjs7 = __commonJS({
     var loggerMiddleware = /* @__PURE__ */ __name(() => (next, context) => async (args) => {
       try {
         const response = await next(args);
-        const { clientName, commandName, logger: logger18, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger21, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog, overrideOutputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
         const outputFilterSensitiveLog = overrideOutputFilterSensitiveLog ?? context.outputFilterSensitiveLog;
         const { $metadata, ...outputWithoutMetadata } = response.output;
-        logger18?.info?.({
+        logger21?.info?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -1255,10 +1255,10 @@ var require_dist_cjs7 = __commonJS({
         });
         return response;
       } catch (error2) {
-        const { clientName, commandName, logger: logger18, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger21, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
-        logger18?.error?.({
+        logger21?.error?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -2194,7 +2194,7 @@ var require_createBufferedReadableStream = __commonJS({
     exports2.sizeOf = sizeOf;
     exports2.modeOf = modeOf;
     var ByteArrayCollector_1 = require_ByteArrayCollector();
-    function createBufferedReadableStream(upstream, size, logger18) {
+    function createBufferedReadableStream(upstream, size, logger21) {
       const reader = upstream.getReader();
       let streamBufferingLoggedWarning = false;
       let bytesSeen = 0;
@@ -2232,7 +2232,7 @@ var require_createBufferedReadableStream = __commonJS({
             const newSize = merge(buffers, mode, chunk);
             if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
               streamBufferingLoggedWarning = true;
-              logger18?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+              logger21?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
             }
             if (newSize >= size) {
               controller.enqueue(flush(buffers, mode));
@@ -2303,9 +2303,9 @@ var require_createBufferedReadable = __commonJS({
     var ByteArrayCollector_1 = require_ByteArrayCollector();
     var createBufferedReadableStream_1 = require_createBufferedReadableStream();
     var stream_type_check_1 = require_stream_type_check();
-    function createBufferedReadable(upstream, size, logger18) {
+    function createBufferedReadable(upstream, size, logger21) {
       if ((0, stream_type_check_1.isReadableStream)(upstream)) {
-        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger18);
+        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger21);
       }
       const downstream = new node_stream_1.Readable({ read() {
       } });
@@ -2338,7 +2338,7 @@ var require_createBufferedReadable = __commonJS({
           const newSize = (0, createBufferedReadableStream_1.merge)(buffers, mode, chunk);
           if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
             streamBufferingLoggedWarning = true;
-            logger18?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+            logger21?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
           }
           if (newSize >= size) {
             downstream.push((0, createBufferedReadableStream_1.flush)(buffers, mode));
@@ -2586,7 +2586,7 @@ var require_dist_cjs16 = __commonJS({
       }
       return timing.setTimeout(registerTimeout.bind(null, DEFER_EVENT_LISTENER_TIME$2), DEFER_EVENT_LISTENER_TIME$2);
     }, "setConnectionTimeout");
-    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger18) => {
+    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger21) => {
       if (timeoutInMs) {
         return timing.setTimeout(() => {
           let msg = `@smithy/node-http-handler - [${throwOnRequestTimeout ? "ERROR" : "WARN"}] a request has exceeded the configured ${timeoutInMs} ms requestTimeout.`;
@@ -2599,7 +2599,7 @@ var require_dist_cjs16 = __commonJS({
             reject(error2);
           } else {
             msg += ` Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.`;
-            logger18?.warn?.(msg);
+            logger21?.warn?.(msg);
           }
         }, timeoutInMs);
       }
@@ -2715,7 +2715,7 @@ var require_dist_cjs16 = __commonJS({
         }
         return new _NodeHttpHandler(instanceOrOptions);
       }
-      static checkSocketUsage(agent, socketWarningTimestamp, logger18 = console) {
+      static checkSocketUsage(agent, socketWarningTimestamp, logger21 = console) {
         const { sockets, requests, maxSockets } = agent;
         if (typeof maxSockets !== "number" || maxSockets === Infinity) {
           return socketWarningTimestamp;
@@ -2729,7 +2729,7 @@ var require_dist_cjs16 = __commonJS({
             const socketsInUse = sockets[origin]?.length ?? 0;
             const requestsEnqueued = requests[origin]?.length ?? 0;
             if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
-              logger18?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
+              logger21?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
 See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
 or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`);
               return Date.now();
@@ -7762,7 +7762,7 @@ var require_dist_cjs21 = __commonJS({
       evaluateTreeRule
     };
     var resolveEndpoint4 = /* @__PURE__ */ __name((ruleSetObject, options) => {
-      const { endpointParams, logger: logger18 } = options;
+      const { endpointParams, logger: logger21 } = options;
       const { parameters, rules } = ruleSetObject;
       options.logger?.debug?.(`${debugId} Initial EndpointParams: ${toDebugString(endpointParams)}`);
       const paramsWithDefault = Object.entries(parameters).filter(([, v4]) => v4.default != null).map(([k4, v4]) => [k4, v4.default]);
@@ -7777,7 +7777,7 @@ var require_dist_cjs21 = __commonJS({
           throw new EndpointError(`Missing required parameter: '${requiredParam}'`);
         }
       }
-      const endpoint = evaluateRules(rules, { endpointParams, logger: logger18, referenceRecord: {} });
+      const endpoint = evaluateRules(rules, { endpointParams, logger: logger21, referenceRecord: {} });
       options.logger?.debug?.(`${debugId} Resolved endpoint: ${toDebugString(endpoint)}`);
       return endpoint;
     }, "resolveEndpoint");
@@ -8564,19 +8564,19 @@ var require_dist_cjs25 = __commonJS({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger18;
+        let logger21;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger18 = void 0;
+          logger21 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger18 = options.logger;
+          logger21 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger18?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger21?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -10801,9 +10801,9 @@ var require_dist_cjs28 = __commonJS({
           this.middlewareStack.use(mw);
         }
         const stack = clientStack.concat(this.middlewareStack);
-        const { logger: logger18 } = configuration;
+        const { logger: logger21 } = configuration;
         const handlerExecutionContext = {
-          logger: logger18,
+          logger: logger21,
           clientName,
           commandName,
           inputFilterSensitiveLog,
@@ -14359,11 +14359,11 @@ var require_dist_cjs30 = __commonJS({
         userAgentAppId: /* @__PURE__ */ __name(async () => {
           const appId = await normalizedAppIdProvider();
           if (!isValidUserAgentAppId(appId)) {
-            const logger18 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
+            const logger21 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
             if (typeof appId !== "string") {
-              logger18?.warn("userAgentAppId must be a string or undefined.");
+              logger21?.warn("userAgentAppId must be a string or undefined.");
             } else if (appId.length > 50) {
-              logger18?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
+              logger21?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
             }
           }
           return appId;
@@ -15078,8 +15078,8 @@ var require_dist_cjs35 = __commonJS({
     var isFunction = /* @__PURE__ */ __name((func) => typeof func === "function", "isFunction");
     var fromStatic = /* @__PURE__ */ __name((defaultValue) => isFunction(defaultValue) ? async () => await defaultValue() : propertyProvider.fromStatic(defaultValue), "fromStatic");
     var loadConfig = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger18 } = configuration;
-      const envOptions = { signingName, logger: logger18 };
+      const { signingName, logger: logger21 } = configuration;
+      const envOptions = { signingName, logger: logger21 };
       return propertyProvider.memoize(propertyProvider.chain(fromEnv(environmentVariableSelector, envOptions), fromSharedConfigFiles(configFileSelector, configuration), fromStatic(defaultValue)));
     }, "loadConfig");
     exports2.loadConfig = loadConfig;
@@ -16393,7 +16393,7 @@ var require_dist_cjs41 = __commonJS({
       "http:": true,
       "https:": true
     };
-    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger18 }) => {
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger21 }) => {
       if (process.env[ENV_CMDS_RELATIVE_URI]) {
         return {
           hostname: CMDS_IP,
@@ -16405,13 +16405,13 @@ var require_dist_cjs41 = __commonJS({
         if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
             tryNextLink: false,
-            logger: logger18
+            logger: logger21
           });
         }
         if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
             tryNextLink: false,
-            logger: logger18
+            logger: logger21
           });
         }
         return {
@@ -16421,7 +16421,7 @@ var require_dist_cjs41 = __commonJS({
       }
       throw new propertyProvider.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
         tryNextLink: false,
-        logger: logger18
+        logger: logger21
       });
     }, "getCmdsUri");
     var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends propertyProvider.CredentialsProviderError {
@@ -16476,10 +16476,10 @@ var require_dist_cjs41 = __commonJS({
     var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
     var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
     var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
-    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger18) => {
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger21) => {
       const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
       const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
-      logger18.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+      logger21.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
 For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
       return {
@@ -16489,19 +16489,19 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       };
     }, "getExtendedInstanceMetadataCredentials");
     var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
-      const logger18 = options?.logger || console;
+      const logger21 = options?.logger || console;
       let pastCredentials;
       return async () => {
         let credentials;
         try {
           credentials = await provider();
           if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
-            credentials = getExtendedInstanceMetadataCredentials(credentials, logger18);
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger21);
           }
         } catch (e4) {
           if (pastCredentials) {
-            logger18.warn("Credential renew failed: ", e4);
-            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger18);
+            logger21.warn("Credential renew failed: ", e4);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger21);
           } else {
             throw e4;
           }
@@ -16518,7 +16518,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
     var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
     var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
       let disableFetchToken = false;
-      const { logger: logger18, profile } = init;
+      const { logger: logger21, profile } = init;
       const { timeout, maxRetries } = providerConfigFromInit(init);
       const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
         const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
@@ -16582,7 +16582,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       return async () => {
         const endpoint = await getInstanceMetadataEndpoint();
         if (disableFetchToken) {
-          logger18?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          logger21?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
           return getCredentials(maxRetries, { ...endpoint, timeout });
         } else {
           let token;
@@ -16596,7 +16596,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
             } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
               disableFetchToken = true;
             }
-            logger18?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            logger21?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
             return getCredentials(maxRetries, { ...endpoint, timeout });
           }
           return getCredentials(maxRetries, {
@@ -16653,7 +16653,7 @@ var require_checkUrl = __commonJS({
     var ECS_CONTAINER_HOST = "169.254.170.2";
     var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
     var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-    var checkUrl = /* @__PURE__ */ __name((url, logger18) => {
+    var checkUrl = /* @__PURE__ */ __name((url, logger21) => {
       if (url.protocol === "https:") {
         return;
       }
@@ -16680,7 +16680,7 @@ var require_checkUrl = __commonJS({
       throw new property_provider_1.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
   - loopback CIDR 127.0.0.0/8 or [::1/128]
   - ECS container host 169.254.170.2
-  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger18 });
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger21 });
     }, "checkUrl");
     exports2.checkUrl = checkUrl;
   }
@@ -16711,13 +16711,13 @@ var require_requestHelpers = __commonJS({
       });
     }
     __name(createGetRequest, "createGetRequest");
-    async function getCredentials(response, logger18) {
+    async function getCredentials(response, logger21) {
       const stream = (0, util_stream_1.sdkStreamMixin)(response.body);
       const str = await stream.transformToString();
       if (response.statusCode === 200) {
         const parsed = JSON.parse(str);
         if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger18 });
+          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger21 });
         }
         return {
           accessKeyId: parsed.AccessKeyId,
@@ -16732,12 +16732,12 @@ var require_requestHelpers = __commonJS({
           parsedBody = JSON.parse(str);
         } catch (e4) {
         }
-        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger18 }), {
+        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger21 }), {
           Code: parsedBody.Code,
           Message: parsedBody.Message
         });
       }
-      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger18 });
+      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger21 });
     }
     __name(getCredentials, "getCredentials");
   }
@@ -18101,14 +18101,14 @@ var require_dist_cjs48 = __commonJS({
     var propertyProvider = require_dist_cjs25();
     var sharedIniFileLoader = require_dist_cjs34();
     var fs = require("fs");
-    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger18, signingName } = {}) => async () => {
-      logger18?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
+    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger21, signingName } = {}) => async () => {
+      logger21?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
       if (!signingName) {
-        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger18 });
+        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger21 });
       }
       const bearerTokenKey = httpAuthSchemes.getBearerTokenEnvKey(signingName);
       if (!(bearerTokenKey in process.env)) {
-        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger18 });
+        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger21 });
       }
       const token = { token: process.env[bearerTokenKey] };
       client.setTokenFeature(token, "BEARER_SERVICE_ENV_VARS", "3");
@@ -18229,8 +18229,8 @@ var require_dist_cjs48 = __commonJS({
         return existingToken;
       }
     }, "fromSso");
-    var fromStatic = /* @__PURE__ */ __name(({ token, logger: logger18 }) => async () => {
-      logger18?.debug("@aws-sdk/token-providers - fromStatic");
+    var fromStatic = /* @__PURE__ */ __name(({ token, logger: logger21 }) => async () => {
+      logger21?.debug("@aws-sdk/token-providers - fromStatic");
       if (!token || !token.token) {
         throw new propertyProvider.TokenProviderError(`Please pass a valid token to fromStatic`, false);
       }
@@ -19019,7 +19019,7 @@ var require_dist_cjs50 = __commonJS({
     var tokenProviders = require_dist_cjs48();
     var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
     var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
-    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger18 }) => {
+    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger21 }) => {
       let token;
       const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
       if (ssoSession) {
@@ -19037,7 +19037,7 @@ var require_dist_cjs50 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(e4.message, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger18
+            logger: logger21
           });
         }
       } else {
@@ -19046,14 +19046,14 @@ var require_dist_cjs50 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger18
+            logger: logger21
           });
         }
       }
       if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
         throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger18
+          logger: logger21
         });
       }
       const { accessToken } = token;
@@ -19075,14 +19075,14 @@ var require_dist_cjs50 = __commonJS({
       } catch (e4) {
         throw new propertyProvider.CredentialsProviderError(e4, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger18
+          logger: logger21
         });
       }
       const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {} } = ssoResp;
       if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
         throw new propertyProvider.CredentialsProviderError("SSO returns an invalid temporary credential.", {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger18
+          logger: logger21
         });
       }
       const credentials = {
@@ -19100,11 +19100,11 @@ var require_dist_cjs50 = __commonJS({
       }
       return credentials;
     }, "resolveSSOCredentials");
-    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger18) => {
+    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger21) => {
       const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
       if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
         throw new propertyProvider.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger18 });
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger21 });
       }
       return profile;
     }, "validateSsoProfile");
@@ -19887,7 +19887,7 @@ var require_dist_cjs51 = __commonJS({
       }
       async refresh(token) {
         const { SigninClient: SigninClient2, CreateOAuth2TokenCommand: CreateOAuth2TokenCommand2 } = await Promise.resolve().then(() => (init_signin(), signin_exports));
-        const { logger: logger18, userAgentAppId } = this.callerClientConfig ?? {};
+        const { logger: logger21, userAgentAppId } = this.callerClientConfig ?? {};
         const isH22 = /* @__PURE__ */ __name((requestHandler2) => {
           return requestHandler2?.metadata?.handlerProtocol === "h2";
         }, "isH2");
@@ -19900,7 +19900,7 @@ var require_dist_cjs51 = __commonJS({
           },
           region,
           requestHandler,
-          logger: logger18,
+          logger: logger21,
           userAgentAppId,
           ...this.init?.clientConfig
         });
@@ -20918,9 +20918,9 @@ var init_defaultStsRoleAssumers = __esm({
       return async (sourceCreds, params) => {
         closureSourceCreds = sourceCreds;
         if (!stsClient) {
-          const { logger: logger18 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger21 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger18,
+            logger: logger21,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -20931,7 +20931,7 @@ var init_defaultStsRoleAssumers = __esm({
             credentialDefaultProvider: /* @__PURE__ */ __name(() => async () => closureSourceCreds, "credentialDefaultProvider"),
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger18
+            logger: logger21
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleCommand(params));
@@ -20955,9 +20955,9 @@ var init_defaultStsRoleAssumers = __esm({
       let stsClient;
       return async (params) => {
         if (!stsClient) {
-          const { logger: logger18 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger21 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger18,
+            logger: logger21,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -20967,7 +20967,7 @@ var init_defaultStsRoleAssumers = __esm({
             profile,
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger18
+            logger: logger21
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
@@ -21097,7 +21097,7 @@ var require_dist_cjs52 = __commonJS({
       client.setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
       return credentials;
     }, "getValidatedProcessCredentials");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger18) => {
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger21) => {
       const profile = profiles[profileName];
       if (profiles[profileName]) {
         const credentialProcess = profile["credential_process"];
@@ -21113,14 +21113,14 @@ var require_dist_cjs52 = __commonJS({
             }
             return getValidatedProcessCredentials(profileName, data2, profiles);
           } catch (error2) {
-            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger18 });
+            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger21 });
           }
         } else {
-          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger18 });
+          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger21 });
         }
       } else {
         throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {
-          logger: logger18
+          logger: logger21
         });
       }
     }, "resolveProcessCredentials");
@@ -21279,21 +21279,21 @@ var require_dist_cjs54 = __commonJS({
     var propertyProvider = require_dist_cjs25();
     var client = (init_client(), __toCommonJS(client_exports));
     var credentialProviderLogin = require_dist_cjs51();
-    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger18) => {
+    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger21) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
           const { fromHttp } = await Promise.resolve().then(() => __toESM(require_dist_cjs42()));
           const { fromContainerMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs41()));
-          logger18?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+          logger21?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
           return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         }, "EcsContainer"),
         Ec2InstanceMetadata: /* @__PURE__ */ __name(async (options) => {
-          logger18?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+          logger21?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
           const { fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs41()));
           return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         }, "Ec2InstanceMetadata"),
         Environment: /* @__PURE__ */ __name(async (options) => {
-          logger18?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+          logger21?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
           const { fromEnv } = await Promise.resolve().then(() => __toESM(require_dist_cjs40()));
           return async () => fromEnv(options)().then(setNamedProvider);
         }, "Environment")
@@ -21301,24 +21301,24 @@ var require_dist_cjs54 = __commonJS({
       if (credentialSource in sourceProvidersMap) {
         return sourceProvidersMap[credentialSource];
       } else {
-        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger18 });
+        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger21 });
       }
     }, "resolveCredentialSource");
     var setNamedProvider = /* @__PURE__ */ __name((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p"), "setNamedProvider");
-    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger18 } = {}) => {
-      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger18 }) || isCredentialSourceProfile(arg, { profile, logger: logger18 }));
+    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger21 } = {}) => {
+      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger21 }) || isCredentialSourceProfile(arg, { profile, logger: logger21 }));
     }, "isAssumeRoleProfile");
-    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger18 }) => {
+    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger21 }) => {
       const withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
       if (withSourceProfile) {
-        logger18?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
+        logger21?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
       }
       return withSourceProfile;
     }, "isAssumeRoleWithSourceProfile");
-    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger18 }) => {
+    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger21 }) => {
       const withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
       if (withProviderProfile) {
-        logger18?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
+        logger21?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
       }
       return withProviderProfile;
     }, "isCredentialSourceProfile");
@@ -25710,7 +25710,7 @@ var require_dist_cjs58 = __commonJS({
         __name(this, "PutResourcePolicyCommand");
       }
     };
-    var QueryCommand3 = class extends smithyClient.Command.classBuilder().ep({
+    var QueryCommand4 = class extends smithyClient.Command.classBuilder().ep({
       ...commonParams4,
       ResourceArn: { type: "contextParams", name: "TableName" }
     }).m(function(Command, cs, config, o4) {
@@ -25927,7 +25927,7 @@ var require_dist_cjs58 = __commonJS({
       ListTagsOfResourceCommand,
       PutItemCommand,
       PutResourcePolicyCommand,
-      QueryCommand: QueryCommand3,
+      QueryCommand: QueryCommand4,
       RestoreTableFromBackupCommand,
       RestoreTableToPointInTimeCommand,
       ScanCommand,
@@ -25955,7 +25955,7 @@ var require_dist_cjs58 = __commonJS({
     var paginateListExports = core.createPaginator(DynamoDBClient2, ListExportsCommand, "NextToken", "NextToken", "MaxResults");
     var paginateListImports = core.createPaginator(DynamoDBClient2, ListImportsCommand, "NextToken", "NextToken", "PageSize");
     var paginateListTables = core.createPaginator(DynamoDBClient2, ListTablesCommand, "ExclusiveStartTableName", "LastEvaluatedTableName", "Limit");
-    var paginateQuery = core.createPaginator(DynamoDBClient2, QueryCommand3, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
+    var paginateQuery = core.createPaginator(DynamoDBClient2, QueryCommand4, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var paginateScan = core.createPaginator(DynamoDBClient2, ScanCommand, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var checkState$1 = /* @__PURE__ */ __name(async (client, input) => {
       let reason;
@@ -26354,7 +26354,7 @@ var require_dist_cjs58 = __commonJS({
     exports2.ProvisionedThroughputExceededException = ProvisionedThroughputExceededException$1;
     exports2.PutItemCommand = PutItemCommand;
     exports2.PutResourcePolicyCommand = PutResourcePolicyCommand;
-    exports2.QueryCommand = QueryCommand3;
+    exports2.QueryCommand = QueryCommand4;
     exports2.ReplicaAlreadyExistsException = ReplicaAlreadyExistsException$1;
     exports2.ReplicaNotFoundException = ReplicaNotFoundException$1;
     exports2.ReplicaStatus = ReplicaStatus;
@@ -27098,7 +27098,7 @@ var require_dist_cjs60 = __commonJS({
         return async () => handler2(this.clientCommand);
       }
     };
-    var QueryCommand3 = class extends DynamoDBDocumentClientCommand {
+    var QueryCommand4 = class extends DynamoDBDocumentClientCommand {
       static {
         __name(this, "QueryCommand");
       }
@@ -27433,7 +27433,7 @@ var require_dist_cjs60 = __commonJS({
         }
       }
       query(args, optionsOrCb, cb) {
-        const command = new QueryCommand3(args);
+        const command = new QueryCommand4(args);
         if (typeof optionsOrCb === "function") {
           this.send(command, optionsOrCb);
         } else if (typeof cb === "function") {
@@ -27498,7 +27498,7 @@ var require_dist_cjs60 = __commonJS({
         }
       }
     };
-    var paginateQuery = core$1.createPaginator(DynamoDBDocumentClient2, QueryCommand3, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
+    var paginateQuery = core$1.createPaginator(DynamoDBDocumentClient2, QueryCommand4, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var paginateScan = core$1.createPaginator(DynamoDBDocumentClient2, ScanCommand, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     Object.defineProperty(exports2, "$Command", {
       enumerable: true,
@@ -27529,7 +27529,7 @@ var require_dist_cjs60 = __commonJS({
     exports2.ExecuteTransactionCommand = ExecuteTransactionCommand;
     exports2.GetCommand = GetCommand4;
     exports2.PutCommand = PutCommand2;
-    exports2.QueryCommand = QueryCommand3;
+    exports2.QueryCommand = QueryCommand4;
     exports2.ScanCommand = ScanCommand;
     exports2.TransactGetCommand = TransactGetCommand;
     exports2.TransactWriteCommand = TransactWriteCommand6;
@@ -27546,7 +27546,7 @@ __export(handler_exports, {
 });
 module.exports = __toCommonJS(handler_exports);
 
-// src/errors.ts
+// src/shared/errors/index.ts
 var AppError = class extends Error {
   constructor(code, message, statusCode = 500, details) {
     super(message);
@@ -27608,7 +27608,7 @@ function isAppError(error2) {
 }
 __name(isAppError, "isAppError");
 
-// src/logger.ts
+// src/shared/utils/logger.ts
 var LOG_LEVELS = {
   debug: 0,
   info: 1,
@@ -27665,31 +27665,6 @@ function createLogger(config = {}) {
 }
 __name(createLogger, "createLogger");
 
-// src/server/operations/deleteMany.ts
-var import_lib_dynamodb2 = __toESM(require_dist_cjs60(), 1);
-
-// src/dynamodb.ts
-var import_client_dynamodb = __toESM(require_dist_cjs58(), 1);
-var import_lib_dynamodb = __toESM(require_dist_cjs60(), 1);
-function createDynamoDBClient(config = {}) {
-  const { region = process.env.AWS_REGION || "us-east-1", endpoint } = config;
-  const client = new import_client_dynamodb.DynamoDBClient({
-    region,
-    ...endpoint && { endpoint }
-  });
-  const docClient = import_lib_dynamodb.DynamoDBDocumentClient.from(client, {
-    marshallOptions: {
-      removeUndefinedValues: true,
-      convertEmptyValues: false
-    },
-    unmarshallOptions: {
-      wrapNumbers: false
-    }
-  });
-  return docClient;
-}
-__name(createDynamoDBClient, "createDynamoDBClient");
-
 // node_modules/ulid/dist/node/index.js
 var import_node_crypto = __toESM(require("node:crypto"), 1);
 var ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
@@ -27795,12 +27770,51 @@ function ulid(seedTime, prng) {
 }
 __name(ulid, "ulid");
 
-// src/ulid.ts
+// src/shared/utils/ulid.ts
 function ulid2() {
   return ulid();
 }
 __name(ulid2, "ulid");
 
+// src/shared/utils/dynamodb.ts
+var import_client_dynamodb = __toESM(require_dist_cjs58(), 1);
+var import_lib_dynamodb = __toESM(require_dist_cjs60(), 1);
+function createDynamoDBClient(config = {}) {
+  const { region = process.env.AWS_REGION || "us-east-1", endpoint } = config;
+  const client = new import_client_dynamodb.DynamoDBClient({
+    region,
+    ...endpoint && { endpoint }
+  });
+  const docClient = import_lib_dynamodb.DynamoDBDocumentClient.from(client, {
+    marshallOptions: {
+      removeUndefinedValues: true,
+      convertEmptyValues: false
+    },
+    unmarshallOptions: {
+      wrapNumbers: false
+    }
+  });
+  return docClient;
+}
+__name(createDynamoDBClient, "createDynamoDBClient");
+
+// src/shared/constants/dynamodb.ts
+var DYNAMODB_TRANSACT_WRITE_MAX_ITEMS = 100;
+var DYNAMODB_QUERY_MAX_SIZE_BYTES = 1024 * 1024;
+var DYNAMODB_SCAN_MAX_SIZE_BYTES = 1024 * 1024;
+
+// src/shared/constants/lambda.ts
+var LAMBDA_TIMEOUT_MS = 15 * 60 * 1e3;
+var LARGE_BATCH_WARNING_THRESHOLD = 1e3;
+var TIMEOUT_RISK_THRESHOLD = 0.2;
+var LAMBDA_MAX_PAYLOAD_SIZE_SYNC = 6 * 1024 * 1024;
+var LAMBDA_MAX_PAYLOAD_SIZE_ASYNC = 256 * 1024;
+var LAMBDA_MAX_RESPONSE_SIZE = 6 * 1024 * 1024;
+var LAMBDA_MAX_ENV_VARS_SIZE = 4 * 1024;
+
+// src/server/operations/deleteMany.ts
+var import_lib_dynamodb2 = __toESM(require_dist_cjs60(), 1);
+
 // src/server/shadow/typeInference.ts
 function inferFieldType(value) {
   if (value === null || value === void 0) {
@@ -27828,6 +27842,51 @@ function inferFieldType(value) {
 }
 __name(inferFieldType, "inferFieldType");
 
+// src/shadows/generator.ts
+function escapeString(value) {
+  return value.replace(/#/g, "##").replace(/ /g, "#");
+}
+__name(escapeString, "escapeString");
+function formatDatetime(value) {
+  if (value === null || value === void 0) {
+    return "";
+  }
+  const date2 = typeof value === "string" ? new Date(value) : value;
+  if (isNaN(date2.getTime())) {
+    throw new Error(`Invalid datetime value: ${value}`);
+  }
+  return date2.toISOString();
+}
+__name(formatDatetime, "formatDatetime");
+function formatBoolean(value) {
+  if (value === null || value === void 0) {
+    return "";
+  }
+  return value ? "true" : "false";
+}
+__name(formatBoolean, "formatBoolean");
+function generateMainRecordSK(recordId) {
+  return `id#${recordId}`;
+}
+__name(generateMainRecordSK, "generateMainRecordSK");
+
+// src/shadows/differ.ts
+function calculateShadowDiff(oldShadowKeys, newShadowKeys) {
+  const oldSet = new Set(oldShadowKeys);
+  const newSet = new Set(newShadowKeys);
+  const toDelete = oldShadowKeys.filter((key) => !newSet.has(key));
+  const toAdd = newShadowKeys.filter((key) => !oldSet.has(key));
+  return {
+    toDelete,
+    toAdd
+  };
+}
+__name(calculateShadowDiff, "calculateShadowDiff");
+function isDiffEmpty(diff) {
+  return diff.toDelete.length === 0 && diff.toAdd.length === 0;
+}
+__name(isDiffEmpty, "isDiffEmpty");
+
 // src/server/shadow/generator.ts
 function normalizeJson(value) {
   if (value === null || value === void 0) return value;
@@ -27859,10 +27918,10 @@ function truncateString(value, maxBytes) {
   return truncated;
 }
 __name(truncateString, "truncateString");
-function escapeString(value) {
-  return value.replace(/#/g, "##").replace(/ /g, "#");
+function escapeString2(value) {
+  return escapeString(value);
 }
-__name(escapeString, "escapeString");
+__name(escapeString2, "escapeString");
 function formatNumberWithOffset(value, padding) {
   if (!Number.isFinite(value)) {
     throw new Error(`Invalid number value: ${value}`);
@@ -27876,25 +27935,15 @@ function formatNumberWithOffset(value, padding) {
   return adjusted.toString().padStart(padding + 1, "0");
 }
 __name(formatNumberWithOffset, "formatNumberWithOffset");
-function formatDatetime(value) {
-  if (value === null || value === void 0) {
-    return "";
-  }
-  const date2 = typeof value === "string" ? new Date(value) : value;
-  if (isNaN(date2.getTime())) {
-    throw new Error(`Invalid datetime value: ${value}`);
-  }
-  return date2.toISOString();
+function formatDatetime2(value) {
+  return formatDatetime(value);
 }
-__name(formatDatetime, "formatDatetime");
-function formatBoolean(value) {
-  if (value === null || value === void 0) {
-    return "";
-  }
-  return value ? "1" : "0";
+__name(formatDatetime2, "formatDatetime");
+function formatBoolean2(value) {
+  return formatBoolean(value);
 }
-__name(formatBoolean, "formatBoolean");
-function formatFieldValue(type, value, config) {
+__name(formatBoolean2, "formatBoolean");
+function formatFieldValue2(type, value, config) {
   switch (type) {
     case "string": {
       if (value === null || value === void 0) {
@@ -27902,31 +27951,31 @@ function formatFieldValue(type, value, config) {
       }
       const str = String(value);
       const truncated = truncateString(str, config.stringMaxBytes);
-      return escapeString(truncated);
+      return escapeString2(truncated);
     }
     case "number":
       return formatNumberWithOffset(value, config.numberPadding);
     case "datetime":
-      return formatDatetime(value);
+      return formatDatetime2(value);
     case "boolean":
-      return formatBoolean(value);
+      return formatBoolean2(value);
     case "array":
     case "object": {
       const normalized = normalizeJson(value);
       const jsonStr = JSON.stringify(normalized);
       const maxBytes = config.stringMaxBytes * 2;
       const truncated = truncateString(jsonStr, maxBytes);
-      return escapeString(truncated);
+      return escapeString2(truncated);
     }
     default:
       throw new Error(`Unknown shadow field type: ${type}`);
   }
 }
-__name(formatFieldValue, "formatFieldValue");
-function generateMainRecordSK(recordId) {
-  return `id#${recordId}`;
+__name(formatFieldValue2, "formatFieldValue");
+function generateMainRecordSK2(recordId) {
+  return generateMainRecordSK(recordId);
 }
-__name(generateMainRecordSK, "generateMainRecordSK");
+__name(generateMainRecordSK2, "generateMainRecordSK");
 function generateShadowRecords(record, resourceName, config) {
   const shadows = [];
   for (const [fieldName, value] of Object.entries(record)) {
@@ -27943,7 +27992,7 @@ function generateShadowRecords(record, resourceName, config) {
     if (!type) {
       continue;
     }
-    const formattedValue = formatFieldValue(type, value, config);
+    const formattedValue = formatFieldValue2(type, value, config);
     const sk = `${fieldName}#${formattedValue}#id#${record.id}`;
     shadows.push({
       PK: resourceName,
@@ -27954,23 +28003,6 @@ function generateShadowRecords(record, resourceName, config) {
 }
 __name(generateShadowRecords, "generateShadowRecords");
 
-// src/server/shadow/differ.ts
-function calculateShadowDiff(oldShadowKeys, newShadowKeys) {
-  const oldSet = new Set(oldShadowKeys);
-  const newSet = new Set(newShadowKeys);
-  const toDelete = oldShadowKeys.filter((key) => !newSet.has(key));
-  const toAdd = newShadowKeys.filter((key) => !oldSet.has(key));
-  return {
-    toDelete,
-    toAdd
-  };
-}
-__name(calculateShadowDiff, "calculateShadowDiff");
-function isDiffEmpty(diff) {
-  return diff.toDelete.length === 0 && diff.toAdd.length === 0;
-}
-__name(isDiffEmpty, "isDiffEmpty");
-
 // src/server/shadow/config.ts
 var cachedShadowConfig = null;
 function getShadowConfig() {
@@ -27994,9 +28026,6 @@ __name(getShadowConfig, "getShadowConfig");
 
 // src/server/utils/bulkOperations.ts
 var logger2 = createLogger({ service: "records-lambda" });
-var LAMBDA_TIMEOUT_MS = 15 * 60 * 1e3;
-var LARGE_BATCH_WARNING_THRESHOLD = 1e3;
-var TIMEOUT_RISK_THRESHOLD = 0.2;
 function logLargeBatchWarning(operation2, recordCount, requestId, resource) {
   if (recordCount > LARGE_BATCH_WARNING_THRESHOLD) {
     logger2.warn(`Large batch ${operation2} operation detected`, {
@@ -28078,7 +28107,6 @@ __name(logPartialFailure, "logPartialFailure");
 
 // src/server/utils/chunking.ts
 var logger3 = createLogger({ service: "records-lambda" });
-var DYNAMODB_TRANSACT_WRITE_MAX_ITEMS = 100;
 function calculateChunks(records, getItemCount) {
   const chunks = [];
   const itemCounts = [];
@@ -28286,7 +28314,7 @@ async function handleDeleteMany(resource, params, requestId) {
   const tableName = getTableName();
   const keys = ids.map((id) => ({
     PK: resource,
-    SK: generateMainRecordSK(id)
+    SK: generateMainRecordSK2(id)
   }));
   const batchGetResult = await executeDynamoDBOperation(
     () => dbClient2.send(
@@ -28311,7 +28339,7 @@ async function handleDeleteMany(resource, params, requestId) {
     existingIds.add(id);
     preparedRecords.push({
       id,
-      mainSK: generateMainRecordSK(id),
+      mainSK: generateMainRecordSK2(id),
       shadowKeys
     });
   }
@@ -28485,7 +28513,7 @@ async function handleDeleteOne(resource, params, requestId) {
   });
   const dbClient2 = getDBClient();
   const tableName = getTableName();
-  const mainSK = generateMainRecordSK(id);
+  const mainSK = generateMainRecordSK2(id);
   const getResult = await executeDynamoDBOperation(
     () => dbClient2.send(
       new import_lib_dynamodb3.GetCommand({
@@ -28543,8 +28571,27 @@ async function handleDeleteOne(resource, params, requestId) {
 }
 __name(handleDeleteOne, "handleDeleteOne");
 
-// src/server/operations/find.ts
-var import_lib_dynamodb4 = __toESM(require_dist_cjs60(), 1);
+// src/server/utils/validation.ts
+function validateSortField(_config, _resource, _sort) {
+  return;
+}
+__name(validateSortField, "validateSortField");
+function normalizePagination(pagination) {
+  const perPage = Math.min(pagination?.perPage || 50, 50);
+  const nextToken = pagination?.nextToken;
+  return { perPage, nextToken };
+}
+__name(normalizePagination, "normalizePagination");
+function normalizeSort(config, _resource, sort) {
+  if (sort) {
+    return sort;
+  }
+  return {
+    field: config.updatedAtField,
+    order: "DESC"
+  };
+}
+__name(normalizeSort, "normalizeSort");
 
 // src/server/utils/filter.ts
 function parseFilterField(fieldKey) {
@@ -28581,60 +28628,89 @@ function isValidType(type) {
   return ["string", "number", "date", "boolean"].includes(type);
 }
 __name(isValidType, "isValidType");
-function convertType(value, type) {
-  switch (type) {
-    case "string":
-      return String(value);
-    case "number":
-      return Number(value);
-    case "date":
-      return new Date(String(value));
-    case "boolean":
-      if (typeof value === "boolean") return value;
-      return String(value).toLowerCase() === "true";
-    default:
-      return String(value);
-  }
+
+// src/server/operations/find/utils.ts
+var logger7 = createLogger({
+  service: "find-utils",
+  level: process.env.LOG_LEVEL || "info"
+});
+function initializeFindConfig() {
+  return getShadowConfig();
 }
-__name(convertType, "convertType");
-function matchesFilter(record, parsed, value) {
-  const fieldValue = record[parsed.field];
-  if (fieldValue === void 0 || fieldValue === null) {
-    return false;
+__name(initializeFindConfig, "initializeFindConfig");
+function normalizeFindParams(config, resource, params) {
+  const sort = normalizeSort(config, resource, params.sort);
+  const pagination = normalizePagination(params.pagination);
+  const parsedFilters = parseFilters(params.filter);
+  return {
+    sort,
+    pagination,
+    parsedFilters
+  };
+}
+__name(normalizeFindParams, "normalizeFindParams");
+function parseFilters(filter) {
+  const parsedFilters = [];
+  if (!filter || Object.keys(filter).length === 0) {
+    return parsedFilters;
   }
-  const typedFieldValue = convertType(fieldValue, parsed.type);
-  const typedFilterValue = convertType(value, parsed.type);
-  switch (parsed.operator) {
-    case "eq":
-      return typedFieldValue === typedFilterValue;
-    case "lt":
-      return typedFieldValue < typedFilterValue;
-    case "lte":
-      return typedFieldValue <= typedFilterValue;
-    case "gt":
-      return typedFieldValue > typedFilterValue;
-    case "gte":
-      return typedFieldValue >= typedFilterValue;
-    case "starts":
-      return String(typedFieldValue).startsWith(String(typedFilterValue));
-    case "ends":
-      return String(typedFieldValue).endsWith(String(typedFilterValue));
-    default:
-      return false;
+  for (const [fieldKey, value] of Object.entries(filter)) {
+    try {
+      const parsed = parseFilterField(fieldKey);
+      parsedFilters.push({ parsed, value });
+    } catch (error2) {
+      logger7.error("Invalid filter field syntax", {
+        fieldKey,
+        error: error2 instanceof Error ? error2.message : String(error2)
+      });
+      throw new ConfigError(`Invalid filter field syntax: ${fieldKey}`, {
+        field: fieldKey,
+        error: error2 instanceof Error ? error2.message : String(error2)
+      });
+    }
   }
+  return parsedFilters;
 }
-__name(matchesFilter, "matchesFilter");
-function matchesAllFilters(record, parsedFilters) {
-  return parsedFilters.every((f4) => matchesFilter(record, f4.parsed, f4.value));
-}
-__name(matchesAllFilters, "matchesAllFilters");
+__name(parseFilters, "parseFilters");
 function findOptimizableFilter(sortField, parsedFilters) {
-  const queryableOperators = ["eq", "lt", "lte", "gt", "gte", "starts"];
   return parsedFilters.find(
-    (f4) => f4.parsed.field === sortField && queryableOperators.includes(f4.parsed.operator)
-  ) || null;
+    (filter) => filter.parsed.field === sortField
+  );
 }
 __name(findOptimizableFilter, "findOptimizableFilter");
+function matchesAllFilters(record, parsedFilters) {
+  return parsedFilters.every((filter) => {
+    const { field, operator } = filter.parsed;
+    const recordValue = record[field];
+    const filterValue = filter.value;
+    switch (operator) {
+      case "eq":
+        return recordValue === filterValue;
+      case "ne":
+        return recordValue !== filterValue;
+      case "gt":
+        return recordValue != null && recordValue > filterValue;
+      case "gte":
+        return recordValue != null && recordValue >= filterValue;
+      case "lt":
+        return recordValue != null && recordValue < filterValue;
+      case "lte":
+        return recordValue != null && recordValue <= filterValue;
+      case "in":
+        return Array.isArray(filterValue) && filterValue.includes(recordValue);
+      case "nin":
+        return Array.isArray(filterValue) && !filterValue.includes(recordValue);
+      case "starts":
+        return typeof recordValue === "string" && typeof filterValue === "string" && recordValue.startsWith(filterValue);
+      default:
+        return true;
+    }
+  });
+}
+__name(matchesAllFilters, "matchesAllFilters");
+
+// src/server/operations/find/idQuery.ts
+var import_lib_dynamodb4 = __toESM(require_dist_cjs60(), 1);
 
 // src/server/utils/pagination.ts
 function encodeNextToken(pk, sk) {
@@ -28666,173 +28742,71 @@ function decodeNextToken(token) {
 }
 __name(decodeNextToken, "decodeNextToken");
 
-// src/server/utils/validation.ts
-function validateSortField(_config, _resource, _sort) {
-  return;
-}
-__name(validateSortField, "validateSortField");
-function normalizePagination(pagination) {
-  const perPage = Math.min(pagination?.perPage || 50, 50);
-  const nextToken = pagination?.nextToken;
-  return { perPage, nextToken };
-}
-__name(normalizePagination, "normalizePagination");
-function normalizeSort(config, _resource, sort) {
-  if (sort) {
-    return sort;
-  }
-  return {
-    field: config.updatedAtField,
-    order: "DESC"
-  };
-}
-__name(normalizeSort, "normalizeSort");
-
-// src/server/operations/find.ts
-var logger7 = createLogger({ service: "records-lambda" });
-async function handleFind(resource, params, requestId) {
-  logger7.debug("Executing find", {
-    requestId,
-    resource,
-    params
-  });
-  const shadowConfig = getShadowConfig();
-  logger7.debug("Shadow config loaded", {
-    requestId,
-    resource,
-    createdAtField: shadowConfig.createdAtField,
-    updatedAtField: shadowConfig.updatedAtField
-  });
-  logger7.debug("Normalizing sort", {
-    requestId,
-    resource,
-    inputSort: params.sort
-  });
-  const sort = normalizeSort(shadowConfig, resource, params.sort);
-  logger7.debug("Sort normalized", {
-    requestId,
-    resource,
-    sort
-  });
-  validateSortField(shadowConfig, resource, sort);
-  const { perPage, nextToken } = normalizePagination(params.pagination);
-  const parsedFilters = [];
-  if (params.filter && Object.keys(params.filter).length > 0) {
-    for (const [fieldKey, value] of Object.entries(params.filter)) {
-      try {
-        const parsed = parseFilterField(fieldKey);
-        parsedFilters.push({ parsed, value });
-      } catch (error2) {
-        logger7.error("Invalid filter field syntax", {
-          requestId,
-          fieldKey,
-          error: error2 instanceof Error ? error2.message : String(error2)
-        });
-        throw new ConfigError(`Invalid filter field syntax: ${fieldKey}`, {
-          field: fieldKey,
-          error: error2 instanceof Error ? error2.message : String(error2)
-        });
-      }
-    }
-  }
-  const dbClient2 = getDBClient();
-  const tableName = getTableName();
-  if (sort.field === "id") {
-    const idFilter = parsedFilters.find((f4) => f4.parsed.field === "id");
-    if (idFilter && idFilter.parsed.operator === "eq") {
-      const targetId = String(idFilter.value);
-      const queryResult3 = await executeDynamoDBOperation(
-        () => dbClient2.send(
-          new import_lib_dynamodb4.QueryCommand({
-            TableName: tableName,
-            KeyConditionExpression: "PK = :pk AND SK = :sk",
-            ExpressionAttributeValues: {
-              ":pk": resource,
-              ":sk": `id#${targetId}`
-            },
-            ConsistentRead: true
-          })
-        ),
-        "Query"
-      );
-      const mainRecords3 = queryResult3.Items || [];
-      const items3 = mainRecords3.map((item) => extractCleanRecord(item));
-      logger7.info("find succeeded (id sort optimization with filter)", {
-        requestId,
-        resource,
-        count: items3.length,
-        hasNextPage: false
-      });
-      return {
-        items: items3,
-        pageInfo: {
-          hasNextPage: false,
-          hasPreviousPage: false
-        }
-      };
-    }
-    let exclusiveStartKey2;
-    if (nextToken) {
-      const decoded = decodeNextToken(nextToken);
-      exclusiveStartKey2 = {
-        PK: decoded.PK,
-        SK: decoded.SK
-      };
-    }
-    const queryResult2 = await executeDynamoDBOperation(
-      () => dbClient2.send(
-        new import_lib_dynamodb4.QueryCommand({
-          TableName: tableName,
-          KeyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
-          ExpressionAttributeValues: {
-            ":pk": resource,
-            ":skPrefix": "id#"
-          },
-          ScanIndexForward: sort.order === "ASC",
-          // ASC: true, DESC: false
-          Limit: perPage,
-          ExclusiveStartKey: exclusiveStartKey2,
-          ConsistentRead: true
-        })
-      ),
-      "Query"
-    );
-    const mainRecords2 = queryResult2.Items || [];
-    if (mainRecords2.length === 0) {
-      return {
-        items: [],
-        pageInfo: {
-          hasNextPage: false,
-          hasPreviousPage: false
-        }
-      };
-    }
-    let items2 = mainRecords2.map((item) => extractCleanRecord(item));
-    if (parsedFilters.length > 0) {
-      items2 = items2.filter((record) => matchesAllFilters(record, parsedFilters));
-    }
-    const hasNextPage2 = mainRecords2.length < perPage ? false : queryResult2.LastEvaluatedKey !== void 0;
-    const nextTokenValue2 = hasNextPage2 && queryResult2.LastEvaluatedKey ? encodeNextToken(
-      queryResult2.LastEvaluatedKey.PK,
-      queryResult2.LastEvaluatedKey.SK
-    ) : void 0;
-    logger7.info("find succeeded (id sort optimization)", {
-      requestId,
-      resource,
-      count: items2.length,
-      hasNextPage: hasNextPage2
-    });
-    return {
-      items: items2,
-      pageInfo: {
-        hasNextPage: hasNextPage2,
-        hasPreviousPage: !!nextToken
-      },
-      ...nextTokenValue2 && { nextToken: nextTokenValue2 }
-    };
+// src/server/operations/find/idQuery.ts
+var logger8 = createLogger({
+  service: "id-query",
+  level: process.env.LOG_LEVEL || "info"
+});
+async function executeIdQuery(resource, normalizedParams, requestId) {
+  const { sort, pagination, parsedFilters } = normalizedParams;
+  const { perPage, nextToken } = pagination;
+  logger8.debug("Executing ID optimized query", {
+    requestId,
+    resource,
+    sort,
+    hasFilters: parsedFilters.length > 0
+  });
+  const idFilter = parsedFilters.find((f4) => f4.parsed.field === "id");
+  if (idFilter && idFilter.parsed.operator === "eq") {
+    return await executeSpecificIdQuery(resource, String(idFilter.value), requestId);
   }
-  const optimizableFilter = findOptimizableFilter(sort.field, parsedFilters);
-  const skPrefix = `${sort.field}#`;
+  return await executeAllRecordsQuery(
+    resource,
+    sort,
+    perPage,
+    nextToken,
+    parsedFilters,
+    requestId
+  );
+}
+__name(executeIdQuery, "executeIdQuery");
+async function executeSpecificIdQuery(resource, targetId, requestId) {
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
+  const queryResult = await executeDynamoDBOperation(
+    () => dbClient2.send(
+      new import_lib_dynamodb4.QueryCommand({
+        TableName: tableName,
+        KeyConditionExpression: "PK = :pk AND SK = :sk",
+        ExpressionAttributeValues: {
+          ":pk": resource,
+          ":sk": `id#${targetId}`
+        },
+        ConsistentRead: true
+      })
+    ),
+    "Query"
+  );
+  const mainRecords = queryResult.Items || [];
+  const items = mainRecords.map((item) => extractCleanRecord(item));
+  logger8.info("ID specific query succeeded", {
+    requestId,
+    resource,
+    targetId,
+    count: items.length
+  });
+  return {
+    items,
+    pageInfo: {
+      hasNextPage: false,
+      hasPreviousPage: false
+    }
+  };
+}
+__name(executeSpecificIdQuery, "executeSpecificIdQuery");
+async function executeAllRecordsQuery(resource, sort, perPage, nextToken, parsedFilters, requestId) {
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
   let exclusiveStartKey;
   if (nextToken) {
     const decoded = decodeNextToken(nextToken);
@@ -28841,73 +28815,16 @@ async function handleFind(resource, params, requestId) {
       SK: decoded.SK
     };
   }
-  let keyConditionExpression;
-  const expressionAttributeValues = {
-    ":pk": resource
-  };
-  if (optimizableFilter) {
-    const { operator, type } = optimizableFilter.parsed;
-    const value = optimizableFilter.value;
-    let encodedValue;
-    if (type === "number") {
-      encodedValue = String(value).padStart(20, "0");
-    } else if (type === "date") {
-      encodedValue = new Date(String(value)).toISOString();
-    } else if (type === "boolean") {
-      encodedValue = String(value);
-    } else {
-      encodedValue = String(value).replace(/#/g, "##").replace(/ /g, "#");
-    }
-    const skValue = `${sort.field}#${encodedValue}`;
-    switch (operator) {
-      case "eq":
-        keyConditionExpression = "PK = :pk AND begins_with(SK, :skValue)";
-        expressionAttributeValues[":skValue"] = `${skValue}#id#`;
-        break;
-      case "gt":
-        keyConditionExpression = "PK = :pk AND SK > :skValue";
-        expressionAttributeValues[":skValue"] = `${skValue}#id#~`;
-        break;
-      case "gte":
-        keyConditionExpression = "PK = :pk AND SK >= :skValue";
-        expressionAttributeValues[":skValue"] = `${skValue}#id#`;
-        break;
-      case "lt":
-        keyConditionExpression = "PK = :pk AND SK < :skValue";
-        expressionAttributeValues[":skValue"] = `${skValue}#id#`;
-        break;
-      case "lte":
-        keyConditionExpression = "PK = :pk AND SK <= :skValue";
-        expressionAttributeValues[":skValue"] = `${skValue}#id#~`;
-        break;
-      case "starts":
-        keyConditionExpression = "PK = :pk AND begins_with(SK, :skValue)";
-        expressionAttributeValues[":skValue"] = `${skValue}`;
-        break;
-      default:
-        keyConditionExpression = "PK = :pk AND begins_with(SK, :skPrefix)";
-        expressionAttributeValues[":skPrefix"] = skPrefix;
-    }
-    logger7.debug("Query optimization applied", {
-      requestId,
-      sortField: sort.field,
-      operator,
-      type,
-      value,
-      skValue
-    });
-  } else {
-    keyConditionExpression = "PK = :pk AND begins_with(SK, :skPrefix)";
-    expressionAttributeValues[":skPrefix"] = skPrefix;
-  }
   const queryResult = await executeDynamoDBOperation(
     () => dbClient2.send(
       new import_lib_dynamodb4.QueryCommand({
         TableName: tableName,
-        KeyConditionExpression: keyConditionExpression,
-        ExpressionAttributeValues: expressionAttributeValues,
+        KeyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
+        ExpressionAttributeValues: {
+          ":pk": resource,
+          ":skPrefix": "id#"
+        },
         ScanIndexForward: sort.order === "ASC",
-        // ASC: true, DESC: false
         Limit: perPage,
         ExclusiveStartKey: exclusiveStartKey,
         ConsistentRead: true
@@ -28915,8 +28832,8 @@ async function handleFind(resource, params, requestId) {
     ),
     "Query"
   );
-  const shadowItems = queryResult.Items || [];
-  if (shadowItems.length === 0) {
+  const mainRecords = queryResult.Items || [];
+  if (mainRecords.length === 0) {
     return {
       items: [],
       pageInfo: {
@@ -28925,29 +28842,67 @@ async function handleFind(resource, params, requestId) {
       }
     };
   }
-  const recordIds = shadowItems.map((item) => {
-    const sk = item.SK;
-    const parts = sk.split("#id#");
-    return parts[parts.length - 1];
+  let items = mainRecords.map((item) => extractCleanRecord(item));
+  if (parsedFilters.length > 0) {
+    items = items.filter((record) => matchesAllFilters(record, parsedFilters));
+  }
+  const hasNextPage = mainRecords.length < perPage ? false : queryResult.LastEvaluatedKey !== void 0;
+  const nextTokenValue = hasNextPage && queryResult.LastEvaluatedKey ? encodeNextToken(
+    queryResult.LastEvaluatedKey.PK,
+    queryResult.LastEvaluatedKey.SK
+  ) : void 0;
+  logger8.info("ID all records query succeeded", {
+    requestId,
+    resource,
+    count: items.length,
+    hasNextPage
   });
-  const uniqueRecordIds = Array.from(new Set(recordIds));
-  const batchGetResult = await executeDynamoDBOperation(
-    () => dbClient2.send(
-      new import_lib_dynamodb4.BatchGetCommand({
-        RequestItems: {
-          [tableName]: {
-            Keys: uniqueRecordIds.map((id) => ({
-              PK: resource,
-              SK: `id#${id}`
-            })),
-            ConsistentRead: true
-          }
-        }
-      })
-    ),
-    "BatchGetItem"
+  return {
+    items,
+    pageInfo: {
+      hasNextPage,
+      hasPreviousPage: !!nextToken
+    },
+    ...nextTokenValue && { nextToken: nextTokenValue }
+  };
+}
+__name(executeAllRecordsQuery, "executeAllRecordsQuery");
+
+// src/server/operations/find/shadowQuery.ts
+var import_lib_dynamodb5 = __toESM(require_dist_cjs60(), 1);
+var logger9 = createLogger({
+  service: "shadow-query",
+  level: process.env.LOG_LEVEL || "info"
+});
+async function executeShadowQuery(resource, normalizedParams, requestId) {
+  const { sort, pagination, parsedFilters } = normalizedParams;
+  const { perPage, nextToken } = pagination;
+  logger9.debug("Executing shadow query", {
+    requestId,
+    resource,
+    sortField: sort.field,
+    hasFilters: parsedFilters.length > 0
+  });
+  const optimizableFilter = findOptimizableFilter(sort.field, parsedFilters);
+  const shadowRecords = await executeShadowRecordQuery(
+    resource,
+    sort,
+    perPage,
+    nextToken,
+    optimizableFilter,
+    requestId
   );
-  const mainRecords = batchGetResult.Responses?.[tableName] || [];
+  const recordIds = extractRecordIds(shadowRecords.Items || []);
+  if (recordIds.length === 0) {
+    return {
+      items: [],
+      pageInfo: {
+        hasNextPage: false,
+        hasPreviousPage: false
+      }
+    };
+  }
+  const mainRecords = await fetchMainRecords(resource, recordIds, requestId);
   const recordMap = new Map(
     mainRecords.map((item) => {
       const data2 = item.data;
@@ -28963,25 +28918,19 @@ async function handleFind(resource, params, requestId) {
     return true;
   }).map((id) => recordMap.get(id)).filter((record) => record !== void 0);
   if (parsedFilters.length > 0) {
-    const itemsBeforeFilter = items.length;
     items = items.filter((record) => matchesAllFilters(record, parsedFilters));
-    logger7.debug("Memory filtering applied", {
-      requestId,
-      filtersCount: parsedFilters.length,
-      itemsBeforeFilter,
-      itemsAfterFilter: items.length,
-      filtered: itemsBeforeFilter - items.length
-    });
   }
-  const hasNextPage = shadowItems.length < perPage ? false : queryResult.LastEvaluatedKey !== void 0;
-  const nextTokenValue = hasNextPage && queryResult.LastEvaluatedKey ? encodeNextToken(
-    queryResult.LastEvaluatedKey.PK,
-    queryResult.LastEvaluatedKey.SK
+  const hasNextPage = (shadowRecords.Items?.length || 0) < perPage ? false : shadowRecords.LastEvaluatedKey !== void 0;
+  const nextTokenValue = hasNextPage && shadowRecords.LastEvaluatedKey ? encodeNextToken(
+    shadowRecords.LastEvaluatedKey.PK,
+    shadowRecords.LastEvaluatedKey.SK
   ) : void 0;
-  logger7.info("find succeeded", {
+  logger9.info("Shadow query succeeded", {
     requestId,
     resource,
-    count: items.length,
+    sortField: sort.field,
+    shadowCount: shadowRecords.Items?.length || 0,
+    mainCount: items.length,
     hasNextPage
   });
   return {
@@ -28993,14 +28942,195 @@ async function handleFind(resource, params, requestId) {
     ...nextTokenValue && { nextToken: nextTokenValue }
   };
 }
+__name(executeShadowQuery, "executeShadowQuery");
+async function executeShadowRecordQuery(resource, sort, perPage, nextToken, optimizableFilter, _requestId) {
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
+  let exclusiveStartKey;
+  if (nextToken) {
+    const decoded = decodeNextToken(nextToken);
+    exclusiveStartKey = {
+      PK: decoded.PK,
+      SK: decoded.SK
+    };
+  }
+  const { keyConditionExpression, expressionAttributeValues } = buildKeyCondition(
+    resource,
+    sort.field,
+    optimizableFilter
+  );
+  return await executeDynamoDBOperation(
+    () => dbClient2.send(
+      new import_lib_dynamodb5.QueryCommand({
+        TableName: tableName,
+        KeyConditionExpression: keyConditionExpression,
+        ExpressionAttributeValues: expressionAttributeValues,
+        ScanIndexForward: sort.order === "ASC",
+        Limit: perPage,
+        ExclusiveStartKey: exclusiveStartKey,
+        ConsistentRead: true
+      })
+    ),
+    "Query"
+  );
+}
+__name(executeShadowRecordQuery, "executeShadowRecordQuery");
+function buildKeyCondition(resource, sortField, optimizableFilter) {
+  const expressionAttributeValues = {
+    ":pk": resource
+  };
+  if (!optimizableFilter) {
+    return {
+      keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
+      expressionAttributeValues: {
+        ...expressionAttributeValues,
+        ":skPrefix": `${sortField}#`
+      }
+    };
+  }
+  const { operator, type } = optimizableFilter.parsed;
+  const value = optimizableFilter.value;
+  const encodedValue = encodeValueForShadowSK(value, type);
+  const skValue = `${sortField}#${encodedValue}`;
+  switch (operator) {
+    case "eq":
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skValue)",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skValue": `${skValue}#id#`
+        }
+      };
+    case "gt":
+      return {
+        keyConditionExpression: "PK = :pk AND SK > :skValue",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skValue": `${skValue}#id#~`
+        }
+      };
+    case "gte":
+      return {
+        keyConditionExpression: "PK = :pk AND SK >= :skValue",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skValue": `${skValue}#id#`
+        }
+      };
+    case "lt":
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix) AND SK < :skValue",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skPrefix": `${sortField}#`,
+          ":skValue": `${skValue}#id#`
+        }
+      };
+    case "lte":
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix) AND SK <= :skValue",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skPrefix": `${sortField}#`,
+          ":skValue": `${skValue}#id#~`
+        }
+      };
+    default:
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skPrefix": `${sortField}#`
+        }
+      };
+  }
+}
+__name(buildKeyCondition, "buildKeyCondition");
+function encodeValueForShadowSK(value, type) {
+  if (type === "number") {
+    return String(value).padStart(20, "0");
+  } else if (type === "date") {
+    return new Date(String(value)).toISOString();
+  } else if (type === "boolean") {
+    return String(value);
+  } else {
+    return String(value).replace(/#/g, "##").replace(/ /g, "#");
+  }
+}
+__name(encodeValueForShadowSK, "encodeValueForShadowSK");
+function extractRecordIds(shadowRecords) {
+  return shadowRecords.map((record) => {
+    const sk = record.SK;
+    const parts = sk.split("#id#");
+    return parts.length > 1 ? parts[1] : null;
+  }).filter((id) => id !== null);
+}
+__name(extractRecordIds, "extractRecordIds");
+async function fetchMainRecords(resource, recordIds, requestId) {
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
+  const uniqueRecordIds = Array.from(new Set(recordIds));
+  const batchGetResult = await executeDynamoDBOperation(
+    () => dbClient2.send(
+      new import_lib_dynamodb5.BatchGetCommand({
+        RequestItems: {
+          [tableName]: {
+            Keys: uniqueRecordIds.map((id) => ({
+              PK: resource,
+              SK: `id#${id}`
+            })),
+            ConsistentRead: true
+          }
+        }
+      })
+    ),
+    "BatchGetItem"
+  );
+  const mainRecords = batchGetResult.Responses?.[tableName] || [];
+  logger9.debug("Main records fetched", {
+    requestId,
+    resource,
+    requestedCount: uniqueRecordIds.length,
+    fetchedCount: mainRecords.length
+  });
+  return mainRecords;
+}
+__name(fetchMainRecords, "fetchMainRecords");
+
+// src/server/operations/find/handler.ts
+var logger10 = createLogger({
+  service: "find-handler",
+  level: process.env.LOG_LEVEL || "info"
+});
+async function handleFind(resource, params, requestId) {
+  logger10.debug("Executing find", {
+    requestId,
+    resource,
+    params
+  });
+  const config = initializeFindConfig();
+  const normalizedParams = normalizeFindParams(config, resource, params);
+  validateSortField(config, resource, normalizedParams.sort);
+  logger10.debug("Find parameters normalized", {
+    requestId,
+    resource,
+    sort: normalizedParams.sort,
+    pagination: normalizedParams.pagination,
+    filterCount: normalizedParams.parsedFilters.length
+  });
+  if (normalizedParams.sort.field === "id") {
+    return executeIdQuery(resource, normalizedParams, requestId);
+  }
+  return executeShadowQuery(resource, normalizedParams, requestId);
+}
 __name(handleFind, "handleFind");
 
 // src/server/operations/findMany.ts
-var import_lib_dynamodb5 = __toESM(require_dist_cjs60(), 1);
-var logger8 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb6 = __toESM(require_dist_cjs60(), 1);
+var logger11 = createLogger({ service: "records-lambda" });
 async function handleFindMany(resource, params, requestId) {
   const { ids } = params;
-  logger8.debug("Executing findMany", {
+  logger11.debug("Executing findMany", {
     requestId,
     resource,
     count: ids.length
@@ -29012,11 +29142,11 @@ async function handleFindMany(resource, params, requestId) {
   const tableName = getTableName();
   const keys = ids.map((id) => ({
     PK: resource,
-    SK: generateMainRecordSK(id)
+    SK: generateMainRecordSK2(id)
   }));
   const result = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb5.BatchGetCommand({
+      new import_lib_dynamodb6.BatchGetCommand({
         RequestItems: {
           [tableName]: {
             Keys: keys,
@@ -29029,7 +29159,7 @@ async function handleFindMany(resource, params, requestId) {
   );
   const items = result.Responses?.[tableName] || [];
   const records = items.map((item) => extractCleanRecord(item));
-  logger8.info("findMany succeeded", {
+  logger11.info("findMany succeeded", {
     requestId,
     resource,
     requested: ids.length,
@@ -29040,11 +29170,11 @@ async function handleFindMany(resource, params, requestId) {
 __name(handleFindMany, "handleFindMany");
 
 // src/server/operations/findManyReference.ts
-var import_lib_dynamodb6 = __toESM(require_dist_cjs60(), 1);
-var logger9 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb7 = __toESM(require_dist_cjs60(), 1);
+var logger12 = createLogger({ service: "records-lambda" });
 async function handleFindManyReference(resource, params, requestId) {
   const { target, id, filter, sort: sortParam, pagination } = params;
-  logger9.debug("Executing findManyReference", {
+  logger12.debug("Executing findManyReference", {
     requestId,
     resource,
     target,
@@ -29067,7 +29197,7 @@ async function handleFindManyReference(resource, params, requestId) {
   }
   const queryResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb6.QueryCommand({
+      new import_lib_dynamodb7.QueryCommand({
         TableName: tableName,
         KeyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
         ExpressionAttributeValues: {
@@ -29099,7 +29229,7 @@ async function handleFindManyReference(resource, params, requestId) {
   });
   const batchGetResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb6.BatchGetCommand({
+      new import_lib_dynamodb7.BatchGetCommand({
         RequestItems: {
           [tableName]: {
             Keys: recordIds.map((recordId) => ({
@@ -29134,7 +29264,7 @@ async function handleFindManyReference(resource, params, requestId) {
     queryResult.LastEvaluatedKey.PK,
     queryResult.LastEvaluatedKey.SK
   ) : void 0;
-  logger9.info("findManyReference succeeded", {
+  logger12.info("findManyReference succeeded", {
     requestId,
     resource,
     target,
@@ -29154,21 +29284,21 @@ async function handleFindManyReference(resource, params, requestId) {
 __name(handleFindManyReference, "handleFindManyReference");
 
 // src/server/operations/findOne.ts
-var import_lib_dynamodb7 = __toESM(require_dist_cjs60(), 1);
-var logger10 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb8 = __toESM(require_dist_cjs60(), 1);
+var logger13 = createLogger({ service: "records-lambda" });
 async function handleFindOne(resource, params, requestId) {
   const { id } = params;
-  logger10.debug("Executing findOne", {
+  logger13.debug("Executing findOne", {
     requestId,
     resource,
     id
   });
   const dbClient2 = getDBClient();
   const tableName = getTableName();
-  const sk = generateMainRecordSK(id);
+  const sk = generateMainRecordSK2(id);
   const result = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb7.GetCommand({
+      new import_lib_dynamodb8.GetCommand({
         TableName: tableName,
         Key: {
           PK: resource,
@@ -29183,7 +29313,7 @@ async function handleFindOne(resource, params, requestId) {
     throw new ItemNotFoundError(`Record not found: ${id}`, { resource, id });
   }
   const record = extractCleanRecord(result.Item);
-  logger10.info("findOne succeeded", {
+  logger13.info("findOne succeeded", {
     requestId,
     resource,
     id
@@ -29193,7 +29323,7 @@ async function handleFindOne(resource, params, requestId) {
 __name(handleFindOne, "handleFindOne");
 
 // src/server/operations/insertMany.ts
-var import_lib_dynamodb8 = __toESM(require_dist_cjs60(), 1);
+var import_lib_dynamodb9 = __toESM(require_dist_cjs60(), 1);
 
 // src/server/utils/timestamps.ts
 function getTimestampFields() {
@@ -29231,7 +29361,7 @@ function addUpdateTimestamp(data2) {
 __name(addUpdateTimestamp, "addUpdateTimestamp");
 
 // src/server/utils/ttl.ts
-var logger11 = createLogger({ service: "records-lambda" });
+var logger14 = createLogger({ service: "records-lambda" });
 function calculateTTL(resource, createdAt) {
   const envKey = `${resource.toUpperCase()}_TTL_DAYS`;
   const ttlDaysStr = process.env[envKey];
@@ -29240,13 +29370,13 @@ function calculateTTL(resource, createdAt) {
   }
   const ttlDays = parseInt(ttlDaysStr, 10);
   if (isNaN(ttlDays) || ttlDays <= 0) {
-    logger11.warn("Invalid TTL_DAYS value", { resource, envKey, value: ttlDaysStr });
+    logger14.warn("Invalid TTL_DAYS value", { resource, envKey, value: ttlDaysStr });
     return void 0;
   }
   const createdAtMs = new Date(createdAt).getTime();
   const ttlMs = createdAtMs + ttlDays * 24 * 60 * 60 * 1e3;
   const ttl = Math.floor(ttlMs / 1e3);
-  logger11.debug("TTL calculated", {
+  logger14.debug("TTL calculated", {
     resource,
     ttlDays,
     createdAt,
@@ -29259,7 +29389,7 @@ __name(calculateTTL, "calculateTTL");
 function addTTL(resource, recordData) {
   const createdAt = recordData.createdAt;
   if (!createdAt) {
-    logger11.warn("createdAt not found, skipping TTL calculation", { resource });
+    logger14.warn("createdAt not found, skipping TTL calculation", { resource });
     return recordData;
   }
   const ttl = calculateTTL(resource, createdAt);
@@ -29274,11 +29404,11 @@ function addTTL(resource, recordData) {
 __name(addTTL, "addTTL");
 
 // src/server/operations/insertMany.ts
-var logger12 = createLogger({ service: "records-lambda" });
+var logger15 = createLogger({ service: "records-lambda" });
 async function handleInsertMany(resource, params, requestId) {
   const { data: recordsData } = params;
   const startTime = Date.now();
-  logger12.debug("Executing insertMany", {
+  logger15.debug("Executing insertMany", {
     requestId,
     resource,
     count: recordsData.length
@@ -29309,7 +29439,7 @@ async function handleInsertMany(resource, params, requestId) {
       fullRecordData = addTTL(resource, fullRecordData);
       const shadowRecords = generateShadowRecords(fullRecordData, resource, shadowConfig);
       const shadowKeys = shadowRecords.map((shadow) => shadow.SK);
-      const mainSK = generateMainRecordSK(id);
+      const mainSK = generateMainRecordSK2(id);
       preparedRecords.push({
         id,
         fullRecordData,
@@ -29320,7 +29450,7 @@ async function handleInsertMany(resource, params, requestId) {
       const failedId = recordData.id || `temp-id-${i4}`;
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode(error2);
-      logger12.error("Failed to prepare record for creation", {
+      logger15.error("Failed to prepare record for creation", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -29378,7 +29508,7 @@ async function handleInsertMany(resource, params, requestId) {
     }
     await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb8.TransactWriteCommand({
+        new import_lib_dynamodb9.TransactWriteCommand({
           TransactItems: transactItems
         })
       ),
@@ -29480,10 +29610,10 @@ function getPreparationErrorCode(error2) {
 __name(getPreparationErrorCode, "getPreparationErrorCode");
 
 // src/server/operations/insertOne.ts
-var import_lib_dynamodb9 = __toESM(require_dist_cjs60(), 1);
-var logger13 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb10 = __toESM(require_dist_cjs60(), 1);
+var logger16 = createLogger({ service: "records-lambda" });
 async function handleInsertOne(resource, params, requestId) {
-  logger13.debug("Executing insertOne", {
+  logger16.debug("Executing insertOne", {
     requestId,
     resource
   });
@@ -29497,10 +29627,10 @@ async function handleInsertOne(resource, params, requestId) {
   recordData = addTTL(resource, recordData);
   const shadowConfig = getShadowConfig();
   const shadowRecords = generateShadowRecords(recordData, resource, shadowConfig);
-  const mainSK = generateMainRecordSK(id);
+  const mainSK = generateMainRecordSK2(id);
   await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb9.PutCommand({
+      new import_lib_dynamodb10.PutCommand({
         TableName: tableName,
         Item: {
           PK: resource,
@@ -29514,7 +29644,7 @@ async function handleInsertOne(resource, params, requestId) {
   for (const shadowRecord of shadowRecords) {
     await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb9.PutCommand({
+        new import_lib_dynamodb10.PutCommand({
           TableName: tableName,
           Item: shadowRecord
         })
@@ -29522,7 +29652,7 @@ async function handleInsertOne(resource, params, requestId) {
       "PutItem"
     );
   }
-  logger13.info("insertOne succeeded", {
+  logger16.info("insertOne succeeded", {
     requestId,
     resource,
     id,
@@ -29533,8 +29663,8 @@ async function handleInsertOne(resource, params, requestId) {
 __name(handleInsertOne, "handleInsertOne");
 
 // src/server/operations/updateMany.ts
-var import_lib_dynamodb10 = __toESM(require_dist_cjs60(), 1);
-var logger14 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb11 = __toESM(require_dist_cjs60(), 1);
+var logger17 = createLogger({ service: "records-lambda" });
 function applyJsonMergePatch(target, patch) {
   const result = { ...target };
   for (const [key, value] of Object.entries(patch)) {
@@ -29555,7 +29685,7 @@ __name(applyJsonMergePatch, "applyJsonMergePatch");
 async function handleUpdateMany(resource, params, requestId) {
   const { ids, data: patchData } = params;
   const startTime = Date.now();
-  logger14.debug("Executing updateMany", {
+  logger17.debug("Executing updateMany", {
     requestId,
     resource,
     count: ids.length
@@ -29573,11 +29703,11 @@ async function handleUpdateMany(resource, params, requestId) {
   const tableName = getTableName();
   const keys = ids.map((id) => ({
     PK: resource,
-    SK: generateMainRecordSK(id)
+    SK: generateMainRecordSK2(id)
   }));
   const batchGetResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb10.BatchGetCommand({
+      new import_lib_dynamodb11.BatchGetCommand({
         RequestItems: {
           [tableName]: {
             Keys: keys,
@@ -29612,7 +29742,7 @@ async function handleUpdateMany(resource, params, requestId) {
       });
       const newShadowRecords = generateShadowRecords(updatedData, resource, shadowConfig);
       const newShadowKeys = newShadowRecords.map((shadow) => shadow.SK);
-      const mainSK = generateMainRecordSK(id);
+      const mainSK = generateMainRecordSK2(id);
       preparedRecords.push({
         id,
         updatedData,
@@ -29625,7 +29755,7 @@ async function handleUpdateMany(resource, params, requestId) {
       const failedId = existingData.id || "unknown-id";
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode2(error2);
-      logger14.error("Failed to prepare record for update", {
+      logger17.error("Failed to prepare record for update", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -29695,7 +29825,7 @@ async function handleUpdateMany(resource, params, requestId) {
     }
     await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb10.TransactWriteCommand({
+        new import_lib_dynamodb11.TransactWriteCommand({
           TransactItems: transactItems
         })
       ),
@@ -29809,8 +29939,8 @@ function getPreparationErrorCode2(error2) {
 __name(getPreparationErrorCode2, "getPreparationErrorCode");
 
 // src/server/operations/updateOne.ts
-var import_lib_dynamodb11 = __toESM(require_dist_cjs60(), 1);
-var logger15 = createLogger({ service: "records-lambda" });
+var import_lib_dynamodb12 = __toESM(require_dist_cjs60(), 1);
+var logger18 = createLogger({ service: "records-lambda" });
 function applyJsonMergePatch2(target, patch) {
   const result = { ...target };
   for (const [key, value] of Object.entries(patch)) {
@@ -29830,17 +29960,17 @@ function applyJsonMergePatch2(target, patch) {
 __name(applyJsonMergePatch2, "applyJsonMergePatch");
 async function handleUpdateOne(resource, params, requestId) {
   const { id, data: patchData } = params;
-  logger15.debug("Executing updateOne", {
+  logger18.debug("Executing updateOne", {
     requestId,
     resource,
     id
   });
   const dbClient2 = getDBClient();
   const tableName = getTableName();
-  const mainSK = generateMainRecordSK(id);
+  const mainSK = generateMainRecordSK2(id);
   const getResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb11.GetCommand({
+      new import_lib_dynamodb12.GetCommand({
         TableName: tableName,
         Key: {
           PK: resource,
@@ -29903,13 +30033,13 @@ async function handleUpdateOne(resource, params, requestId) {
   }
   await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb11.TransactWriteCommand({
+      new import_lib_dynamodb12.TransactWriteCommand({
         TransactItems: transactItems
       })
     ),
     "TransactWriteItems"
   );
-  logger15.info("updateOne succeeded", {
+  logger18.info("updateOne succeeded", {
     requestId,
     resource,
     id,
@@ -31086,11 +31216,11 @@ var CognitoJwtVerifier = class _CognitoJwtVerifier extends JwtVerifierBase {
 CognitoJwtVerifier.USER_POOL_ID_REGEX = /^(?<region>[a-z]{2}-(gov-)?[a-z]+-\d)_[a-zA-Z0-9]+$/;
 
 // src/server/utils/auth.ts
-var logger16 = createLogger({ service: "records-lambda" });
+var logger19 = createLogger({ service: "records-lambda" });
 var verifierInstance = null;
 function getVerifier(userPoolId, clientId) {
   if (!verifierInstance) {
-    logger16.debug("Creating JWT verifier instance", { userPoolId, clientId });
+    logger19.debug("Creating JWT verifier instance", { userPoolId, clientId });
     verifierInstance = CognitoJwtVerifier.create({
       userPoolId,
       tokenUse: "id",
@@ -31103,18 +31233,18 @@ function getVerifier(userPoolId, clientId) {
 }
 __name(getVerifier, "getVerifier");
 async function verifyJwt(token, userPoolId, clientId) {
-  logger16.debug("Verifying JWT token with signature validation");
+  logger19.debug("Verifying JWT token with signature validation");
   try {
     const verifier = getVerifier(userPoolId, clientId);
     const payload2 = await verifier.verify(token);
-    logger16.debug("JWT token verified successfully", {
+    logger19.debug("JWT token verified successfully", {
       sub: payload2.sub,
       email: payload2.email,
       tokenUse: payload2.token_use
     });
     return payload2;
   } catch (error2) {
-    logger16.error("JWT verification failed", {
+    logger19.error("JWT verification failed", {
       error: error2 instanceof Error ? error2.message : String(error2)
     });
     let message = "JWT verification failed";
@@ -31155,15 +31285,15 @@ async function verifyAuthHeader(authHeader, userPoolId, clientId) {
 __name(verifyAuthHeader, "verifyAuthHeader");
 
 // src/server/handler.ts
-var logger17 = createLogger({
+var logger20 = createLogger({
   service: "records-lambda",
   level: process.env.LOG_LEVEL || "info"
 });
-logger17.info("Records Lambda started with automatic shadow field detection");
+logger20.info("Records Lambda started with automatic shadow field detection");
 var CORS_HEADERS = {};
 async function handler(event) {
   const requestId = event.requestContext.requestId;
-  logger17.info("Received request", {
+  logger20.info("Received request", {
     requestId,
     method: event.requestContext.http.method,
     path: event.requestContext.http.path
@@ -31184,7 +31314,7 @@ async function handler(event) {
     const hasAmzDate = event.headers["x-amz-date"] || event.headers["X-Amz-Date"];
     const hasAmzContentSha = event.headers["x-amz-content-sha256"] || event.headers["X-Amz-Content-Sha256"];
     const hasAwsSigV4Auth = authHeader?.startsWith("AWS4-HMAC-SHA256");
-    logger17.debug("Authentication check", {
+    logger20.debug("Authentication check", {
       requestId,
       hasAuthHeader: !!authHeader,
       hasAmzDate: !!hasAmzDate,
@@ -31194,7 +31324,7 @@ async function handler(event) {
     });
     const isIAMAuth = hasAwsSigV4Auth || !!(hasAmzDate && hasAmzContentSha);
     if (isIAMAuth) {
-      logger17.info("IAM authenticated request", {
+      logger20.info("IAM authenticated request", {
         requestId,
         sourceIp: event.requestContext.http.sourceIp
       });
@@ -31205,14 +31335,14 @@ async function handler(event) {
         throw new Error("COGNITO_USER_POOL_ID environment variable is required");
       }
       const jwtPayload = await verifyAuthHeader(authHeader, userPoolId, clientId);
-      logger17.debug("Cognito JWT verified", {
+      logger20.debug("Cognito JWT verified", {
         requestId,
         sub: jwtPayload.sub,
         email: jwtPayload.email
       });
     }
     const request2 = parseRequestBody(event.body);
-    logger17.info("Parsed request", {
+    logger20.info("Parsed request", {
       requestId,
       operation: request2.op,
       resource: request2.resource
@@ -31255,7 +31385,7 @@ function parseRequestBody(body) {
 __name(parseRequestBody, "parseRequestBody");
 async function executeOperation(request2, requestId) {
   const { op: op2, resource } = request2;
-  logger17.debug("Executing operation", {
+  logger20.debug("Executing operation", {
     requestId,
     operation: op2,
     resource
@@ -31265,7 +31395,7 @@ async function executeOperation(request2, requestId) {
       const mongoParams = request2.params;
       const { filter = {}, options = {} } = mongoParams;
       const { sort, limit, nextToken } = options;
-      logger17.debug("Processing find operation", {
+      logger20.debug("Processing find operation", {
         requestId,
         hasSort: !!sort,
         sortType: typeof sort,
@@ -31383,7 +31513,7 @@ function createSuccessResponse(data2, requestId) {
     success: true,
     data: data2
   };
-  logger17.info("Request succeeded", { requestId });
+  logger20.info("Request succeeded", { requestId });
   return {
     statusCode: 200,
     headers: {
@@ -31404,7 +31534,7 @@ function createErrorResponse(code, message, statusCode, requestId, details) {
       details
     }
   };
-  logger17.error("Request failed", {
+  logger20.error("Request failed", {
     requestId,
     code,
     message,
@@ -31439,7 +31569,7 @@ function handleError(error2, requestId) {
     );
   }
   if (error2 instanceof Error) {
-    logger17.error("Error stack trace", {
+    logger20.error("Error stack trace", {
       requestId,
       stack: error2.stack,
       message: error2.message