@exabugs/dynamodb-client 1.26.0 → 1.27.0

package/dist/server/handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.26.0
-// Built: 2026-11-14T13:53:42.297Z
+// @exabugs/dynamodb-client v1.27.0
+// Built: 2026-11-15T08:17:35.832Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -2194,10 +2194,10 @@ var init_command = __esm({
           this.middlewareStack.use(mw);
         }
         const stack = clientStack.concat(this.middlewareStack);
-        const { logger: logger27 } = configuration;
+        const { logger: logger26 } = configuration;
         const additionalSmithyContext = additionalContext[import_types2.SMITHY_CONTEXT_KEY];
         const handlerExecutionContext = {
-          logger: logger27,
+          logger: logger26,
           clientName,
           commandName,
           inputFilterSensitiveLog,
@@ -4166,19 +4166,19 @@ var init_ProviderError = __esm({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger27;
+        let logger26;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger27 = void 0;
+          logger26 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger27 = options.logger;
+          logger26 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger27?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger26?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -4766,8 +4766,8 @@ var init_configLoader = __esm({
     init_fromSharedConfigFiles();
     init_fromStatic();
     loadConfig = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger27 } = configuration;
-      const envOptions = { signingName, logger: logger27 };
+      const { signingName, logger: logger26 } = configuration;
+      const envOptions = { signingName, logger: logger26 };
       return memoize(chain(fromEnv(environmentVariableSelector, envOptions), fromSharedConfigFiles(configFileSelector, configuration), fromStatic(defaultValue)));
     }, "loadConfig");
   }
@@ -6490,7 +6490,7 @@ var init_resolveEndpoint = __esm({
     init_types3();
     init_utils();
     resolveEndpoint = /* @__PURE__ */ __name((ruleSetObject, options) => {
-      const { endpointParams, logger: logger27 } = options;
+      const { endpointParams, logger: logger26 } = options;
       const { parameters, rules } = ruleSetObject;
       options.logger?.debug?.(`${debugId} Initial EndpointParams: ${toDebugString(endpointParams)}`);
       for (const paramKey in parameters) {
@@ -6507,7 +6507,7 @@ var init_resolveEndpoint = __esm({
           throw new EndpointError(`Missing required parameter: '${paramKey}'`);
         }
       }
-      const endpoint = evaluateRules(rules, { endpointParams, logger: logger27, referenceRecord: {} });
+      const endpoint = evaluateRules(rules, { endpointParams, logger: logger26, referenceRecord: {} });
       options.logger?.debug?.(`${debugId} Resolved endpoint: ${toDebugString(endpoint)}`);
       return endpoint;
     }, "resolveEndpoint");
@@ -6947,7 +6947,7 @@ var init_ByteArrayCollector = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.browser.js
-function createBufferedReadableStream(upstream, size, logger27) {
+function createBufferedReadableStream(upstream, size, logger26) {
   const reader = upstream.getReader();
   let streamBufferingLoggedWarning = false;
   let bytesSeen = 0;
@@ -6985,7 +6985,7 @@ function createBufferedReadableStream(upstream, size, logger27) {
         const newSize = merge(buffers, mode, chunk);
         if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
           streamBufferingLoggedWarning = true;
-          logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+          logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
         }
         if (newSize >= size) {
           controller.enqueue(flush(buffers, mode));
@@ -7049,9 +7049,9 @@ var init_createBufferedReadable_browser = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.js
-function createBufferedReadable(upstream, size, logger27) {
+function createBufferedReadable(upstream, size, logger26) {
   if (isReadableStream(upstream)) {
-    return createBufferedReadableStream(upstream, size, logger27);
+    return createBufferedReadableStream(upstream, size, logger26);
   }
   const downstream = new import_node_stream3.Readable({ read() {
   } });
@@ -7084,7 +7084,7 @@ function createBufferedReadable(upstream, size, logger27) {
       const newSize = merge(buffers, mode, chunk);
       if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
         streamBufferingLoggedWarning = true;
-        logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+        logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
       }
       if (newSize >= size) {
         downstream.push(flush(buffers, mode));
@@ -12769,7 +12769,7 @@ var init_constants5 = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/parseRetryAfterHeader.js
-function parseRetryAfterHeader(response, logger27) {
+function parseRetryAfterHeader(response, logger26) {
   if (!HttpResponse.isInstance(response)) {
     return;
   }
@@ -12786,8 +12786,8 @@ function parseRetryAfterHeader(response, logger27) {
           const date2 = parseRfc7231DateTime(retryAfter);
           retryAfterSeconds = (date2.getTime() - Date.now()) / 1e3;
         } catch (e5) {
-          logger27?.trace?.("Failed to parse retry-after header");
-          logger27?.trace?.(e5);
+          logger26?.trace?.("Failed to parse retry-after header");
+          logger26?.trace?.(e5);
         }
       } else if (retryAfter.match(/ GMT, ((\d+)|(\d+\.\d+))$/)) {
         retryAfterSeconds = Number(retryAfter.match(/ GMT, ([\d.]+)$/)?.[1]);
@@ -12804,15 +12804,15 @@ function parseRetryAfterHeader(response, logger27) {
       const v = response.headers[header];
       const backoffMilliseconds = Number(v);
       if (isNaN(backoffMilliseconds)) {
-        logger27?.trace?.(`Failed to parse x-amz-retry-after=${v}`);
+        logger26?.trace?.(`Failed to parse x-amz-retry-after=${v}`);
         return;
       }
       return new Date(Date.now() + backoffMilliseconds);
     }
   }
 }
-function getRetryAfterHint(response, logger27) {
-  return parseRetryAfterHeader(response, logger27);
+function getRetryAfterHint(response, logger26) {
+  return parseRetryAfterHeader(response, logger26);
 }
 var init_parseRetryAfterHeader = __esm({
   "node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/parseRetryAfterHeader.js"() {
@@ -12924,12 +12924,12 @@ var init_retryMiddleware = __esm({
     __name(bindRetryMiddleware, "bindRetryMiddleware");
     cooldown = /* @__PURE__ */ __name((ms) => new Promise((resolve) => setTimeout(resolve, ms)), "cooldown");
     isRetryStrategyV2 = /* @__PURE__ */ __name((retryStrategy) => typeof retryStrategy.acquireInitialRetryToken !== "undefined" && typeof retryStrategy.refreshRetryTokenForRetry !== "undefined" && typeof retryStrategy.recordSuccess !== "undefined", "isRetryStrategyV2");
-    getRetryErrorInfo = /* @__PURE__ */ __name((error2, logger27) => {
+    getRetryErrorInfo = /* @__PURE__ */ __name((error2, logger26) => {
       const errorInfo = {
         error: error2,
         errorType: getRetryErrorType(error2)
       };
-      const retryAfterHint = parseRetryAfterHeader(error2.$response, logger27);
+      const retryAfterHint = parseRetryAfterHeader(error2.$response, logger26);
       if (retryAfterHint) {
         errorInfo.retryAfterHint = retryAfterHint;
       }
@@ -13804,12 +13804,12 @@ var init_loggerMiddleware = __esm({
     loggerMiddleware = /* @__PURE__ */ __name(() => (next, context) => async (args) => {
       try {
         const response = await next(args);
-        const { clientName, commandName, logger: logger27, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger26, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog, overrideOutputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
         const outputFilterSensitiveLog = overrideOutputFilterSensitiveLog ?? context.outputFilterSensitiveLog;
         const { $metadata, ...outputWithoutMetadata } = response.output;
-        logger27?.info?.({
+        logger26?.info?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -13818,10 +13818,10 @@ var init_loggerMiddleware = __esm({
         });
         return response;
       } catch (error2) {
-        const { clientName, commandName, logger: logger27, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger26, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
-        logger27?.error?.({
+        logger26?.error?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -14583,11 +14583,11 @@ function resolveUserAgentConfig(input) {
     userAgentAppId: /* @__PURE__ */ __name(async () => {
       const appId = await normalizedAppIdProvider();
       if (!isValidUserAgentAppId(appId)) {
-        const logger27 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
+        const logger26 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
         if (typeof appId !== "string") {
-          logger27?.warn("userAgentAppId must be a string or undefined.");
+          logger26?.warn("userAgentAppId must be a string or undefined.");
         } else if (appId.length > 50) {
-          logger27?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
+          logger26?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
         }
       }
       return appId;
@@ -19526,7 +19526,7 @@ var require_dist_cjs6 = __commonJS({
     var CMDS_IP = "169.254.170.2";
     var GREENGRASS_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1"]);
     var GREENGRASS_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger27 }) => {
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger26 }) => {
       if (process.env[ENV_CMDS_RELATIVE_URI]) {
         return {
           hostname: CMDS_IP,
@@ -19538,18 +19538,18 @@ var require_dist_cjs6 = __commonJS({
         try {
           parsed = new URL(process.env[ENV_CMDS_FULL_URI]);
         } catch {
-          throw new CredentialsProviderError2(`${process.env[ENV_CMDS_FULL_URI]} is not a valid container metadata service URL`, { tryNextLink: false, logger: logger27 });
+          throw new CredentialsProviderError2(`${process.env[ENV_CMDS_FULL_URI]} is not a valid container metadata service URL`, { tryNextLink: false, logger: logger26 });
         }
         if (!parsed.hostname || !GREENGRASS_HOSTS.has(parsed.hostname)) {
           throw new CredentialsProviderError2(`${parsed.hostname} is not a valid container metadata service hostname`, {
             tryNextLink: false,
-            logger: logger27
+            logger: logger26
           });
         }
         if (!parsed.protocol || !GREENGRASS_PROTOCOLS.has(parsed.protocol)) {
           throw new CredentialsProviderError2(`${parsed.protocol} is not a valid container metadata service protocol`, {
             tryNextLink: false,
-            logger: logger27
+            logger: logger26
           });
         }
         return {
@@ -19561,7 +19561,7 @@ var require_dist_cjs6 = __commonJS({
       }
       throw new CredentialsProviderError2(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
         tryNextLink: false,
-        logger: logger27
+        logger: logger26
       });
     }, "getCmdsUri");
     var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends CredentialsProviderError2 {
@@ -19616,10 +19616,10 @@ var require_dist_cjs6 = __commonJS({
     var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
     var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
     var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
-    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger27) => {
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger26) => {
       const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
       const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
-      logger27.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+      logger26.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
 For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
       return {
@@ -19629,19 +19629,19 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       };
     }, "getExtendedInstanceMetadataCredentials");
     var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
-      const logger27 = options?.logger || console;
+      const logger26 = options?.logger || console;
       let pastCredentials;
       return async () => {
         let credentials;
         try {
           credentials = await provider();
           if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
-            credentials = getExtendedInstanceMetadataCredentials(credentials, logger27);
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger26);
           }
         } catch (e5) {
           if (pastCredentials) {
-            logger27.warn("Credential renew failed: ", e5);
-            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger27);
+            logger26.warn("Credential renew failed: ", e5);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger26);
           } else {
             throw e5;
           }
@@ -19658,7 +19658,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
     var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
     var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
       let disableFetchToken = false;
-      const { logger: logger27, profile } = init;
+      const { logger: logger26, profile } = init;
       const { timeout, maxRetries } = providerConfigFromInit(init);
       const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
         const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN2] == null;
@@ -19722,7 +19722,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       return async () => {
         const endpoint = await getInstanceMetadataEndpoint();
         if (disableFetchToken) {
-          logger27?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          logger26?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
           return getCredentials(maxRetries, { ...endpoint, timeout });
         } else {
           let token;
@@ -19736,7 +19736,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
             } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
               disableFetchToken = true;
             }
-            logger27?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            logger26?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
             return getCredentials(maxRetries, { ...endpoint, timeout });
           }
           return getCredentials(maxRetries, {
@@ -19861,7 +19861,7 @@ var require_dist_cjs7 = __commonJS({
       }
       return timing.setTimeout(registerTimeout.bind(null, DEFER_EVENT_LISTENER_TIME$2), DEFER_EVENT_LISTENER_TIME$2);
     }, "setConnectionTimeout");
-    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger27) => {
+    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger26) => {
       if (timeoutInMs) {
         return timing.setTimeout(() => {
           let msg = `@smithy/node-http-handler - [${throwOnRequestTimeout ? "ERROR" : "WARN"}] a request has exceeded the configured ${timeoutInMs} ms requestTimeout.`;
@@ -19874,7 +19874,7 @@ var require_dist_cjs7 = __commonJS({
             reject(error2);
           } else {
             msg += ` Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.`;
-            logger27?.warn?.(msg);
+            logger26?.warn?.(msg);
           }
         }, timeoutInMs);
       }
@@ -20015,7 +20015,7 @@ var require_dist_cjs7 = __commonJS({
         }
         return new _NodeHttpHandler(instanceOrOptions);
       }
-      static checkSocketUsage(agent, socketWarningTimestamp, logger27 = console) {
+      static checkSocketUsage(agent, socketWarningTimestamp, logger26 = console) {
         const { sockets, requests, maxSockets } = agent;
         if (typeof maxSockets !== "number" || maxSockets === Infinity) {
           return socketWarningTimestamp;
@@ -20032,7 +20032,7 @@ var require_dist_cjs7 = __commonJS({
             const socketsInUse = sockets[origin]?.length ?? 0;
             const requestsEnqueued = requests[origin]?.length ?? 0;
             if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
-              logger27?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
+              logger26?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
 See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
 or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`);
               return Date.now();
@@ -20061,7 +20061,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           this.config = await this.configProvider;
         }
         const config = this.config;
-        const logger27 = config.logger;
+        const logger26 = config.logger;
         const isSSL = request2.protocol === "https:";
         if (!isSSL && !this.config.httpAgent) {
           this.config.httpAgent = await this.config.httpAgentProvider();
@@ -20105,7 +20105,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             });
           }
           socketWarningTimeoutId = timing.setTimeout(() => {
-            this.socketWarningTimestamp = _NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, logger27);
+            this.socketWarningTimestamp = _NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, logger26);
           }, config.socketAcquisitionWarningTimeout ?? (config.requestTimeout ?? 2e3) + (config.connectionTimeout ?? 1e3));
           const queryString = request2.query ? buildQueryString2(request2.query) : "";
           let auth = void 0;
@@ -20169,7 +20169,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           }
           const effectiveRequestTimeout = requestTimeout ?? config.requestTimeout;
           connectionTimeoutId = setConnectionTimeout(req, reject, config.connectionTimeout);
-          requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, logger27 ?? console);
+          requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, logger26 ?? console);
           const defaultSocketTimeout = config.socketTimeout === void 0 ? resolveDefaultSocketTimeout(config) : void 0;
           if (defaultSocketTimeout) {
             socketTimeoutId = setSocketTimeout(req, reject, defaultSocketTimeout, true);
@@ -20212,7 +20212,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         return this.config ?? {};
       }
       resolveDefaultConfig(options) {
-        const { requestTimeout, connectionTimeout, socketTimeout, socketAcquisitionWarningTimeout, httpAgent, httpsAgent, throwOnRequestTimeout, logger: logger27 } = options || {};
+        const { requestTimeout, connectionTimeout, socketTimeout, socketAcquisitionWarningTimeout, httpAgent, httpsAgent, throwOnRequestTimeout, logger: logger26 } = options || {};
         const keepAlive = true;
         const maxSockets = 50;
         let httpAgentPromise;
@@ -20241,7 +20241,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             }
             return new node_https.Agent({ keepAlive, maxSockets, ...httpsAgent });
           })(),
-          logger: logger27
+          logger: logger26
         };
       }
     };
@@ -20687,7 +20687,7 @@ var require_dist_cjs8 = __commonJS({
     var ECS_CONTAINER_HOST = "169.254.170.2";
     var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
     var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-    var checkUrl = /* @__PURE__ */ __name((url, logger27) => {
+    var checkUrl = /* @__PURE__ */ __name((url, logger26) => {
       if (url.protocol === "https:") {
         return;
       }
@@ -20714,7 +20714,7 @@ var require_dist_cjs8 = __commonJS({
       throw new CredentialsProviderError2(`URL not accepted. It must either be HTTPS or match one of the following:
   - loopback CIDR 127.0.0.0/8 or [::1/128]
   - ECS container host 169.254.170.2
-  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger27 });
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger26 });
     }, "checkUrl");
     function createGetRequest(url) {
       return new HttpRequest2({
@@ -20730,13 +20730,13 @@ var require_dist_cjs8 = __commonJS({
       });
     }
     __name(createGetRequest, "createGetRequest");
-    async function getCredentials(response, logger27) {
+    async function getCredentials(response, logger26) {
       const stream = sdkStreamMixin3(response.body);
       const str = await stream.transformToString();
       if (response.statusCode === 200) {
         const parsed = JSON.parse(str);
         if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-          throw new CredentialsProviderError2("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger27 });
+          throw new CredentialsProviderError2("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger26 });
         }
         return {
           accessKeyId: parsed.AccessKeyId,
@@ -20751,12 +20751,12 @@ var require_dist_cjs8 = __commonJS({
           parsedBody = JSON.parse(str);
         } catch (e5) {
         }
-        throw Object.assign(new CredentialsProviderError2(`Server responded with status: ${response.statusCode}`, { logger: logger27 }), {
+        throw Object.assign(new CredentialsProviderError2(`Server responded with status: ${response.statusCode}`, { logger: logger26 }), {
           Code: parsedBody.Code,
           Message: parsedBody.Message
         });
       }
-      throw new CredentialsProviderError2(`Server responded with status: ${response.statusCode}`, { logger: logger27 });
+      throw new CredentialsProviderError2(`Server responded with status: ${response.statusCode}`, { logger: logger26 });
     }
     __name(getCredentials, "getCredentials");
     var retryWrapper = /* @__PURE__ */ __name((toRetry, maxRetries, delayMs) => {
@@ -25470,14 +25470,14 @@ var require_dist_cjs10 = __commonJS({
     var { getBearerTokenEnvKey: getBearerTokenEnvKey2 } = (init_httpAuthSchemes2(), __toCommonJS(httpAuthSchemes_exports));
     var { TokenProviderError: TokenProviderError2, getSSOTokenFilepath: getSSOTokenFilepath2, parseKnownFiles: parseKnownFiles2, getProfileName: getProfileName2, loadSsoSessionData: loadSsoSessionData2, getSSOTokenFromFile: getSSOTokenFromFile2, memoize: memoize2, chain: chain2 } = (init_config2(), __toCommonJS(config_exports));
     var { promises } = require("node:fs");
-    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger27, signingName } = {}) => async () => {
-      logger27?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
+    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger26, signingName } = {}) => async () => {
+      logger26?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
       if (!signingName) {
-        throw new TokenProviderError2("Please pass 'signingName' to compute environment variable key", { logger: logger27 });
+        throw new TokenProviderError2("Please pass 'signingName' to compute environment variable key", { logger: logger26 });
       }
       const bearerTokenKey = getBearerTokenEnvKey2(signingName);
       if (!(bearerTokenKey in process.env)) {
-        throw new TokenProviderError2(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger27 });
+        throw new TokenProviderError2(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger26 });
       }
       const token = { token: process.env[bearerTokenKey] };
       setTokenFeature2(token, "BEARER_SERVICE_ENV_VARS", "3");
@@ -25612,8 +25612,8 @@ var require_dist_cjs10 = __commonJS({
         inFlightRefreshes.delete(ssoSessionName);
       }
     }, "fromSso");
-    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger27 }) => async () => {
-      logger27?.debug("@aws-sdk/token-providers - fromStatic");
+    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger26 }) => async () => {
+      logger26?.debug("@aws-sdk/token-providers - fromStatic");
       if (!token || !token.token) {
         throw new TokenProviderError2(`Please pass a valid token to fromStatic`, false);
       }
@@ -26363,7 +26363,7 @@ var require_dist_cjs11 = __commonJS({
     var { fromSso } = require_dist_cjs10();
     var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
     var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
-    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger27 }) => {
+    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger26 }) => {
       let token;
       const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
       if (ssoSession) {
@@ -26375,7 +26375,7 @@ var require_dist_cjs11 = __commonJS({
             ignoreCache,
             clientConfig,
             parentClientConfig,
-            logger: logger27
+            logger: logger26
           })({ callerClientConfig });
           token = {
             accessToken: _token.token,
@@ -26384,7 +26384,7 @@ var require_dist_cjs11 = __commonJS({
         } catch (e5) {
           throw new CredentialsProviderError2(e5.message, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger27
+            logger: logger26
           });
         }
       } else {
@@ -26393,14 +26393,14 @@ var require_dist_cjs11 = __commonJS({
         } catch (e5) {
           throw new CredentialsProviderError2(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger27
+            logger: logger26
           });
         }
       }
       if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
         throw new CredentialsProviderError2(`The SSO session associated with this profile has expired. ${refreshMessage}`, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger27
+          logger: logger26
         });
       }
       const { accessToken } = token;
@@ -26420,14 +26420,14 @@ var require_dist_cjs11 = __commonJS({
       } catch (e5) {
         throw new CredentialsProviderError2(e5, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger27
+          logger: logger26
         });
       }
       const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {} } = ssoResp;
       if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
         throw new CredentialsProviderError2("SSO returns an invalid temporary credential.", {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger27
+          logger: logger26
         });
       }
       const credentials = {
@@ -26445,11 +26445,11 @@ var require_dist_cjs11 = __commonJS({
       }
       return credentials;
     }, "resolveSSOCredentials");
-    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger27) => {
+    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger26) => {
       const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
       if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
         throw new CredentialsProviderError2(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger27 });
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger26 });
       }
       return profile;
     }, "validateSsoProfile");
@@ -28348,9 +28348,9 @@ var init_defaultStsRoleAssumers = __esm({
       return async (sourceCreds, params) => {
         closureSourceCreds = sourceCreds;
         if (!stsClient) {
-          const { logger: logger27 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger26 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger27,
+            logger: logger26,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -28361,7 +28361,7 @@ var init_defaultStsRoleAssumers = __esm({
             credentialDefaultProvider: /* @__PURE__ */ __name(() => async () => closureSourceCreds, "credentialDefaultProvider"),
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger27
+            logger: logger26
           });
         }
         const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));
@@ -28385,9 +28385,9 @@ var init_defaultStsRoleAssumers = __esm({
       let stsClient;
       return async (params) => {
         if (!stsClient) {
-          const { logger: logger27 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger26 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger27,
+            logger: logger26,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -28397,7 +28397,7 @@ var init_defaultStsRoleAssumers = __esm({
             profile,
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger27
+            logger: logger26
           });
         }
         const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
@@ -29528,7 +29528,7 @@ var require_dist_cjs14 = __commonJS({
           return this.toCredentials(freshToken.accessToken);
         }
         const { SigninClient: SigninClient2, CreateOAuth2TokenCommand: CreateOAuth2TokenCommand2 } = (init_signin(), __toCommonJS(signin_exports));
-        const { logger: logger27, userAgentAppId } = this.callerClientConfig ?? {};
+        const { logger: logger26, userAgentAppId } = this.callerClientConfig ?? {};
         const isH22 = /* @__PURE__ */ __name((requestHandler2) => {
           return requestHandler2?.metadata?.handlerProtocol === "h2";
         }, "isH2");
@@ -29541,7 +29541,7 @@ var require_dist_cjs14 = __commonJS({
           },
           region,
           requestHandler,
-          logger: logger27,
+          logger: logger26,
           userAgentAppId,
           ...this.init?.clientConfig
         });
@@ -29789,7 +29789,7 @@ var require_dist_cjs15 = __commonJS({
       setCredentialFeature2(credentials, "CREDENTIALS_PROCESS", "w");
       return credentials;
     }, "getValidatedProcessCredentials");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger27) => {
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger26) => {
       const profile = profiles[profileName];
       if (profiles[profileName]) {
         const credentialProcess = profile["credential_process"];
@@ -29805,14 +29805,14 @@ var require_dist_cjs15 = __commonJS({
             }
             return getValidatedProcessCredentials(profileName, data, profiles);
           } catch (error2) {
-            throw new CredentialsProviderError2(error2.message, { logger: logger27 });
+            throw new CredentialsProviderError2(error2.message, { logger: logger26 });
           }
         } else {
-          throw new CredentialsProviderError2(`Profile ${profileName} did not contain credential_process.`, { logger: logger27 });
+          throw new CredentialsProviderError2(`Profile ${profileName} did not contain credential_process.`, { logger: logger26 });
         }
       } else {
         throw new CredentialsProviderError2(`Profile ${profileName} could not be found in shared credentials file.`, {
-          logger: logger27
+          logger: logger26
         });
       }
     }, "resolveProcessCredentials");
@@ -29892,21 +29892,21 @@ var require_dist_cjs17 = __commonJS({
   "node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js"(exports2) {
     var { CredentialsProviderError: CredentialsProviderError2, chain: chain2, getProfileName: getProfileName2, parseKnownFiles: parseKnownFiles2 } = (init_config2(), __toCommonJS(config_exports));
     var { setCredentialFeature: setCredentialFeature2 } = (init_client3(), __toCommonJS(client_exports2));
-    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger27) => {
+    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger26) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
           const { fromHttp } = require_dist_cjs8();
           const { fromContainerMetadata } = require_dist_cjs6();
-          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
           return async () => chain2(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         }, "EcsContainer"),
         Ec2InstanceMetadata: /* @__PURE__ */ __name(async (options) => {
-          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
           const { fromInstanceMetadata } = require_dist_cjs6();
           return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         }, "Ec2InstanceMetadata"),
         Environment: /* @__PURE__ */ __name(async (options) => {
-          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
           const { fromEnv: fromEnv2 } = require_dist_cjs5();
           return async () => fromEnv2(options)().then(setNamedProvider);
         }, "Environment")
@@ -29914,24 +29914,24 @@ var require_dist_cjs17 = __commonJS({
       if (credentialSource in sourceProvidersMap) {
         return sourceProvidersMap[credentialSource];
       } else {
-        throw new CredentialsProviderError2(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger27 });
+        throw new CredentialsProviderError2(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger26 });
       }
     }, "resolveCredentialSource");
     var setNamedProvider = /* @__PURE__ */ __name((creds) => setCredentialFeature2(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p"), "setNamedProvider");
-    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger27 } = {}) => {
-      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger27 }) || isCredentialSourceProfile(arg, { profile, logger: logger27 }));
+    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger26 } = {}) => {
+      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger26 }) || isCredentialSourceProfile(arg, { profile, logger: logger26 }));
     }, "isAssumeRoleProfile");
-    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger27 }) => {
+    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger26 }) => {
       const withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
       if (withSourceProfile) {
-        logger27?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
+        logger26?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
       }
       return withSourceProfile;
     }, "isAssumeRoleWithSourceProfile");
-    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger27 }) => {
+    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger26 }) => {
       const withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
       if (withProviderProfile) {
-        logger27?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
+        logger26?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
       }
       return withProviderProfile;
     }, "isCredentialSourceProfile");
@@ -36066,7 +36066,7 @@ var require_dist_cjs20 = __commonJS({
         __name(this, "PutResourcePolicyCommand");
       }
     };
-    var QueryCommand5 = class extends command5(_ep2, _mw05, "Query", Query$) {
+    var QueryCommand6 = class extends command5(_ep2, _mw05, "Query", Query$) {
       static {
         __name(this, "QueryCommand");
       }
@@ -36160,7 +36160,7 @@ var require_dist_cjs20 = __commonJS({
     var paginateListExports = createPaginator2(DynamoDBClient2, ListExportsCommand, "NextToken", "NextToken", "MaxResults");
     var paginateListImports = createPaginator2(DynamoDBClient2, ListImportsCommand, "NextToken", "NextToken", "PageSize");
     var paginateListTables = createPaginator2(DynamoDBClient2, ListTablesCommand, "ExclusiveStartTableName", "LastEvaluatedTableName", "Limit");
-    var paginateQuery = createPaginator2(DynamoDBClient2, QueryCommand5, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
+    var paginateQuery = createPaginator2(DynamoDBClient2, QueryCommand6, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var paginateScan = createPaginator2(DynamoDBClient2, ScanCommand, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var checkState$5 = /* @__PURE__ */ __name(async (client, input) => {
       let reason;
@@ -36422,7 +36422,7 @@ var require_dist_cjs20 = __commonJS({
       ListTagsOfResourceCommand,
       PutItemCommand,
       PutResourcePolicyCommand,
-      QueryCommand: QueryCommand5,
+      QueryCommand: QueryCommand6,
       RestoreTableFromBackupCommand,
       RestoreTableToPointInTimeCommand,
       ScanCommand,
@@ -37036,7 +37036,7 @@ var require_dist_cjs20 = __commonJS({
     exports2.PutResourcePolicyInput$ = PutResourcePolicyInput$;
     exports2.PutResourcePolicyOutput$ = PutResourcePolicyOutput$;
     exports2.Query$ = Query$;
-    exports2.QueryCommand = QueryCommand5;
+    exports2.QueryCommand = QueryCommand6;
     exports2.QueryInput$ = QueryInput$;
     exports2.QueryOutput$ = QueryOutput$;
     exports2.Replica$ = Replica$;
@@ -37964,7 +37964,7 @@ var require_dist_cjs22 = __commonJS({
         return async () => handler2(this.clientCommand);
       }
     };
-    var QueryCommand5 = class extends DynamoDBDocumentClientCommand {
+    var QueryCommand6 = class extends DynamoDBDocumentClientCommand {
       static {
         __name(this, "QueryCommand");
       }
@@ -38215,7 +38215,7 @@ var require_dist_cjs22 = __commonJS({
         const hasSerializer = middlewares.some((m3) => m3.includes?.("serializerMiddleware"));
         if (!hasSerializer) {
           const configuredLogger = this.config.logger;
-          const logger27 = configuredLogger && !configuredLogger.constructor?.name.includes("NoOp") ? configuredLogger : console;
+          const logger26 = configuredLogger && !configuredLogger.constructor?.name.includes("NoOp") ? configuredLogger : console;
           const substituteClient = new DynamoDBClient2(Object.assign({}, this.config, {
             defaultUserAgentProvider: void 0,
             retryStrategy: void 0,
@@ -38228,7 +38228,7 @@ var require_dist_cjs22 = __commonJS({
             this.middlewareStack = substituteClient.middlewareStack;
             this.config = substituteClient.config;
             this.config.translateConfig = translateConfig;
-            logger27.warn("@aws-sdk/lib-dynamodb - WARN: incompatible version of DynamoDBClient given to DynamoDBDocumentClient. We have forwarded your client's configuration to a newer version of DynamoDBClient in the dependency closure to instantiate DynamoDBDocumentClient.");
+            logger26.warn("@aws-sdk/lib-dynamodb - WARN: incompatible version of DynamoDBClient given to DynamoDBDocumentClient. We have forwarded your client's configuration to a newer version of DynamoDBClient in the dependency closure to instantiate DynamoDBDocumentClient.");
           }
         }
       }
@@ -38238,7 +38238,7 @@ var require_dist_cjs22 = __commonJS({
       destroy() {
       }
     };
-    var paginateQuery = createPaginator2(DynamoDBDocumentClient2, QueryCommand5, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
+    var paginateQuery = createPaginator2(DynamoDBDocumentClient2, QueryCommand6, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     var paginateScan = createPaginator2(DynamoDBDocumentClient2, ScanCommand, "ExclusiveStartKey", "LastEvaluatedKey", "Limit");
     async function* paginatedBatchGet(config, input) {
       let requestItems = input.RequestItems;
@@ -38390,7 +38390,7 @@ var require_dist_cjs22 = __commonJS({
         }
       }
       query(args, optionsOrCb, cb) {
-        const command5 = new QueryCommand5(args);
+        const command5 = new QueryCommand6(args);
         if (typeof optionsOrCb === "function") {
           this.send(command5, optionsOrCb);
         } else if (typeof cb === "function") {
@@ -38481,7 +38481,7 @@ var require_dist_cjs22 = __commonJS({
     exports2.ExportTableToPointInTimeCommand = ExportTableToPointInTimeCommand;
     exports2.GetCommand = GetCommand;
     exports2.PutCommand = PutCommand;
-    exports2.QueryCommand = QueryCommand5;
+    exports2.QueryCommand = QueryCommand6;
     exports2.ScanCommand = ScanCommand;
     exports2.SearchVectorsCommand = SearchVectorsCommand;
     exports2.TransactGetCommand = TransactGetCommand;
@@ -39034,6 +39034,128 @@ var init_shared = __esm({
   }
 });
 
+// src/server/utils/cost-tracker.ts
+var CostTracker;
+var init_cost_tracker = __esm({
+  "src/server/utils/cost-tracker.ts"() {
+    "use strict";
+    CostTracker = class {
+      static {
+        __name(this, "CostTracker");
+      }
+      totalRCU = 0;
+      totalWCU = 0;
+      operationCount = 0;
+      /**
+       * ConsumedCapacityを追加
+       *
+       * DynamoDB操作のConsumedCapacityを累積します。
+       * undefinedが渡された場合は何もしません（エラーにしない）。
+       *
+       * AWS SDKのConsumedCapacityは以下のフィールドを持ちます:
+       * - CapacityUnits: 総キャパシティユニット（RCU + WCU）
+       * - ReadCapacityUnits: 読み取りキャパシティユニット
+       * - WriteCapacityUnits: 書き込みキャパシティユニット
+       *
+       * このメソッドはReadCapacityUnitsとWriteCapacityUnitsを優先的に使用し、
+       * 存在しない場合はCapacityUnitsを読み取りとして扱います。
+       *
+       * @param consumedCapacity - DynamoDB操作のConsumedCapacity
+       */
+      add(consumedCapacity) {
+        if (!consumedCapacity) {
+          return;
+        }
+        const rcu = consumedCapacity.ReadCapacityUnits ?? 0;
+        const wcu = consumedCapacity.WriteCapacityUnits ?? 0;
+        this.totalRCU += rcu;
+        this.totalWCU += wcu;
+        this.operationCount += 1;
+      }
+      /**
+       * 集計結果を取得
+       *
+       * これまでに追加されたConsumedCapacityの集計結果を返します。
+       *
+       * @returns 集計されたコスト情報
+       */
+      getAggregated() {
+        return {
+          totalRCU: this.totalRCU,
+          totalWCU: this.totalWCU,
+          operationCount: this.operationCount
+        };
+      }
+      /**
+       * リセット
+       *
+       * 累積されたコスト情報をクリアします。
+       */
+      reset() {
+        this.totalRCU = 0;
+        this.totalWCU = 0;
+        this.operationCount = 0;
+      }
+    };
+  }
+});
+
+// src/server/utils/dynamodb.ts
+function getDBClient() {
+  if (!dbClient) {
+    dbClient = createDynamoDBClient({
+      region: process.env.AWS_REGION || process.env.REGION
+    });
+  }
+  return dbClient;
+}
+function getTableName() {
+  const tableName = process.env.TABLE_NAME;
+  if (!tableName) {
+    throw new ConfigError("TABLE_NAME environment variable is not set");
+  }
+  return tableName;
+}
+function removeShadowKeys(record) {
+  const { __shadowKeys, ...rest } = record;
+  return rest;
+}
+function extractCleanRecord(item) {
+  const data = item.data || item;
+  return removeShadowKeys(data);
+}
+async function executeDynamoDBOperation(operation2, operationName) {
+  try {
+    return await operation2();
+  } catch (error2) {
+    if (error2 instanceof Error && error2.name === "AccessDeniedException") {
+      logger2.error("DynamoDB access denied", {
+        errorName: error2.name,
+        errorMessage: error2.message,
+        operation: operationName,
+        tableName: process.env.TABLE_NAME,
+        region: process.env.AWS_REGION || process.env.REGION
+      });
+      throw new Error(`Insufficient permissions to access DynamoDB: ${operationName}`);
+    }
+    throw error2;
+  }
+}
+var logger2, dbClient;
+var init_dynamodb3 = __esm({
+  "src/server/utils/dynamodb.ts"() {
+    "use strict";
+    init_shared();
+    logger2 = createLogger({ service: "records-lambda" });
+    dbClient = null;
+    __name(getDBClient, "getDBClient");
+    __name(getTableName, "getTableName");
+    __name(removeShadowKeys, "removeShadowKeys");
+    __name(extractCleanRecord, "extractCleanRecord");
+    __name(executeDynamoDBOperation, "executeDynamoDBOperation");
+  }
+});
+
 // src/shared/constants/formatting.ts
 var init_formatting = __esm({
   "src/shared/constants/formatting.ts"() {
@@ -39318,435 +39440,153 @@ var init_shadow = __esm({
   }
 });
 
-// src/server/utils/dynamodb.ts
-function getDBClient() {
-  if (!dbClient) {
-    dbClient = createDynamoDBClient({
-      region: process.env.AWS_REGION || process.env.REGION
-    });
-  }
-  return dbClient;
-}
-function getTableName() {
-  const tableName = process.env.TABLE_NAME;
-  if (!tableName) {
-    throw new ConfigError("TABLE_NAME environment variable is not set");
+// src/server/operations/find/keyCondition.ts
+function buildKeyCondition(resource, sortField, optimizableFilter, secondFilter) {
+  const expressionAttributeValues = {
+    ":pk": resource
+  };
+  if (!optimizableFilter) {
+    return {
+      keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
+      expressionAttributeValues: {
+        ...expressionAttributeValues,
+        ":skPrefix": `${sortField}#`
+      }
+    };
   }
-  return tableName;
-}
-function removeShadowKeys(record) {
-  const { __shadowKeys, ...rest } = record;
-  return rest;
-}
-function extractCleanRecord(item) {
-  const data = item.data || item;
-  return removeShadowKeys(data);
-}
-async function executeDynamoDBOperation(operation2, operationName) {
-  try {
-    return await operation2();
-  } catch (error2) {
-    if (error2 instanceof Error && error2.name === "AccessDeniedException") {
-      logger2.error("DynamoDB access denied", {
-        errorName: error2.name,
-        errorMessage: error2.message,
-        operation: operationName,
-        tableName: process.env.TABLE_NAME,
-        region: process.env.AWS_REGION || process.env.REGION
-      });
-      throw new Error(`Insufficient permissions to access DynamoDB: ${operationName}`);
+  if (secondFilter) {
+    const first = rangeBounds(sortField, optimizableFilter);
+    const second = rangeBounds(sortField, secondFilter);
+    const low = first.low ?? second.low;
+    const high = first.high ?? second.high;
+    if (low !== void 0 && high !== void 0) {
+      return rangeCondition(expressionAttributeValues, low, high);
     }
-    throw error2;
   }
-}
-var logger2, dbClient;
-var init_dynamodb3 = __esm({
-  "src/server/utils/dynamodb.ts"() {
-    "use strict";
-    init_shared();
-    logger2 = createLogger({ service: "records-lambda" });
-    dbClient = null;
-    __name(getDBClient, "getDBClient");
-    __name(getTableName, "getTableName");
-    __name(removeShadowKeys, "removeShadowKeys");
-    __name(extractCleanRecord, "extractCleanRecord");
-    __name(executeDynamoDBOperation, "executeDynamoDBOperation");
-  }
-});
-
-// src/server/utils/batchGet.ts
-function sleep2(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-async function batchGetAll(keys, { consistentRead, costTracker, requestId, baseDelayMs = 50 }) {
-  const unique = Array.from(new Map(keys.map((k5) => [`${k5.PK}\0${k5.SK}`, k5])).values());
-  if (unique.length === 0) {
-    return [];
-  }
-  const dbClient2 = getDBClient();
-  const tableName = getTableName();
-  const records = [];
-  for (let i5 = 0; i5 < unique.length; i5 += BATCH_GET_MAX_KEYS) {
-    let pending = unique.slice(i5, i5 + BATCH_GET_MAX_KEYS);
-    for (let attempt = 0; pending.length > 0; attempt++) {
-      if (attempt > BATCH_GET_MAX_RETRIES) {
-        logger3.error("BatchGetItem \u306E UnprocessedKeys \u304C\u89E3\u6D88\u3057\u306A\u304B\u3063\u305F", {
-          requestId,
-          unprocessed: pending.length,
-          attempts: attempt
-        });
-        throw new AppError(
-          "INTERNAL_ERROR" /* INTERNAL_ERROR */,
-          "BatchGetItem still has unprocessed keys after retries",
-          503,
-          { unprocessed: pending.length }
-        );
-      }
-      if (attempt > 0) {
-        await sleep2(baseDelayMs * 2 ** (attempt - 1) * (0.5 + Math.random() / 2));
-      }
-      const keysToGet = pending;
-      const result = await executeDynamoDBOperation(
-        () => dbClient2.send(
-          new import_lib_dynamodb2.BatchGetCommand({
-            RequestItems: {
-              [tableName]: {
-                Keys: keysToGet,
-                ConsistentRead: consistentRead
-              }
-            },
-            ReturnConsumedCapacity: "TOTAL"
-          })
-        ),
-        "BatchGetItem"
+  const { operator, type } = optimizableFilter.parsed;
+  const value = optimizableFilter.value;
+  const { encoded, exact } = encodeValueForShadowSK(value, type, operator);
+  const skValue = `${sortField}#${encoded}`;
+  const afterValue = `${skValue}#id#~`;
+  const beforeValue = `${skValue}#id#`;
+  switch (operator) {
+    case "$eq":
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skValue)",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skValue": beforeValue
+        }
+      };
+    // 範囲検索は SK BETWEEN の 1 条件にする。
+    // - DynamoDB はソートキーに 1 つの条件しか許さない（begins_with と比較を並べると ValidationException）
+    // - 上限・下限を sortField の範囲に閉じないと、他の項目のシャドー（や本体 id#…）まで読む
+    // BETWEEN は両端を含むが、端の値（`…#id#`、`…#id#~`、`{sortField}$`）と一致する SK は実在しない
+    case "$gt":
+      return rangeCondition(
+        expressionAttributeValues,
+        exact ? afterValue : beforeValue,
+        fieldUpperBound(sortField)
       );
-      if (costTracker) {
-        const capacity = result.ConsumedCapacity;
-        if (Array.isArray(capacity)) {
-          capacity.forEach((c5) => costTracker.add(c5));
-        } else {
-          costTracker.add(capacity);
+    case "$gte":
+      return rangeCondition(expressionAttributeValues, beforeValue, fieldUpperBound(sortField));
+    case "$lt":
+      return rangeCondition(
+        expressionAttributeValues,
+        `${sortField}#`,
+        exact ? beforeValue : afterValue
+      );
+    case "$lte":
+      return rangeCondition(expressionAttributeValues, `${sortField}#`, afterValue);
+    case "$starts":
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skValue)",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skValue": skValue
         }
-      }
-      records.push(...result.Responses?.[tableName] ?? []);
-      pending = result.UnprocessedKeys?.[tableName]?.Keys ?? [];
-    }
+      };
+    default:
+      return {
+        keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
+        expressionAttributeValues: {
+          ...expressionAttributeValues,
+          ":skPrefix": `${sortField}#`
+        }
+      };
   }
-  return records;
 }
-var import_lib_dynamodb2, logger3, BATCH_GET_MAX_KEYS, BATCH_GET_MAX_RETRIES;
-var init_batchGet = __esm({
-  "src/server/utils/batchGet.ts"() {
-    "use strict";
-    import_lib_dynamodb2 = __toESM(require_dist_cjs22(), 1);
-    init_shared();
-    init_dynamodb3();
-    logger3 = createLogger({
-      service: "batch-get",
-      level: process.env.LOG_LEVEL || "info"
-    });
-    BATCH_GET_MAX_KEYS = 100;
-    BATCH_GET_MAX_RETRIES = 8;
-    __name(sleep2, "sleep");
-    __name(batchGetAll, "batchGetAll");
-  }
-});
-
-// src/server/utils/bulkOperations.ts
-function logLargeBatchWarning(operation2, recordCount, requestId, resource) {
-  if (recordCount > LARGE_BATCH_WARNING_THRESHOLD) {
-    logger4.warn(`Large batch ${operation2} operation detected`, {
-      requestId,
-      resource,
-      recordCount,
-      warningThreshold: LARGE_BATCH_WARNING_THRESHOLD,
-      estimatedTimeoutRisk: "high",
-      recommendation: "Consider splitting the batch into smaller requests to avoid Lambda timeout (15 min limit)"
-    });
+function rangeBounds(sortField, filter) {
+  const { operator, type } = filter.parsed;
+  const { encoded, exact } = encodeValueForShadowSK(filter.value, type, operator);
+  const skValue = `${sortField}#${encoded}`;
+  const afterValue = `${skValue}#id#~`;
+  const beforeValue = `${skValue}#id#`;
+  switch (operator) {
+    case "$gt":
+      return { low: exact ? afterValue : beforeValue };
+    case "$gte":
+      return { low: beforeValue };
+    case "$lt":
+      return { high: exact ? beforeValue : afterValue };
+    case "$lte":
+      return { high: afterValue };
+    default:
+      return {};
   }
 }
-function calculateTimeoutRisk(startTime) {
-  const elapsedMs = Date.now() - startTime;
-  const remainingMs = LAMBDA_TIMEOUT_MS - elapsedMs;
-  const utilizationPercent = Math.round(elapsedMs / LAMBDA_TIMEOUT_MS * 100);
-  const risk = remainingMs < LAMBDA_TIMEOUT_MS * TIMEOUT_RISK_THRESHOLD ? "high" : "low";
-  return {
-    elapsedMs,
-    remainingMs,
-    risk,
-    utilizationPercent
-  };
-}
-function logPreparationTimeoutRisk(requestId, resource, totalRecords, chunkCount, riskInfo) {
-  logger4.info("Records prepared for chunk execution", {
-    requestId,
-    resource,
-    totalRecords,
-    chunkCount,
-    preparationTimeMs: riskInfo.elapsedMs,
-    remainingTimeMs: riskInfo.remainingMs,
-    timeoutRisk: riskInfo.risk
-  });
-  if (riskInfo.risk === "high") {
-    logger4.warn("High timeout risk detected during preparation phase", {
-      requestId,
-      resource,
-      preparationElapsedMs: riskInfo.elapsedMs,
-      remainingTimeMs: riskInfo.remainingMs,
-      lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
-      recommendation: "Consider reducing batch size or optimizing preparation logic"
-    });
-  }
+function findComplementaryBound(primary, parsedFilters) {
+  const op2 = primary.parsed.operator;
+  const wanted = LOWER_BOUND_OPERATORS.has(op2) ? UPPER_BOUND_OPERATORS : UPPER_BOUND_OPERATORS.has(op2) ? LOWER_BOUND_OPERATORS : void 0;
+  if (!wanted) return void 0;
+  return parsedFilters.find(
+    (f5) => f5 !== primary && f5.parsed.field === primary.parsed.field && wanted.has(f5.parsed.operator)
+  );
 }
-function logBulkOperationComplete(operation2, requestId, resource, requested, succeeded, failed, riskInfo, additionalInfo) {
-  const totalElapsedSeconds = Math.round(riskInfo.elapsedMs / 1e3);
-  logger4.info(`${operation2} completed`, {
-    requestId,
-    resource,
-    requested,
-    succeeded,
-    totalFailed: failed,
-    totalExecutionTimeMs: riskInfo.elapsedMs,
-    totalExecutionTimeSeconds: totalElapsedSeconds,
-    lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
-    timeoutUtilization: `${riskInfo.utilizationPercent}%`,
-    ...additionalInfo
-  });
+function fieldUpperBound(sortField) {
+  return `${sortField}$`;
 }
-function logPartialFailure(operation2, requestId, resource, requested, succeeded, failed, errorCodes, additionalInfo) {
-  const failureRate = Math.round(failed / requested * 100);
-  logger4.warn(`Partial failure in ${operation2} operation`, {
-    requestId,
-    resource,
-    totalRequested: requested,
-    successCount: succeeded,
-    failedCount: failed,
-    failureRate: `${failureRate}%`,
-    errorCodes: [...new Set(errorCodes)],
-    ...additionalInfo
-  });
+function rangeCondition(base, low, high) {
+  return {
+    keyConditionExpression: "PK = :pk AND SK BETWEEN :skLow AND :skHigh",
+    expressionAttributeValues: { ...base, ":skLow": low, ":skHigh": high }
+  };
 }
-var logger4;
-var init_bulkOperations = __esm({
-  "src/server/utils/bulkOperations.ts"() {
-    "use strict";
-    init_shared();
-    logger4 = createLogger({ service: "records-lambda" });
-    __name(logLargeBatchWarning, "logLargeBatchWarning");
-    __name(calculateTimeoutRisk, "calculateTimeoutRisk");
-    __name(logPreparationTimeoutRisk, "logPreparationTimeoutRisk");
-    __name(logBulkOperationComplete, "logBulkOperationComplete");
-    __name(logPartialFailure, "logPartialFailure");
-  }
-});
-
-// src/server/utils/chunking.ts
-function calculateChunks(records, getItemCount) {
-  const chunks = [];
-  const itemCounts = [];
-  let currentChunk = [];
-  let currentItemCount = 0;
-  for (const record of records) {
-    const itemCount = getItemCount(record);
-    if (itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
-      const errorMsg = `Single record exceeds ${DYNAMODB_TRANSACT_WRITE_MAX_ITEMS} items limit: ${itemCount} items`;
-      logger5.error("Chunk validation failed", {
-        itemCount,
-        limit: DYNAMODB_TRANSACT_WRITE_MAX_ITEMS
-      });
-      throw new Error(errorMsg);
-    }
-    if (currentItemCount + itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
-      if (currentChunk.length > 0) {
-        chunks.push(currentChunk);
-        itemCounts.push(currentItemCount);
-      }
-      currentChunk = [record];
-      currentItemCount = itemCount;
-    } else {
-      currentChunk.push(record);
-      currentItemCount += itemCount;
-    }
-  }
-  if (currentChunk.length > 0) {
-    chunks.push(currentChunk);
-    itemCounts.push(currentItemCount);
+function encodeValueForShadowSK(value, type, operator) {
+  const config = getShadowConfig();
+  if (type === "number" || typeof value === "number") {
+    const num = Number(value);
+    return { encoded: formatFieldValue2("number", num, config), exact: false };
   }
-  logger5.info("Chunk calculation completed", {
-    totalRecords: records.length,
-    chunkCount: chunks.length,
-    itemCounts,
-    minItemsPerChunk: itemCounts.length > 0 ? Math.min(...itemCounts) : 0,
-    maxItemsPerChunk: itemCounts.length > 0 ? Math.max(...itemCounts) : 0,
-    avgItemsPerChunk: itemCounts.length > 0 ? Math.round(itemCounts.reduce((sum, count) => sum + count, 0) / itemCounts.length) : 0
-  });
-  return { chunks, itemCounts };
-}
-async function executeChunks(chunks, executeChunk, getRecordId) {
-  const successRecords = [];
-  const failedIds = [];
-  const errors = [];
-  const totalRecords = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
-  const executionStartTime = Date.now();
-  logger5.info("Starting chunk execution", {
-    totalChunks: chunks.length,
-    totalRecords
-  });
-  for (let i5 = 0; i5 < chunks.length; i5++) {
-    const chunk = chunks[i5];
-    const chunkStartTime = Date.now();
-    try {
-      logger5.debug(`Executing chunk ${i5 + 1}/${chunks.length}`, {
-        chunkIndex: i5,
-        recordCount: chunk.length
-      });
-      const successfulRecords = await executeChunk(chunk);
-      successRecords.push(...successfulRecords);
-      const chunkDuration = Date.now() - chunkStartTime;
-      logger5.info(`Chunk ${i5 + 1}/${chunks.length} succeeded`, {
-        chunkIndex: i5,
-        recordCount: chunk.length,
-        durationMs: chunkDuration
-      });
-    } catch (error2) {
-      const chunkDuration = Date.now() - chunkStartTime;
-      const errorMessage = error2 instanceof Error ? error2.message : "Unknown error";
-      const errorCode = getErrorCode(error2);
-      logger5.error(`Chunk ${i5 + 1}/${chunks.length} failed`, {
-        chunkIndex: i5,
-        recordCount: chunk.length,
-        durationMs: chunkDuration,
-        error: errorMessage,
-        errorCode
-      });
-      for (const record of chunk) {
-        const recordId = getRecordId(record);
-        failedIds.push(recordId);
-        errors.push({
-          id: recordId,
-          code: errorCode,
-          message: errorMessage
-        });
-      }
-    }
+  if (type === "boolean" || typeof value === "boolean") {
+    const bool = typeof value === "boolean" ? value : String(value).toLowerCase() === "true";
+    return { encoded: formatFieldValue2("boolean", bool, config), exact: true };
   }
-  const totalExecutionTime = Date.now() - executionStartTime;
-  logger5.info("Chunk execution completed", {
-    totalChunks: chunks.length,
-    totalRecords,
-    successCount: successRecords.length,
-    failedCount: failedIds.length,
-    totalExecutionTimeMs: totalExecutionTime,
-    avgTimePerChunkMs: chunks.length > 0 ? Math.round(totalExecutionTime / chunks.length) : 0
-  });
-  if (failedIds.length > 0) {
-    logger5.warn("Partial failure detected in chunk execution", {
-      totalRecords,
-      successCount: successRecords.length,
-      failedCount: failedIds.length,
-      failureRate: `${Math.round(failedIds.length / totalRecords * 100)}%`,
-      failedIds: failedIds.slice(0, 10),
-      // 最初の10件のみログ出力
-      errorSummary: errors.slice(0, 5).map((e5) => ({
-        id: e5.id,
-        code: e5.code,
-        message: e5.message.substring(0, 100)
-        // メッセージを100文字に制限
-      }))
-    });
+  const str = String(value);
+  if (operator !== "$starts" && (type === "date" || inferFieldType(str) === "datetime")) {
+    return { encoded: formatFieldValue2("datetime", str, config), exact: true };
   }
+  const encoded = formatFieldValue2("string", str, config);
+  const bytes = new TextEncoder().encode(str).length;
   return {
-    successRecords,
-    failedIds,
-    errors
+    encoded,
+    exact: encoded === escapeString2(str) && bytes < config.stringMaxBytes - 3
   };
 }
-function getErrorCode(error2) {
-  if (error2 && typeof error2 === "object") {
-    if ("name" in error2 && typeof error2.name === "string") {
-      return error2.name;
-    }
-    if ("code" in error2 && typeof error2.code === "string") {
-      return error2.code;
-    }
-  }
-  return "TRANSACTION_FAILED";
-}
-var logger5;
-var init_chunking = __esm({
-  "src/server/utils/chunking.ts"() {
-    "use strict";
-    init_shared();
-    logger5 = createLogger({ service: "records-lambda" });
-    __name(calculateChunks, "calculateChunks");
-    __name(executeChunks, "executeChunks");
-    __name(getErrorCode, "getErrorCode");
-  }
-});
-
-// src/server/utils/cost-tracker.ts
-var CostTracker;
-var init_cost_tracker = __esm({
-  "src/server/utils/cost-tracker.ts"() {
+var KEY_CONDITION_OPERATORS, LOWER_BOUND_OPERATORS, UPPER_BOUND_OPERATORS;
+var init_keyCondition = __esm({
+  "src/server/operations/find/keyCondition.ts"() {
     "use strict";
-    CostTracker = class {
-      static {
-        __name(this, "CostTracker");
-      }
-      totalRCU = 0;
-      totalWCU = 0;
-      operationCount = 0;
-      /**
-       * ConsumedCapacityを追加
-       *
-       * DynamoDB操作のConsumedCapacityを累積します。
-       * undefinedが渡された場合は何もしません（エラーにしない）。
-       *
-       * AWS SDKのConsumedCapacityは以下のフィールドを持ちます:
-       * - CapacityUnits: 総キャパシティユニット（RCU + WCU）
-       * - ReadCapacityUnits: 読み取りキャパシティユニット
-       * - WriteCapacityUnits: 書き込みキャパシティユニット
-       *
-       * このメソッドはReadCapacityUnitsとWriteCapacityUnitsを優先的に使用し、
-       * 存在しない場合はCapacityUnitsを読み取りとして扱います。
-       *
-       * @param consumedCapacity - DynamoDB操作のConsumedCapacity
-       */
-      add(consumedCapacity) {
-        if (!consumedCapacity) {
-          return;
-        }
-        const rcu = consumedCapacity.ReadCapacityUnits ?? 0;
-        const wcu = consumedCapacity.WriteCapacityUnits ?? 0;
-        this.totalRCU += rcu;
-        this.totalWCU += wcu;
-        this.operationCount += 1;
-      }
-      /**
-       * 集計結果を取得
-       *
-       * これまでに追加されたConsumedCapacityの集計結果を返します。
-       *
-       * @returns 集計されたコスト情報
-       */
-      getAggregated() {
-        return {
-          totalRCU: this.totalRCU,
-          totalWCU: this.totalWCU,
-          operationCount: this.operationCount
-        };
-      }
-      /**
-       * リセット
-       *
-       * 累積されたコスト情報をクリアします。
-       */
-      reset() {
-        this.totalRCU = 0;
-        this.totalWCU = 0;
-        this.operationCount = 0;
-      }
-    };
+    init_shadow();
+    KEY_CONDITION_OPERATORS = /* @__PURE__ */ new Set(["$eq", "$gt", "$gte", "$lt", "$lte", "$starts"]);
+    __name(buildKeyCondition, "buildKeyCondition");
+    LOWER_BOUND_OPERATORS = /* @__PURE__ */ new Set(["$gt", "$gte"]);
+    UPPER_BOUND_OPERATORS = /* @__PURE__ */ new Set(["$lt", "$lte"]);
+    __name(rangeBounds, "rangeBounds");
+    __name(findComplementaryBound, "findComplementaryBound");
+    __name(fieldUpperBound, "fieldUpperBound");
+    __name(rangeCondition, "rangeCondition");
+    __name(encodeValueForShadowSK, "encodeValueForShadowSK");
   }
 });
 
@@ -39757,18 +39597,14 @@ function parseFilterField(fieldKey) {
     return { field: parts[0], operator: "$eq", type: "string" };
   }
   if (parts.length === 2) {
+    assertSupportedOperator(parts[1]);
     const operator = parts[1];
-    if (!isValidOperator(operator)) {
-      throw new Error(`Invalid filter operator: ${parts[1]}`);
-    }
     return { field: parts[0], operator, type: "string" };
   }
   if (parts.length === 3) {
+    assertSupportedOperator(parts[1]);
     const operator = parts[1];
     const type = parts[2];
-    if (!isValidOperator(operator)) {
-      throw new Error(`Invalid filter operator: ${parts[1]}`);
-    }
     if (!isValidType(type)) {
       throw new Error(`Invalid filter type: ${parts[2]}`);
     }
@@ -39789,11 +39625,18 @@ function isValidOperator(operator) {
     "$starts",
     "$ends",
     "$contains",
-    "$regex",
     "$exists",
     "$near"
   ].includes(operator);
 }
+function assertSupportedOperator(operator) {
+  if (operator === "$regex") {
+    throw new Error("Invalid filter operator: $regex is not supported (use $contains or $starts)");
+  }
+  if (!isValidOperator(operator)) {
+    throw new Error(`Invalid filter operator: ${operator}`);
+  }
+}
 function isValidType(type) {
   return ["string", "number", "date", "boolean"].includes(type);
 }
@@ -39802,6 +39645,7 @@ var init_filter = __esm({
     "use strict";
     __name(parseFilterField, "parseFilterField");
     __name(isValidOperator, "isValidOperator");
+    __name(assertSupportedOperator, "assertSupportedOperator");
     __name(isValidType, "isValidType");
   }
 });
@@ -39874,7 +39718,7 @@ function parseFilters(filter) {
         parsedFilters.push({ parsed: withInferredType(parsed, fieldKey, value), value });
       }
     } catch (error2) {
-      logger6.error("Invalid filter field syntax", {
+      logger3.error("Invalid filter field syntax", {
         fieldKey,
         error: error2 instanceof Error ? error2.message : String(error2)
       });
@@ -39917,8 +39761,6 @@ function matchesAllFilters(record, parsedFilters) {
         return typeof recordValue === "string" && typeof filterValue === "string" && recordValue.endsWith(filterValue);
       case "$contains":
         return typeof recordValue === "string" && typeof filterValue === "string" && recordValue.includes(filterValue);
-      case "$regex":
-        return typeof recordValue === "string" && typeof filterValue === "string" && recordValue.includes(filterValue);
       case "$exists":
         return filterValue ? recordValue !== void 0 && recordValue !== null : recordValue === void 0 || recordValue === null;
       default:
@@ -39943,7 +39785,7 @@ function detectNearQuery(filter) {
   }
   return null;
 }
-var logger6;
+var logger3;
 var init_utils6 = __esm({
   "src/server/operations/find/utils.ts"() {
     "use strict";
@@ -39952,7 +39794,7 @@ var init_utils6 = __esm({
     init_shadow();
     init_filter();
     init_validation2();
-    logger6 = createLogger({
+    logger3 = createLogger({
       service: "find-utils",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -39966,99 +39808,81 @@ var init_utils6 = __esm({
   }
 });
 
-// src/server/utils/idFilter.ts
-function splitIdFilter(filter) {
-  const { id, ...rest } = filter ?? {};
-  if (typeof id === "string") {
-    return { id, rest };
-  }
-  if (typeof id === "object" && id !== null && "$in" in id) {
-    return { ids: (id.$in ?? []).slice(), rest };
-  }
-  return { rest: filter ?? {} };
-}
-function conditionOf(rest) {
-  return Object.keys(rest).length > 0 ? rest : void 0;
-}
-function conditionMatcher(condition) {
-  if (!condition || Object.keys(condition).length === 0) {
-    return () => true;
-  }
-  const parsed = parseFilters(condition);
-  return (record) => matchesAllFilters(record, parsed);
-}
-var init_idFilter = __esm({
-  "src/server/utils/idFilter.ts"() {
-    "use strict";
-    init_utils6();
-    __name(splitIdFilter, "splitIdFilter");
-    __name(conditionOf, "conditionOf");
-    __name(conditionMatcher, "conditionMatcher");
-  }
-});
-
-// src/server/utils/revision.ts
-function revisionOf(item) {
-  const rev = item[REVISION_ATTRIBUTE];
-  return typeof rev === "number" ? rev : void 0;
-}
-function nextRevision(current) {
-  return (current ?? 0) + 1;
-}
-function notExistsCondition() {
-  return { ConditionExpression: "attribute_not_exists(PK)" };
-}
-function unchangedCondition(revision) {
-  const names = { "#rev": REVISION_ATTRIBUTE };
-  if (revision === void 0) {
-    return {
-      ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#rev)",
-      ExpressionAttributeNames: names
-    };
-  }
-  return {
-    ConditionExpression: "#rev = :rev",
-    ExpressionAttributeNames: names,
-    ExpressionAttributeValues: { ":rev": revision }
-  };
-}
-function isWriteConflict(error2) {
-  if (!error2 || typeof error2 !== "object") return false;
-  const { name, CancellationReasons } = error2;
-  if (name === "TransactionConflictException") return true;
-  if (name !== "TransactionCanceledException" || !Array.isArray(CancellationReasons)) return false;
-  const codes = CancellationReasons.map((r5) => r5?.Code).filter((c5) => c5 && c5 !== "None");
-  return codes.length > 0 && codes.every((c5) => c5 === "ConditionalCheckFailed" || c5 === "TransactionConflict");
-}
-function sleep3(ms) {
+// src/server/utils/batchGet.ts
+function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
-async function writeWithConflictRetry(initial, write, refresh, baseDelayMs = 20) {
-  let records = initial;
-  for (let attempt = 0; ; attempt++) {
-    try {
-      if (records.length > 0) await write(records);
-      return records;
-    } catch (error2) {
-      if (!isWriteConflict(error2) || attempt >= MAX_CONFLICT_RETRIES) throw error2;
-      await sleep3(baseDelayMs * 2 ** attempt * (0.5 + Math.random() / 2));
-      records = await refresh(records);
+async function batchGetAll(keys, { consistentRead, costTracker, requestId, baseDelayMs = 50 }) {
+  const unique = Array.from(new Map(keys.map((k5) => [`${k5.PK}\0${k5.SK}`, k5])).values());
+  if (unique.length === 0) {
+    return [];
+  }
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
+  const records = [];
+  for (let i5 = 0; i5 < unique.length; i5 += BATCH_GET_MAX_KEYS) {
+    let pending = unique.slice(i5, i5 + BATCH_GET_MAX_KEYS);
+    for (let attempt = 0; pending.length > 0; attempt++) {
+      if (attempt > BATCH_GET_MAX_RETRIES) {
+        logger4.error("BatchGetItem \u306E UnprocessedKeys \u304C\u89E3\u6D88\u3057\u306A\u304B\u3063\u305F", {
+          requestId,
+          unprocessed: pending.length,
+          attempts: attempt
+        });
+        throw new AppError(
+          "INTERNAL_ERROR" /* INTERNAL_ERROR */,
+          "BatchGetItem still has unprocessed keys after retries",
+          503,
+          { unprocessed: pending.length }
+        );
+      }
+      if (attempt > 0) {
+        await sleep2(baseDelayMs * 2 ** (attempt - 1) * (0.5 + Math.random() / 2));
+      }
+      const keysToGet = pending;
+      const result = await executeDynamoDBOperation(
+        () => dbClient2.send(
+          new import_lib_dynamodb2.BatchGetCommand({
+            RequestItems: {
+              [tableName]: {
+                Keys: keysToGet,
+                ConsistentRead: consistentRead
+              }
+            },
+            ReturnConsumedCapacity: "TOTAL"
+          })
+        ),
+        "BatchGetItem"
+      );
+      if (costTracker) {
+        const capacity = result.ConsumedCapacity;
+        if (Array.isArray(capacity)) {
+          capacity.forEach((c5) => costTracker.add(c5));
+        } else {
+          costTracker.add(capacity);
+        }
+      }
+      records.push(...result.Responses?.[tableName] ?? []);
+      pending = result.UnprocessedKeys?.[tableName]?.Keys ?? [];
     }
   }
+  return records;
 }
-var REVISION_ATTRIBUTE, MAX_CONFLICT_RETRIES;
-var init_revision = __esm({
-  "src/server/utils/revision.ts"() {
+var import_lib_dynamodb2, logger4, BATCH_GET_MAX_KEYS, BATCH_GET_MAX_RETRIES;
+var init_batchGet = __esm({
+  "src/server/utils/batchGet.ts"() {
     "use strict";
-    REVISION_ATTRIBUTE = "__rev";
-    MAX_CONFLICT_RETRIES = 5;
-    __name(revisionOf, "revisionOf");
-    __name(nextRevision, "nextRevision");
-    __name(notExistsCondition, "notExistsCondition");
-    __name(unchangedCondition, "unchangedCondition");
-    __name(isWriteConflict, "isWriteConflict");
-    __name(sleep3, "sleep");
-    __name(writeWithConflictRetry, "writeWithConflictRetry");
+    import_lib_dynamodb2 = __toESM(require_dist_cjs22(), 1);
+    init_shared();
+    init_dynamodb3();
+    logger4 = createLogger({
+      service: "batch-get",
+      level: process.env.LOG_LEVEL || "info"
+    });
+    BATCH_GET_MAX_KEYS = 100;
+    BATCH_GET_MAX_RETRIES = 8;
+    __name(sleep2, "sleep");
+    __name(batchGetAll, "batchGetAll");
   }
 });
 
@@ -40361,12 +40185,12 @@ function getScanWarnThreshold() {
   const value = Number(raw);
   return Number.isInteger(value) && value >= 1 ? value : DEFAULT_SCAN_WARN_THRESHOLD;
 }
-var logger7, SPARSE_SCAN_EVENT, DEFAULT_SCAN_WARN_THRESHOLD, ScanWatcher;
+var logger5, SPARSE_SCAN_EVENT, DEFAULT_SCAN_WARN_THRESHOLD, ScanWatcher;
 var init_scanWarning = __esm({
   "src/server/utils/scanWarning.ts"() {
     "use strict";
     init_shared();
-    logger7 = createLogger({ service: "scan-warning", level: "warn" });
+    logger5 = createLogger({ service: "scan-warning", level: "warn" });
     SPARSE_SCAN_EVENT = "SPARSE_SCAN";
     DEFAULT_SCAN_WARN_THRESHOLD = 5e3;
     __name(getScanWarnThreshold, "getScanWarnThreshold");
@@ -40386,7 +40210,7 @@ var init_scanWarning = __esm({
         this.scanned += count;
         if (!this.warned && this.scanned >= this.threshold) {
           this.warned = true;
-          logger7.warn(
+          logger5.warn(
             `${SPARSE_SCAN_EVENT}: 1\u30EA\u30AF\u30A8\u30B9\u30C8\u3067 ${this.scanned} \u4EF6\u4EE5\u4E0A\u3092\u8AAD\u307F\u307E\u3057\u305F\u3002\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u30FB\u30B9\u30AD\u30FC\u30DE\u30FB\u30ED\u30B8\u30C3\u30AF\u306E\u898B\u76F4\u3057\u3092\u691C\u8A0E\u3057\u3066\u304F\u3060\u3055\u3044\uFF08docs/SCAN_WARNING.md\uFF09`,
             {
               event: SPARSE_SCAN_EVENT,
@@ -40410,7 +40234,7 @@ var init_scanWarning = __esm({
 async function executeIdQuery(resource, normalizedParams, requestId) {
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
-  logger8.debug("Executing ID optimized query", {
+  logger6.debug("Executing ID optimized query", {
     requestId,
     resource,
     sort,
@@ -40463,7 +40287,7 @@ async function executeSpecificIdQuery(resource, targetId, requestId) {
   costTracker.add(queryResult.ConsumedCapacity);
   const mainRecords = queryResult.Items || [];
   const items = mainRecords.map((item) => extractCleanRecord(item));
-  logger8.info("ID specific query succeeded", {
+  logger6.info("ID specific query succeeded", {
     requestId,
     resource,
     targetId,
@@ -40495,7 +40319,7 @@ async function executeInQuery(resource, targetIds, sort, requestId) {
     if (typeof aVal === "number" && typeof bVal === "number") return (aVal - bVal) * direction;
     return String(aVal).localeCompare(String(bVal)) * direction;
   });
-  logger8.info("ID $in query succeeded", {
+  logger6.info("ID $in query succeeded", {
     requestId,
     resource,
     requestedCount: targetIds.length,
@@ -40571,7 +40395,7 @@ async function executeAllRecordsQuery(resource, sort, perPage, nextToken, parsed
     queryResult.LastEvaluatedKey.PK,
     queryResult.LastEvaluatedKey.SK
   ) : void 0;
-  logger8.info("ID all records query succeeded", {
+  logger6.info("ID all records query succeeded", {
     requestId,
     resource,
     count: items.length,
@@ -40612,7 +40436,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
   });
   scan: while (true) {
     if (++iterations > SCAN_MAX_ITERATIONS) {
-      logger8.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
+      logger6.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
         requestId,
         resource,
         iterations
@@ -40660,7 +40484,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
     }
     const nextKeySignature = `${nextKey.PK}#${nextKey.SK}`;
     if (nextKeySignature === previousKeySignature) {
-      logger8.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
+      logger6.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
         requestId,
         resource,
         iterations
@@ -40677,7 +40501,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
     chunkSize = Math.min(chunkSize * 2, SCAN_CHUNK_MAX);
   }
   const nextTokenValue = hasNextPage && lastReturned ? encodeNextToken(lastReturned.PK, lastReturned.SK) : void 0;
-  logger8.info("ID filtered scan query succeeded", {
+  logger6.info("ID filtered scan query succeeded", {
     requestId,
     resource,
     scanned,
@@ -40691,7 +40515,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb3, logger8, SCAN_CHUNK_INITIAL, SCAN_CHUNK_MAX, SCAN_MAX_ITERATIONS;
+var import_lib_dynamodb3, logger6, SCAN_CHUNK_INITIAL, SCAN_CHUNK_MAX, SCAN_MAX_ITERATIONS;
 var init_idQuery = __esm({
   "src/server/operations/find/idQuery.ts"() {
     "use strict";
@@ -40703,7 +40527,7 @@ var init_idQuery = __esm({
     init_pagination();
     init_scanWarning();
     init_utils6();
-    logger8 = createLogger({
+    logger6 = createLogger({
       service: "id-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -40721,7 +40545,7 @@ var init_idQuery = __esm({
 
 // src/server/operations/find/nearQuery.ts
 async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId) {
-  logger9.debug("Executing $near query", {
+  logger7.debug("Executing $near query", {
     requestId,
     resource,
     fieldName,
@@ -40732,7 +40556,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
   const searchFunction = /* @__PURE__ */ __name(async (geohashPrefix) => {
     const dbClient2 = getDBClient();
     const tableName = getTableName();
-    logger9.debug("Searching shadow records", {
+    logger7.debug("Searching shadow records", {
       requestId,
       resource,
       fieldName,
@@ -40783,7 +40607,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       previousKeySignature = nextKeySignature;
       exclusiveStartKey = nextKey;
     } while (exclusiveStartKey);
-    logger9.debug("Shadow records found", {
+    logger7.debug("Shadow records found", {
       requestId,
       resource,
       geohashPrefix,
@@ -40794,7 +40618,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       const parts = sk.split("#id#");
       return parts.length === 2 ? parts[1] : null;
     }).filter((id) => id !== null);
-    logger9.debug("Main record IDs extracted", {
+    logger7.debug("Main record IDs extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -40804,14 +40628,14 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       mainRecordIds.map((id) => ({ PK: resource, SK: `id#${id}` })),
       { consistentRead: false, costTracker, requestId }
     );
-    logger9.debug("Main records retrieved", {
+    logger7.debug("Main records retrieved", {
       requestId,
       resource,
       geohashPrefix,
       count: validRecords.length
     });
     const cleanRecords = validRecords.map((record) => extractCleanRecord(record));
-    logger9.debug("Clean records extracted", {
+    logger7.debug("Clean records extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -40824,7 +40648,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
   const config = minPrecisionOverride !== void 0 ? { ...DEFAULT_GEOHASH_CONFIG, minPrecision: minPrecisionOverride } : DEFAULT_GEOHASH_CONFIG;
   const result = await executeNearSearch(nearQuery, fieldName, limit, searchFunction, config);
   const items = result.documents;
-  logger9.info("$near query succeeded", {
+  logger7.info("$near query succeeded", {
     requestId,
     resource,
     fieldName,
@@ -40842,7 +40666,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb4, logger9;
+var import_lib_dynamodb4, logger7;
 var init_nearQuery = __esm({
   "src/server/operations/find/nearQuery.ts"() {
     "use strict";
@@ -40854,7 +40678,7 @@ var init_nearQuery = __esm({
     init_cost_tracker();
     init_dynamodb3();
     init_scanWarning();
-    logger9 = createLogger({
+    logger7 = createLogger({
       service: "near-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -40885,11 +40709,12 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
   }
   const optimizableFilter = findOptimizableFilter(sort.field, parsedFilters);
   const isKeyConditionOptimized = optimizableFilter !== void 0 && KEY_CONDITION_OPERATORS.has(optimizableFilter.parsed.operator);
+  const upperFilter = isKeyConditionOptimized ? findComplementaryBound(optimizableFilter, parsedFilters) : void 0;
   const residualFilters = parsedFilters.filter(
-    (f5) => !(isKeyConditionOptimized && f5 === optimizableFilter)
+    (f5) => !(isKeyConditionOptimized && (f5 === optimizableFilter || f5 === upperFilter))
   );
   if (residualFilters.length > 0) {
-    logger10.debug("Residual filters detected, falling back to full scan", {
+    logger8.debug("Residual filters detected, falling back to full scan", {
       requestId,
       resource,
       sortField: sort.field,
@@ -40897,7 +40722,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     });
     return executeFullScanQuery(resource, normalizedParams, costTracker, requestId);
   }
-  logger10.debug("Executing shadow query", {
+  logger8.debug("Executing shadow query", {
     requestId,
     resource,
     sortField: sort.field,
@@ -40911,7 +40736,8 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     nextToken,
     isKeyConditionOptimized ? optimizableFilter : void 0,
     costTracker,
-    requestId
+    requestId,
+    upperFilter
   );
   const recordIds = extractRecordIds(shadowRecords.Items || []);
   if (recordIds.length === 0) {
@@ -40945,7 +40771,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     shadowRecords.LastEvaluatedKey.PK,
     shadowRecords.LastEvaluatedKey.SK
   ) : void 0;
-  logger10.info("Shadow query succeeded", {
+  logger8.info("Shadow query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -40969,8 +40795,8 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const { perPage, nextToken } = pagination;
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
   const filterSort = { field: filterCandidate.parsed.field, order: "ASC" };
-  const remainingFilters = parsedFilters.filter((f5) => f5 !== filterCandidate);
-  logger10.debug("Executing filter-first query", {
+  const remainingFilters = parsedFilters;
+  logger8.debug("Executing filter-first query", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -40993,7 +40819,7 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger10.info("Filter-first query succeeded", {
+  logger8.info("Filter-first query succeeded", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -41014,7 +40840,7 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
-  logger10.debug("Executing full scan query", {
+  logger8.debug("Executing full scan query", {
     requestId,
     resource,
     sortField: sort.field,
@@ -41035,7 +40861,7 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger10.info("Full scan query succeeded", {
+  logger8.info("Full scan query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -41066,7 +40892,7 @@ async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, c
   let iterations = 0;
   do {
     if (++iterations > MAX_ITERATIONS) {
-      logger10.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
+      logger8.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
         requestId,
         resource,
         iterations
@@ -41096,7 +40922,7 @@ async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, c
     const nextKey = result.LastEvaluatedKey;
     const nextKeySignature = nextKey ? `${nextKey.PK}#${nextKey.SK}` : void 0;
     if (nextKeySignature && nextKeySignature === previousKeySignature) {
-      logger10.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
+      logger8.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
         requestId,
         resource,
         iterations
@@ -41131,7 +40957,7 @@ function selectFilterFirstCandidate(parsedFilters, sortField, schema, perPage) {
   if (eqFilters.length === 0) return void 0;
   const cardinality = schema?.cardinality;
   if (!cardinality) {
-    return void 0;
+    return eqFilters[0];
   }
   const threshold = perPage / 2;
   const scored = eqFilters.map((f5) => ({ f: f5, score: cardinality[f5.parsed.field] ?? 0 })).filter(({ score }) => score > threshold).sort((a5, b5) => b5.score - a5.score);
@@ -41150,7 +40976,7 @@ function sortInMemory(items, sort) {
     return 0;
   });
 }
-async function executeShadowRecordQuery(resource, sort, perPage, nextToken, optimizableFilter, costTracker, _requestId) {
+async function executeShadowRecordQuery(resource, sort, perPage, nextToken, optimizableFilter, costTracker, _requestId, secondFilter) {
   const dbClient2 = getDBClient();
   const tableName = getTableName();
   let exclusiveStartKey;
@@ -41164,7 +40990,8 @@ async function executeShadowRecordQuery(resource, sort, perPage, nextToken, opti
   const { keyConditionExpression, expressionAttributeValues } = buildKeyCondition(
     resource,
     sort.field,
-    optimizableFilter
+    optimizableFilter,
+    secondFilter
   );
   const result = await executeDynamoDBOperation(
     () => dbClient2.send(
@@ -41184,102 +41011,6 @@ async function executeShadowRecordQuery(resource, sort, perPage, nextToken, opti
   costTracker.add(result.ConsumedCapacity);
   return result;
 }
-function buildKeyCondition(resource, sortField, optimizableFilter) {
-  const expressionAttributeValues = {
-    ":pk": resource
-  };
-  if (!optimizableFilter) {
-    return {
-      keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
-      expressionAttributeValues: {
-        ...expressionAttributeValues,
-        ":skPrefix": `${sortField}#`
-      }
-    };
-  }
-  const { operator, type } = optimizableFilter.parsed;
-  const value = optimizableFilter.value;
-  const { encoded, exact } = encodeValueForShadowSK(value, type, operator);
-  const skValue = `${sortField}#${encoded}`;
-  const afterValue = `${skValue}#id#~`;
-  const beforeValue = `${skValue}#id#`;
-  switch (operator) {
-    case "$eq":
-      return {
-        keyConditionExpression: "PK = :pk AND begins_with(SK, :skValue)",
-        expressionAttributeValues: {
-          ...expressionAttributeValues,
-          ":skValue": beforeValue
-        }
-      };
-    // 範囲検索は SK BETWEEN の 1 条件にする。
-    // - DynamoDB はソートキーに 1 つの条件しか許さない（begins_with と比較を並べると ValidationException）
-    // - 上限・下限を sortField の範囲に閉じないと、他の項目のシャドー（や本体 id#…）まで読む
-    // BETWEEN は両端を含むが、端の値（`…#id#`、`…#id#~`、`{sortField}$`）と一致する SK は実在しない
-    case "$gt":
-      return rangeCondition(
-        expressionAttributeValues,
-        exact ? afterValue : beforeValue,
-        fieldUpperBound(sortField)
-      );
-    case "$gte":
-      return rangeCondition(expressionAttributeValues, beforeValue, fieldUpperBound(sortField));
-    case "$lt":
-      return rangeCondition(
-        expressionAttributeValues,
-        `${sortField}#`,
-        exact ? beforeValue : afterValue
-      );
-    case "$lte":
-      return rangeCondition(expressionAttributeValues, `${sortField}#`, afterValue);
-    case "$starts":
-      return {
-        keyConditionExpression: "PK = :pk AND begins_with(SK, :skValue)",
-        expressionAttributeValues: {
-          ...expressionAttributeValues,
-          ":skValue": skValue
-        }
-      };
-    default:
-      return {
-        keyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
-        expressionAttributeValues: {
-          ...expressionAttributeValues,
-          ":skPrefix": `${sortField}#`
-        }
-      };
-  }
-}
-function fieldUpperBound(sortField) {
-  return `${sortField}$`;
-}
-function rangeCondition(base, low, high) {
-  return {
-    keyConditionExpression: "PK = :pk AND SK BETWEEN :skLow AND :skHigh",
-    expressionAttributeValues: { ...base, ":skLow": low, ":skHigh": high }
-  };
-}
-function encodeValueForShadowSK(value, type, operator) {
-  const config = getShadowConfig();
-  if (type === "number" || typeof value === "number") {
-    const num = Number(value);
-    return { encoded: formatFieldValue2("number", num, config), exact: false };
-  }
-  if (type === "boolean" || typeof value === "boolean") {
-    const bool = typeof value === "boolean" ? value : String(value).toLowerCase() === "true";
-    return { encoded: formatFieldValue2("boolean", bool, config), exact: true };
-  }
-  const str = String(value);
-  if (operator !== "$starts" && (type === "date" || inferFieldType(str) === "datetime")) {
-    return { encoded: formatFieldValue2("datetime", str, config), exact: true };
-  }
-  const encoded = formatFieldValue2("string", str, config);
-  const bytes = new TextEncoder().encode(str).length;
-  return {
-    encoded,
-    exact: encoded === escapeString2(str) && bytes < config.stringMaxBytes - 3
-  };
-}
 function extractRecordIds(shadowRecords) {
   return shadowRecords.map((record) => {
     const sk = record.SK;
@@ -41292,7 +41023,7 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
     recordIds.map((id) => ({ PK: resource, SK: `id#${id}` })),
     { consistentRead: true, costTracker, requestId }
   );
-  logger10.debug("Main records fetched", {
+  logger8.debug("Main records fetched", {
     requestId,
     resource,
     requestedCount: new Set(recordIds).size,
@@ -41300,24 +41031,23 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
   });
   return allRecords;
 }
-var import_lib_dynamodb5, logger10, KEY_CONDITION_OPERATORS;
+var import_lib_dynamodb5, logger8;
 var init_shadowQuery = __esm({
   "src/server/operations/find/shadowQuery.ts"() {
     "use strict";
     import_lib_dynamodb5 = __toESM(require_dist_cjs22(), 1);
     init_shared();
-    init_shadow();
     init_batchGet();
     init_cost_tracker();
     init_dynamodb3();
     init_pagination();
     init_scanWarning();
+    init_keyCondition();
     init_utils6();
-    logger10 = createLogger({
+    logger8 = createLogger({
       service: "shadow-query",
       level: process.env.LOG_LEVEL || "info"
     });
-    KEY_CONDITION_OPERATORS = /* @__PURE__ */ new Set(["$eq", "$gt", "$gte", "$lt", "$lte", "$starts"]);
     __name(executeShadowQuery, "executeShadowQuery");
     __name(executeFilterFirstQuery, "executeFilterFirstQuery");
     __name(executeFullScanQuery, "executeFullScanQuery");
@@ -41325,10 +41055,6 @@ var init_shadowQuery = __esm({
     __name(selectFilterFirstCandidate, "selectFilterFirstCandidate");
     __name(sortInMemory, "sortInMemory");
     __name(executeShadowRecordQuery, "executeShadowRecordQuery");
-    __name(buildKeyCondition, "buildKeyCondition");
-    __name(fieldUpperBound, "fieldUpperBound");
-    __name(rangeCondition, "rangeCondition");
-    __name(encodeValueForShadowSK, "encodeValueForShadowSK");
     __name(extractRecordIds, "extractRecordIds");
     __name(fetchMainRecords, "fetchMainRecords");
   }
@@ -41336,14 +41062,14 @@ var init_shadowQuery = __esm({
 
 // src/server/operations/find/handler.ts
 async function handleFind(resource, params, requestId) {
-  logger11.debug("Executing find", {
+  logger9.debug("Executing find", {
     requestId,
     resource,
     params
   });
   const nearDetection = detectNearQuery(params.filter);
   if (nearDetection) {
-    logger11.debug("$near operator detected, executing near search", {
+    logger9.debug("$near operator detected, executing near search", {
       requestId,
       resource,
       fieldName: nearDetection.fieldName
@@ -41360,7 +41086,7 @@ async function handleFind(resource, params, requestId) {
   const config = initializeFindConfig();
   const normalizedParams = normalizeFindParams(config, resource, params);
   validateSortField(config, resource, normalizedParams.sort);
-  logger11.debug("Find parameters normalized", {
+  logger9.debug("Find parameters normalized", {
     requestId,
     resource,
     sort: normalizedParams.sort,
@@ -41375,7 +41101,7 @@ async function handleFind(resource, params, requestId) {
   }
   return executeShadowQuery(resource, normalizedParams, requestId);
 }
-var logger11;
+var logger9;
 var init_handler = __esm({
   "src/server/operations/find/handler.ts"() {
     "use strict";
@@ -41385,7 +41111,7 @@ var init_handler = __esm({
     init_nearQuery();
     init_shadowQuery();
     init_utils6();
-    logger11 = createLogger({
+    logger9 = createLogger({
       service: "find-handler",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -41455,6 +41181,343 @@ var init_findAll = __esm({
   }
 });
 
+// src/server/utils/bulkOperations.ts
+function logLargeBatchWarning(operation2, recordCount, requestId, resource) {
+  if (recordCount > LARGE_BATCH_WARNING_THRESHOLD) {
+    logger10.warn(`Large batch ${operation2} operation detected`, {
+      requestId,
+      resource,
+      recordCount,
+      warningThreshold: LARGE_BATCH_WARNING_THRESHOLD,
+      estimatedTimeoutRisk: "high",
+      recommendation: "Consider splitting the batch into smaller requests to avoid Lambda timeout (15 min limit)"
+    });
+  }
+}
+function calculateTimeoutRisk(startTime) {
+  const elapsedMs = Date.now() - startTime;
+  const remainingMs = LAMBDA_TIMEOUT_MS - elapsedMs;
+  const utilizationPercent = Math.round(elapsedMs / LAMBDA_TIMEOUT_MS * 100);
+  const risk = remainingMs < LAMBDA_TIMEOUT_MS * TIMEOUT_RISK_THRESHOLD ? "high" : "low";
+  return {
+    elapsedMs,
+    remainingMs,
+    risk,
+    utilizationPercent
+  };
+}
+function logPreparationTimeoutRisk(requestId, resource, totalRecords, chunkCount, riskInfo) {
+  logger10.info("Records prepared for chunk execution", {
+    requestId,
+    resource,
+    totalRecords,
+    chunkCount,
+    preparationTimeMs: riskInfo.elapsedMs,
+    remainingTimeMs: riskInfo.remainingMs,
+    timeoutRisk: riskInfo.risk
+  });
+  if (riskInfo.risk === "high") {
+    logger10.warn("High timeout risk detected during preparation phase", {
+      requestId,
+      resource,
+      preparationElapsedMs: riskInfo.elapsedMs,
+      remainingTimeMs: riskInfo.remainingMs,
+      lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
+      recommendation: "Consider reducing batch size or optimizing preparation logic"
+    });
+  }
+}
+function logBulkOperationComplete(operation2, requestId, resource, requested, succeeded, failed, riskInfo, additionalInfo) {
+  const totalElapsedSeconds = Math.round(riskInfo.elapsedMs / 1e3);
+  logger10.info(`${operation2} completed`, {
+    requestId,
+    resource,
+    requested,
+    succeeded,
+    totalFailed: failed,
+    totalExecutionTimeMs: riskInfo.elapsedMs,
+    totalExecutionTimeSeconds: totalElapsedSeconds,
+    lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
+    timeoutUtilization: `${riskInfo.utilizationPercent}%`,
+    ...additionalInfo
+  });
+}
+function logPartialFailure(operation2, requestId, resource, requested, succeeded, failed, errorCodes, additionalInfo) {
+  const failureRate = Math.round(failed / requested * 100);
+  logger10.warn(`Partial failure in ${operation2} operation`, {
+    requestId,
+    resource,
+    totalRequested: requested,
+    successCount: succeeded,
+    failedCount: failed,
+    failureRate: `${failureRate}%`,
+    errorCodes: [...new Set(errorCodes)],
+    ...additionalInfo
+  });
+}
+var logger10;
+var init_bulkOperations = __esm({
+  "src/server/utils/bulkOperations.ts"() {
+    "use strict";
+    init_shared();
+    logger10 = createLogger({ service: "records-lambda" });
+    __name(logLargeBatchWarning, "logLargeBatchWarning");
+    __name(calculateTimeoutRisk, "calculateTimeoutRisk");
+    __name(logPreparationTimeoutRisk, "logPreparationTimeoutRisk");
+    __name(logBulkOperationComplete, "logBulkOperationComplete");
+    __name(logPartialFailure, "logPartialFailure");
+  }
+});
+
+// src/server/utils/chunking.ts
+function estimateRecordBytes(record) {
+  return Buffer.byteLength(JSON.stringify(record) ?? "", "utf8");
+}
+function calculateChunks(records, getItemCount, getByteSize = estimateRecordBytes) {
+  const chunks = [];
+  const itemCounts = [];
+  let currentChunk = [];
+  let currentItemCount = 0;
+  let currentBytes = 0;
+  for (const record of records) {
+    const itemCount = getItemCount(record);
+    const bytes = getByteSize(record);
+    if (itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
+      const errorMsg = `Single record exceeds ${DYNAMODB_TRANSACT_WRITE_MAX_ITEMS} items limit: ${itemCount} items`;
+      logger11.error("Chunk validation failed", {
+        itemCount,
+        limit: DYNAMODB_TRANSACT_WRITE_MAX_ITEMS
+      });
+      throw new Error(errorMsg);
+    }
+    if (currentItemCount + itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS || currentBytes + bytes > CHUNK_MAX_BYTES) {
+      if (currentChunk.length > 0) {
+        chunks.push(currentChunk);
+        itemCounts.push(currentItemCount);
+      }
+      currentChunk = [record];
+      currentItemCount = itemCount;
+      currentBytes = bytes;
+    } else {
+      currentChunk.push(record);
+      currentItemCount += itemCount;
+      currentBytes += bytes;
+    }
+  }
+  if (currentChunk.length > 0) {
+    chunks.push(currentChunk);
+    itemCounts.push(currentItemCount);
+  }
+  logger11.info("Chunk calculation completed", {
+    totalRecords: records.length,
+    chunkCount: chunks.length,
+    itemCounts,
+    minItemsPerChunk: itemCounts.length > 0 ? Math.min(...itemCounts) : 0,
+    maxItemsPerChunk: itemCounts.length > 0 ? Math.max(...itemCounts) : 0,
+    avgItemsPerChunk: itemCounts.length > 0 ? Math.round(itemCounts.reduce((sum, count) => sum + count, 0) / itemCounts.length) : 0
+  });
+  return { chunks, itemCounts };
+}
+async function executeChunks(chunks, executeChunk, getRecordId) {
+  const successRecords = [];
+  const failedIds = [];
+  const errors = [];
+  const totalRecords = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+  const executionStartTime = Date.now();
+  logger11.info("Starting chunk execution", {
+    totalChunks: chunks.length,
+    totalRecords
+  });
+  for (let i5 = 0; i5 < chunks.length; i5++) {
+    const chunk = chunks[i5];
+    const chunkStartTime = Date.now();
+    try {
+      logger11.debug(`Executing chunk ${i5 + 1}/${chunks.length}`, {
+        chunkIndex: i5,
+        recordCount: chunk.length
+      });
+      const successfulRecords = await executeChunk(chunk);
+      successRecords.push(...successfulRecords);
+      const chunkDuration = Date.now() - chunkStartTime;
+      logger11.info(`Chunk ${i5 + 1}/${chunks.length} succeeded`, {
+        chunkIndex: i5,
+        recordCount: chunk.length,
+        durationMs: chunkDuration
+      });
+    } catch (error2) {
+      const chunkDuration = Date.now() - chunkStartTime;
+      const errorMessage = error2 instanceof Error ? error2.message : "Unknown error";
+      const errorCode = getErrorCode(error2);
+      logger11.error(`Chunk ${i5 + 1}/${chunks.length} failed`, {
+        chunkIndex: i5,
+        recordCount: chunk.length,
+        durationMs: chunkDuration,
+        error: errorMessage,
+        errorCode
+      });
+      for (const record of chunk) {
+        const recordId = getRecordId(record);
+        failedIds.push(recordId);
+        errors.push({
+          id: recordId,
+          code: errorCode,
+          message: errorMessage
+        });
+      }
+    }
+  }
+  const totalExecutionTime = Date.now() - executionStartTime;
+  logger11.info("Chunk execution completed", {
+    totalChunks: chunks.length,
+    totalRecords,
+    successCount: successRecords.length,
+    failedCount: failedIds.length,
+    totalExecutionTimeMs: totalExecutionTime,
+    avgTimePerChunkMs: chunks.length > 0 ? Math.round(totalExecutionTime / chunks.length) : 0
+  });
+  if (failedIds.length > 0) {
+    logger11.warn("Partial failure detected in chunk execution", {
+      totalRecords,
+      successCount: successRecords.length,
+      failedCount: failedIds.length,
+      failureRate: `${Math.round(failedIds.length / totalRecords * 100)}%`,
+      failedIds: failedIds.slice(0, 10),
+      // 最初の10件のみログ出力
+      errorSummary: errors.slice(0, 5).map((e5) => ({
+        id: e5.id,
+        code: e5.code,
+        message: e5.message.substring(0, 100)
+        // メッセージを100文字に制限
+      }))
+    });
+  }
+  return {
+    successRecords,
+    failedIds,
+    errors
+  };
+}
+function getErrorCode(error2) {
+  if (error2 && typeof error2 === "object") {
+    if ("name" in error2 && typeof error2.name === "string") {
+      return error2.name;
+    }
+    if ("code" in error2 && typeof error2.code === "string") {
+      return error2.code;
+    }
+  }
+  return "TRANSACTION_FAILED";
+}
+var logger11, CHUNK_MAX_BYTES;
+var init_chunking = __esm({
+  "src/server/utils/chunking.ts"() {
+    "use strict";
+    init_shared();
+    logger11 = createLogger({ service: "records-lambda" });
+    CHUNK_MAX_BYTES = 3.5 * 1024 * 1024;
+    __name(estimateRecordBytes, "estimateRecordBytes");
+    __name(calculateChunks, "calculateChunks");
+    __name(executeChunks, "executeChunks");
+    __name(getErrorCode, "getErrorCode");
+  }
+});
+
+// src/server/utils/idFilter.ts
+function splitIdFilter(filter) {
+  const { id, ...rest } = filter ?? {};
+  if (typeof id === "string") {
+    return { id, rest };
+  }
+  if (typeof id === "object" && id !== null && "$in" in id) {
+    return { ids: (id.$in ?? []).slice(), rest };
+  }
+  return { rest: filter ?? {} };
+}
+function conditionOf(rest) {
+  return Object.keys(rest).length > 0 ? rest : void 0;
+}
+function conditionMatcher(condition) {
+  if (!condition || Object.keys(condition).length === 0) {
+    return () => true;
+  }
+  const parsed = parseFilters(condition);
+  return (record) => matchesAllFilters(record, parsed);
+}
+var init_idFilter = __esm({
+  "src/server/utils/idFilter.ts"() {
+    "use strict";
+    init_utils6();
+    __name(splitIdFilter, "splitIdFilter");
+    __name(conditionOf, "conditionOf");
+    __name(conditionMatcher, "conditionMatcher");
+  }
+});
+
+// src/server/utils/revision.ts
+function revisionOf(item) {
+  const rev = item[REVISION_ATTRIBUTE];
+  return typeof rev === "number" ? rev : void 0;
+}
+function nextRevision(current) {
+  return (current ?? 0) + 1;
+}
+function notExistsCondition() {
+  return { ConditionExpression: "attribute_not_exists(PK)" };
+}
+function unchangedCondition(revision) {
+  const names = { "#rev": REVISION_ATTRIBUTE };
+  if (revision === void 0) {
+    return {
+      ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#rev)",
+      ExpressionAttributeNames: names
+    };
+  }
+  return {
+    ConditionExpression: "#rev = :rev",
+    ExpressionAttributeNames: names,
+    ExpressionAttributeValues: { ":rev": revision }
+  };
+}
+function isWriteConflict(error2) {
+  if (!error2 || typeof error2 !== "object") return false;
+  const { name, CancellationReasons } = error2;
+  if (name === "TransactionConflictException") return true;
+  if (name !== "TransactionCanceledException" || !Array.isArray(CancellationReasons)) return false;
+  const codes = CancellationReasons.map((r5) => r5?.Code).filter((c5) => c5 && c5 !== "None");
+  return codes.length > 0 && codes.every((c5) => c5 === "ConditionalCheckFailed" || c5 === "TransactionConflict");
+}
+function sleep3(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function writeWithConflictRetry(initial, write, refresh, baseDelayMs = 20) {
+  let records = initial;
+  for (let attempt = 0; ; attempt++) {
+    try {
+      if (records.length > 0) await write(records);
+      return records;
+    } catch (error2) {
+      if (!isWriteConflict(error2) || attempt >= MAX_CONFLICT_RETRIES) throw error2;
+      await sleep3(baseDelayMs * 2 ** attempt * (0.5 + Math.random() / 2));
+      records = await refresh(records);
+    }
+  }
+}
+var REVISION_ATTRIBUTE, MAX_CONFLICT_RETRIES;
+var init_revision = __esm({
+  "src/server/utils/revision.ts"() {
+    "use strict";
+    REVISION_ATTRIBUTE = "__rev";
+    MAX_CONFLICT_RETRIES = 5;
+    __name(revisionOf, "revisionOf");
+    __name(nextRevision, "nextRevision");
+    __name(notExistsCondition, "notExistsCondition");
+    __name(unchangedCondition, "unchangedCondition");
+    __name(isWriteConflict, "isWriteConflict");
+    __name(sleep3, "sleep");
+    __name(writeWithConflictRetry, "writeWithConflictRetry");
+  }
+});
+
 // src/server/operations/deleteMany.ts
 var deleteMany_exports = {};
 __export(deleteMany_exports, {
@@ -41466,7 +41529,7 @@ async function handleDeleteMany(resource, params, requestId) {
   let ids;
   let condition;
   if ("ids" in params) {
-    ids = params.ids;
+    ids = [...new Set(params.ids)];
     condition = params.condition;
     logger12.debug("Executing deleteMany with ids", {
       requestId,
@@ -41609,7 +41672,7 @@ async function handleDeleteMany(resource, params, requestId) {
     if (transactItems.length === 0) return;
     const result = await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb6.TransactWriteCommand({
+        new import_lib_dynamodb7.TransactWriteCommand({
           TransactItems: transactItems,
           ReturnConsumedCapacity: "TOTAL"
         })
@@ -41720,11 +41783,11 @@ async function handleDeleteMany(resource, params, requestId) {
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb6, logger12;
+var import_lib_dynamodb7, logger12;
 var init_deleteMany = __esm({
   "src/server/operations/deleteMany.ts"() {
     "use strict";
-    import_lib_dynamodb6 = __toESM(require_dist_cjs22(), 1);
+    import_lib_dynamodb7 = __toESM(require_dist_cjs22(), 1);
     init_shared();
     init_shadow();
     init_batchGet();
@@ -41905,56 +41968,6 @@ var init_timestamps = __esm({
   }
 });
 
-// src/server/utils/ttl.ts
-function calculateTTL(resource, createdAt) {
-  const envKey = `${resource.toUpperCase()}_TTL_DAYS`;
-  const ttlDaysStr = process.env[envKey];
-  if (!ttlDaysStr) {
-    return void 0;
-  }
-  const ttlDays = parseInt(ttlDaysStr, 10);
-  if (isNaN(ttlDays) || ttlDays <= 0) {
-    logger17.warn("Invalid TTL_DAYS value", { resource, envKey, value: ttlDaysStr });
-    return void 0;
-  }
-  const createdAtMs = new Date(createdAt).getTime();
-  const ttlMs = createdAtMs + ttlDays * 24 * 60 * 60 * 1e3;
-  const ttl = Math.floor(ttlMs / 1e3);
-  logger17.debug("TTL calculated", {
-    resource,
-    ttlDays,
-    createdAt,
-    ttl,
-    ttlDate: new Date(ttl * 1e3).toISOString()
-  });
-  return ttl;
-}
-function addTTL(resource, recordData) {
-  const createdAt = recordData.createdAt;
-  if (!createdAt) {
-    logger17.warn("createdAt not found, skipping TTL calculation", { resource });
-    return recordData;
-  }
-  const ttl = calculateTTL(resource, createdAt);
-  if (ttl === void 0) {
-    return recordData;
-  }
-  return {
-    ...recordData,
-    ttl
-  };
-}
-var logger17;
-var init_ttl = __esm({
-  "src/server/utils/ttl.ts"() {
-    "use strict";
-    init_index2();
-    logger17 = createLogger({ service: "records-lambda" });
-    __name(calculateTTL, "calculateTTL");
-    __name(addTTL, "addTTL");
-  }
-});
-
 // src/server/operations/insertMany.ts
 var insertMany_exports = {};
 __export(insertMany_exports, {
@@ -41964,7 +41977,7 @@ async function handleInsertMany(resource, params, requestId) {
   const { data: recordsData } = params;
   const startTime = Date.now();
   const costTracker = new CostTracker();
-  logger18.debug("Executing insertMany", {
+  logger17.debug("Executing insertMany", {
     requestId,
     resource,
     count: recordsData.length
@@ -41989,11 +42002,10 @@ async function handleInsertMany(resource, params, requestId) {
     const recordData = recordsData[i5];
     try {
       const id = recordData.id || ulid2();
-      let fullRecordData = addCreateTimestamps({
+      const fullRecordData = addCreateTimestamps({
         ...recordData,
         id
       });
-      fullRecordData = addTTL(resource, fullRecordData);
       const shadowRecords = generateShadowRecords(fullRecordData, resource, shadowConfig);
       const shadowKeys = shadowRecords.map((shadow) => shadow.SK);
       const mainSK = generateMainRecordSK2(id);
@@ -42007,7 +42019,7 @@ async function handleInsertMany(resource, params, requestId) {
       const failedId = recordData.id || `temp-id-${i5}`;
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode(error2);
-      logger18.error("Failed to prepare record for creation", {
+      logger17.error("Failed to prepare record for creation", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -42076,7 +42088,7 @@ async function handleInsertMany(resource, params, requestId) {
     }
     const result = await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb8.TransactWriteCommand({
+        new import_lib_dynamodb9.TransactWriteCommand({
           TransactItems: transactItems,
           ReturnConsumedCapacity: "TOTAL"
         })
@@ -42201,11 +42213,11 @@ function getPreparationErrorCode(error2) {
   }
   return "VALIDATION_ERROR" /* VALIDATION_ERROR */;
 }
-var import_lib_dynamodb8, logger18;
+var import_lib_dynamodb9, logger17;
 var init_insertMany = __esm({
   "src/server/operations/insertMany.ts"() {
     "use strict";
-    import_lib_dynamodb8 = __toESM(require_dist_cjs22(), 1);
+    import_lib_dynamodb9 = __toESM(require_dist_cjs22(), 1);
     init_shared();
     init_shadow();
     init_shadow();
@@ -42216,8 +42228,7 @@ var init_insertMany = __esm({
     init_dynamodb3();
     init_revision();
     init_timestamps();
-    init_ttl();
-    logger18 = createLogger({ service: "records-lambda" });
+    logger17 = createLogger({ service: "records-lambda" });
     __name(handleInsertMany, "handleInsertMany");
     __name(getPreparationErrorCode, "getPreparationErrorCode");
   }
@@ -42406,7 +42417,7 @@ async function handleUpdateMany(resource, params, requestId) {
   const startTime = Date.now();
   const costTracker = new CostTracker();
   const update = resolveUpdateOperators(patchData);
-  logger20.debug("Executing updateMany", {
+  logger19.debug("Executing updateMany", {
     requestId,
     resource,
     upsert
@@ -42414,15 +42425,15 @@ async function handleUpdateMany(resource, params, requestId) {
   let ids;
   let condition;
   if ("ids" in params) {
-    ids = params.ids;
+    ids = [...new Set(params.ids)];
     condition = params.condition;
-    logger20.debug("Executing updateMany with ids", {
+    logger19.debug("Executing updateMany with ids", {
       requestId,
       resource,
       count: ids.length
     });
   } else {
-    logger20.debug("Executing updateMany with filter", {
+    logger19.debug("Executing updateMany with filter", {
       requestId,
       resource,
       filter: params.filter
@@ -42441,7 +42452,7 @@ async function handleUpdateMany(resource, params, requestId) {
     );
     ids = matched.map((item) => item.id);
     condition = params.filter;
-    logger20.debug("Found records with filter", {
+    logger19.debug("Found records with filter", {
       requestId,
       resource,
       count: ids.length
@@ -42450,7 +42461,7 @@ async function handleUpdateMany(resource, params, requestId) {
       if (upsert) {
         const newId = ulid2();
         ids = [newId];
-        logger20.info("Creating new record with filter (upsert: true)", {
+        logger19.info("Creating new record with filter (upsert: true)", {
           requestId,
           resource,
           newId,
@@ -42489,7 +42500,7 @@ async function handleUpdateMany(resource, params, requestId) {
     );
     const notFoundIds2 = targetIds.filter((id) => !existingIds.has(id));
     if (!upsert && notFoundIds2.length > 0) {
-      logger20.warn("Records not found (upsert: false)", {
+      logger19.warn("Records not found (upsert: false)", {
         requestId,
         resource,
         notFoundCount: notFoundIds2.length,
@@ -42498,7 +42509,7 @@ async function handleUpdateMany(resource, params, requestId) {
       });
     }
     if (upsert && notFoundIds2.length > 0) {
-      logger20.info("Creating new records (upsert: true)", {
+      logger19.info("Creating new records (upsert: true)", {
         requestId,
         resource,
         notFoundCount: notFoundIds2.length,
@@ -42539,7 +42550,7 @@ async function handleUpdateMany(resource, params, requestId) {
         const failedId = existingData.id || "unknown-id";
         const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
         const errorCode = getPreparationErrorCode2(error2);
-        logger20.error("Failed to prepare record for update", {
+        logger19.error("Failed to prepare record for update", {
           requestId,
           recordId: failedId,
           error: errorMessage,
@@ -42577,7 +42588,7 @@ async function handleUpdateMany(resource, params, requestId) {
         } catch (error2) {
           const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
           const errorCode = getPreparationErrorCode2(error2);
-          logger20.error("Failed to prepare new record for upsert", {
+          logger19.error("Failed to prepare new record for upsert", {
             requestId,
             recordId: id,
             error: errorMessage,
@@ -42660,7 +42671,7 @@ async function handleUpdateMany(resource, params, requestId) {
     }
     const result = await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb9.TransactWriteCommand({
+        new import_lib_dynamodb10.TransactWriteCommand({
           TransactItems: transactItems,
           ReturnConsumedCapacity: "TOTAL"
         })
@@ -42679,7 +42690,7 @@ async function handleUpdateMany(resource, params, requestId) {
     const fresh = await prepare(stale.map((record) => record.id));
     if (fresh.preparedRecords.length !== stale.length) {
       throw new AppError(
-        "INTERNAL_ERROR" /* INTERNAL_ERROR */,
+        "VERSION_CONFLICT" /* VERSION_CONFLICT */,
         "Records changed concurrently and could not be re-read for update",
         409
       );
@@ -42696,11 +42707,13 @@ async function handleUpdateMany(resource, params, requestId) {
   const failedIdsMap = {};
   const errorsMap = {};
   const successIdSet = new Set(successRecords.map((r5) => r5.id));
+  const upsertedIds = [];
   for (let i5 = 0; i5 < ids.length; i5++) {
     const id = ids[i5];
     if (successIdSet.has(id)) {
       successIds[i5] = id;
       if (upsert && notFoundIds.includes(id)) {
+        upsertedIds.push(id);
         items.push({
           id,
           ...update.setOnInsert,
@@ -42794,6 +42807,7 @@ async function handleUpdateMany(resource, params, requestId) {
     errors: errorsMap,
     items,
     // 更新したフィールドのみを含むレコード配列（ADR 001）
+    ...upsertedIds.length > 0 && { upsertedIds },
     consumedCapacity: costTracker.getAggregated()
   };
 }
@@ -42808,11 +42822,11 @@ function getPreparationErrorCode2(error2) {
   }
   return "VALIDATION_ERROR" /* VALIDATION_ERROR */;
 }
-var import_lib_dynamodb9, logger20;
+var import_lib_dynamodb10, logger19;
 var init_updateMany = __esm({
   "src/server/operations/updateMany.ts"() {
     "use strict";
-    import_lib_dynamodb9 = __toESM(require_dist_cjs22(), 1);
+    import_lib_dynamodb10 = __toESM(require_dist_cjs22(), 1);
     init_shared();
     init_shadow();
     init_shadow();
@@ -42827,7 +42841,7 @@ var init_updateMany = __esm({
     init_timestamps();
     init_updateOperators();
     init_findAll();
-    logger20 = createLogger({ service: "records-lambda" });
+    logger19 = createLogger({ service: "records-lambda" });
     __name(handleUpdateMany, "handleUpdateMany");
     __name(getPreparationErrorCode2, "getPreparationErrorCode");
   }
@@ -42844,10 +42858,115 @@ init_shared();
 
 // src/server/operations/operationDispatcher.ts
 init_shared();
+
+// src/server/operations/count.ts
+var import_lib_dynamodb6 = __toESM(require_dist_cjs22(), 1);
+init_errors();
+init_cost_tracker();
+init_dynamodb3();
+init_keyCondition();
+init_utils6();
+init_findAll();
+function planKeyCountFilters(parsedFilters) {
+  const [first] = parsedFilters;
+  if (!first || first.parsed.field === "id") return void 0;
+  if (!KEY_CONDITION_OPERATORS.has(first.parsed.operator)) return void 0;
+  const second = parsedFilters.length === 2 ? findComplementaryBound(first, parsedFilters) : void 0;
+  if (parsedFilters.length > 1 && !second) return void 0;
+  if (parsedFilters.length > 2) return void 0;
+  const planned = second ? [first, second] : [first];
+  const allExact = planned.every(
+    (f5) => encodeValueForShadowSK(f5.value, f5.parsed.type, f5.parsed.operator).exact
+  );
+  return allExact ? { first, second } : void 0;
+}
+__name(planKeyCountFilters, "planKeyCountFilters");
+async function countByKeyCondition(keyConditionExpression, expressionAttributeValues, costTracker) {
+  const dbClient2 = getDBClient();
+  const tableName = getTableName();
+  let total = 0;
+  let exclusiveStartKey;
+  do {
+    const result = await executeDynamoDBOperation(
+      () => dbClient2.send(
+        new import_lib_dynamodb6.QueryCommand({
+          TableName: tableName,
+          KeyConditionExpression: keyConditionExpression,
+          ExpressionAttributeValues: expressionAttributeValues,
+          Select: "COUNT",
+          ExclusiveStartKey: exclusiveStartKey,
+          ConsistentRead: true,
+          ReturnConsumedCapacity: "TOTAL"
+        })
+      ),
+      "Query"
+    );
+    costTracker.add(result.ConsumedCapacity);
+    total += result.Count ?? 0;
+    exclusiveStartKey = result.LastEvaluatedKey;
+  } while (exclusiveStartKey);
+  return total;
+}
+__name(countByKeyCondition, "countByKeyCondition");
+async function handleCount(resource, params, requestId) {
+  const filter = params.filter ?? {};
+  if (detectNearQuery(filter)) {
+    throw new InvalidFilterError("count does not support $near", { filter });
+  }
+  const parsedFilters = parseFilters(filter);
+  const costTracker = new CostTracker();
+  if (parsedFilters.length === 0) {
+    const count = await countByKeyCondition(
+      "PK = :pk AND begins_with(SK, :skPrefix)",
+      { ":pk": resource, ":skPrefix": "id#" },
+      costTracker
+    );
+    return { count, consumedCapacity: costTracker.getAggregated() };
+  }
+  const plan = planKeyCountFilters(parsedFilters);
+  if (plan) {
+    const { keyConditionExpression, expressionAttributeValues } = buildKeyCondition(
+      resource,
+      plan.first.parsed.field,
+      plan.first,
+      plan.second
+    );
+    const count = await countByKeyCondition(
+      keyConditionExpression,
+      expressionAttributeValues,
+      costTracker
+    );
+    return { count, consumedCapacity: costTracker.getAggregated() };
+  }
+  const items = await findAllByFilter(resource, filter, requestId);
+  return { count: items.length };
+}
+__name(handleCount, "handleCount");
+
+// src/server/operations/operationDispatcher.ts
 init_deleteMany();
 
 // src/server/operations/deleteOne.ts
 init_shared();
+
+// src/server/utils/bulkError.ts
+init_shared();
+function toAppError(error2, fallbackMessage) {
+  const message = error2?.message ?? fallbackMessage;
+  switch (error2?.code) {
+    case "VALIDATION_ERROR" /* VALIDATION_ERROR */:
+      return new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, message, 400);
+    case "ITEM_NOT_FOUND" /* ITEM_NOT_FOUND */:
+      return new AppError("ITEM_NOT_FOUND" /* ITEM_NOT_FOUND */, message, 404);
+    case "VERSION_CONFLICT" /* VERSION_CONFLICT */:
+      return new AppError("VERSION_CONFLICT" /* VERSION_CONFLICT */, message, 409);
+    default:
+      return new AppError("INTERNAL_ERROR" /* INTERNAL_ERROR */, message, 500);
+  }
+}
+__name(toAppError, "toAppError");
+
+// src/server/operations/deleteOne.ts
 init_findAll();
 var logger13 = createLogger({ service: "records-lambda" });
 async function handleDeleteOne(resource, params, requestId) {
@@ -42870,11 +42989,7 @@ async function handleDeleteOne(resource, params, requestId) {
     );
     if (deleteManyResult.count === 0) {
       const error2 = Object.values(deleteManyResult.errors || {})[0];
-      if (error2) {
-        throw new Error(`Failed to delete record: ${error2.message}`);
-      } else {
-        throw new Error(`Failed to delete record: ${targetId}`);
-      }
+      throw toAppError(error2, `Failed to delete record: ${targetId}`);
     }
     return {
       acknowledged: true,
@@ -42901,11 +43016,7 @@ async function handleDeleteOne(resource, params, requestId) {
     ) : await handleDeleteMany2(resource, { ids: [] }, requestId);
     if (deleteManyResult.count === 0) {
       const error2 = Object.values(deleteManyResult.errors || {})[0];
-      if (error2) {
-        throw new Error(`Failed to delete record: ${error2.message}`);
-      } else {
-        throw new Error(`No records found matching filter`);
-      }
+      throw toAppError(error2 ?? { code: "ITEM_NOT_FOUND" }, "No records found matching filter");
     }
     const deletedId = Object.values(deleteManyResult.successIds || {})[0];
     if (!deletedId) {
@@ -42931,7 +43042,7 @@ init_find();
 init_findMany();
 
 // src/server/operations/findManyReference.ts
-var import_lib_dynamodb7 = __toESM(require_dist_cjs22(), 1);
+var import_lib_dynamodb8 = __toESM(require_dist_cjs22(), 1);
 init_shared();
 init_shadow();
 init_batchGet();
@@ -42964,7 +43075,7 @@ async function handleFindManyReference(resource, params, requestId) {
   }
   const queryResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb7.QueryCommand({
+      new import_lib_dynamodb8.QueryCommand({
         TableName: tableName,
         KeyConditionExpression: "PK = :pk AND begins_with(SK, :skPrefix)",
         ExpressionAttributeValues: {
@@ -43043,9 +43154,9 @@ init_insertMany();
 
 // src/server/operations/insertOne.ts
 init_shared();
-var logger19 = createLogger({ service: "records-lambda" });
+var logger18 = createLogger({ service: "records-lambda" });
 async function handleInsertOne(resource, params, requestId) {
-  logger19.debug("Executing insertOne", {
+  logger18.debug("Executing insertOne", {
     requestId,
     resource
   });
@@ -43059,11 +43170,7 @@ async function handleInsertOne(resource, params, requestId) {
   );
   if (insertManyResult.count === 0) {
     const error2 = Object.values(insertManyResult.errors || {})[0];
-    if (error2) {
-      throw new Error(`Failed to create record: ${error2.message}`);
-    } else {
-      throw new Error("Failed to create record");
-    }
+    throw toAppError(error2, "Failed to create record");
   }
   const createdId = Object.values(insertManyResult.successIds || {})[0];
   if (!createdId) {
@@ -43071,7 +43178,7 @@ async function handleInsertOne(resource, params, requestId) {
   }
   const { handleFindOne: handleFindOne2 } = await Promise.resolve().then(() => (init_findOne(), findOne_exports));
   const createdRecord = await handleFindOne2(resource, { id: createdId }, requestId);
-  logger19.info("insertOne succeeded", {
+  logger18.info("insertOne succeeded", {
     requestId,
     resource,
     id: createdId
@@ -43237,13 +43344,17 @@ init_updateMany();
 // src/server/operations/updateOne.ts
 init_shared();
 init_findAll();
-var logger21 = createLogger({ service: "records-lambda" });
+var logger20 = createLogger({ service: "records-lambda" });
+function upsertedIdOf(result, id) {
+  return result.upsertedIds?.includes(id) ? { upsertedId: id } : {};
+}
+__name(upsertedIdOf, "upsertedIdOf");
 async function handleUpdateOne(resource, params, requestId) {
   const { data: patchData, options } = params;
   const { handleUpdateMany: handleUpdateMany2 } = await Promise.resolve().then(() => (init_updateMany(), updateMany_exports));
   if ("id" in params) {
     const targetId = params.id;
-    logger21.debug("Executing updateOne with id", {
+    logger20.debug("Executing updateOne with id", {
       requestId,
       resource,
       id: targetId,
@@ -43261,14 +43372,7 @@ async function handleUpdateOne(resource, params, requestId) {
     );
     if (updateManyResult.count === 0) {
       const error2 = Object.values(updateManyResult.errors || {})[0];
-      if (error2) {
-        if (error2.code === "VALIDATION_ERROR" /* VALIDATION_ERROR */) {
-          throw new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, error2.message ?? "Invalid patch", 400);
-        }
-        throw new Error(`Failed to update record: ${error2.message}`);
-      } else {
-        throw new Error(`Failed to update record: ${targetId}`);
-      }
+      throw toAppError(error2, `Failed to update record: ${targetId}`);
     }
     if (!updateManyResult.items || updateManyResult.items.length === 0) {
       throw new Error("updateMany did not return items");
@@ -43283,10 +43387,11 @@ async function handleUpdateOne(resource, params, requestId) {
       modifiedCount: 1,
       id: targetId,
       ...updatedItem,
+      ...upsertedIdOf(updateManyResult, targetId),
       consumedCapacity: updateManyResult.consumedCapacity
     };
   } else {
-    logger21.debug("Executing updateOne with filter", {
+    logger20.debug("Executing updateOne with filter", {
       requestId,
       resource,
       filter: params.filter,
@@ -43310,14 +43415,10 @@ async function handleUpdateOne(resource, params, requestId) {
     );
     if (updateManyResult.count === 0) {
       const error2 = Object.values(updateManyResult.errors || {})[0];
-      if (error2) {
-        if (error2.code === "VALIDATION_ERROR" /* VALIDATION_ERROR */) {
-          throw new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, error2.message ?? "Invalid patch", 400);
-        }
-        throw new Error(`Failed to update record: ${error2.message}`);
-      } else {
-        throw new Error(`No records found matching filter`);
-      }
+      throw toAppError(
+        error2 ?? { code: "ITEM_NOT_FOUND" /* ITEM_NOT_FOUND */ },
+        "No records found matching filter"
+      );
     }
     if (!updateManyResult.items || updateManyResult.items.length === 0) {
       throw new Error("updateMany did not return items");
@@ -43336,6 +43437,7 @@ async function handleUpdateOne(resource, params, requestId) {
       modifiedCount: 1,
       id: updatedId,
       ...updatedItem,
+      ...upsertedIdOf(updateManyResult, updatedId),
       consumedCapacity: updateManyResult.consumedCapacity
     };
   }
@@ -43343,13 +43445,13 @@ async function handleUpdateOne(resource, params, requestId) {
 __name(handleUpdateOne, "handleUpdateOne");
 
 // src/server/operations/operationDispatcher.ts
-var logger22 = createLogger({
+var logger21 = createLogger({
   service: "operation-dispatcher",
   level: process.env.LOG_LEVEL || "info"
 });
 async function executeOperation(request2, requestId) {
   const { op: op2, resource } = request2;
-  logger22.debug("Executing operation", {
+  logger21.debug("Executing operation", {
     requestId,
     operation: op2,
     resource
@@ -43373,6 +43475,8 @@ async function executeOperation(request2, requestId) {
         request2.params,
         requestId
       );
+    case "count":
+      return await handleCount(resource, request2.params, requestId);
     case "insertOne": {
       const internalParams = convertInsertOneParams(request2.params);
       return await handleInsertOne(resource, internalParams, requestId);
@@ -44602,13 +44706,13 @@ CognitoJwtVerifier.USER_POOL_ID_REGEX = /^(?<region>(?:eusc-[a-z]{2}|[a-z]{2})-(
 
 // src/server/utils/auth.ts
 init_index2();
-var logger23 = createLogger({ service: "records-lambda" });
+var logger22 = createLogger({ service: "records-lambda" });
 var verifierInstance = null;
 function getVerifier(userPoolId, clientId) {
   if (!verifierInstance) {
-    logger23.debug("Creating JWT verifier instance", { userPoolId, clientId });
+    logger22.debug("Creating JWT verifier instance", { userPoolId, clientId });
     if (!clientId) {
-      logger23.warn(
+      logger22.warn(
         "COGNITO_CLIENT_ID is not set: JWT audience (aud) verification is DISABLED. Tokens issued to ANY app client of this user pool are accepted. Set cognito_client_id (Terraform) / COGNITO_CLIENT_ID in production. See docs/AUTHORIZATION.md",
         { userPoolId }
       );
@@ -44625,18 +44729,18 @@ function getVerifier(userPoolId, clientId) {
 }
 __name(getVerifier, "getVerifier");
 async function verifyJwt(token, userPoolId, clientId) {
-  logger23.debug("Verifying JWT token with signature validation");
+  logger22.debug("Verifying JWT token with signature validation");
   try {
     const verifier = getVerifier(userPoolId, clientId);
     const payload2 = await verifier.verify(token);
-    logger23.debug("JWT token verified successfully", {
+    logger22.debug("JWT token verified successfully", {
       sub: payload2.sub,
       email: payload2.email,
       tokenUse: payload2.token_use
     });
     return payload2;
   } catch (error2) {
-    logger23.error("JWT verification failed", {
+    logger22.error("JWT verification failed", {
       error: error2 instanceof Error ? error2.message : String(error2)
     });
     let message = "JWT verification failed";
@@ -44677,7 +44781,7 @@ async function verifyAuthHeader(authHeader, userPoolId, clientId) {
 __name(verifyAuthHeader, "verifyAuthHeader");
 
 // src/server/utils/authHandler.ts
-var logger24 = createLogger({
+var logger23 = createLogger({
   service: "auth-handler",
   level: process.env.LOG_LEVEL || "info"
 });
@@ -44692,7 +44796,7 @@ async function handleAuthentication(event, requestId) {
 }
 __name(handleAuthentication, "handleAuthentication");
 function handleIAMAuthentication(iam, requestId) {
-  logger24.info("IAM authenticated request", {
+  logger23.info("IAM authenticated request", {
     requestId,
     userArn: iam.userArn,
     accountId: iam.accountId,
@@ -44707,7 +44811,7 @@ async function handleCognitoAuthentication(authHeader, requestId) {
     throw new Error("COGNITO_USER_POOL_ID environment variable is required");
   }
   const jwtPayload = await verifyAuthHeader(authHeader, userPoolId, clientId);
-  logger24.debug("Cognito JWT verified", {
+  logger23.debug("Cognito JWT verified", {
     requestId,
     sub: jwtPayload.sub
   });
@@ -44722,7 +44826,7 @@ init_shared();
 // src/server/utils/responseBuilder.ts
 init_http();
 init_shared();
-var logger25 = createLogger({
+var logger24 = createLogger({
   service: "response-builder",
   level: process.env.LOG_LEVEL || "info"
 });
@@ -44732,7 +44836,7 @@ function createSuccessResponse(data, requestId) {
     success: true,
     data
   };
-  logger25.info("Request succeeded", { requestId });
+  logger24.info("Request succeeded", { requestId });
   return {
     statusCode: HTTP_STATUS.OK,
     headers: {
@@ -44753,7 +44857,7 @@ function createErrorResponse(code, message, statusCode, requestId, logContext) {
     }
   };
   const level = statusCode >= 500 ? "error" : "warn";
-  logger25[level]("Request failed", {
+  logger24[level]("Request failed", {
     requestId,
     event: code,
     message,
@@ -44872,14 +44976,14 @@ function parseRequestBody(body) {
 __name(parseRequestBody, "parseRequestBody");
 
 // src/server/handler.ts
-var logger26 = createLogger({
+var logger25 = createLogger({
   service: "records-lambda",
   level: process.env.LOG_LEVEL || "info"
 });
-logger26.info("Records Lambda started with automatic shadow field detection");
+logger25.info("Records Lambda started with automatic shadow field detection");
 async function handler(event) {
   const requestId = event.requestContext.requestId;
-  logger26.info("Received request", {
+  logger25.info("Received request", {
     requestId,
     method: event.requestContext.http.method,
     path: event.requestContext.http.path
@@ -44889,15 +44993,15 @@ async function handler(event) {
       return createCorsResponse(HTTP_STATUS.OK);
     }
     if (event.requestContext.http.method === "GET" && event.requestContext.http.path === "/version") {
-      const version = "1.26.0";
+      const version = "1.27.0";
       return createSuccessResponse({ version, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, requestId);
     }
     if (event.requestContext.http.method !== "POST") {
-      throw new Error("Only POST method is allowed");
+      throw new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, "Only POST method is allowed", 405);
     }
     await handleAuthentication(event, requestId);
     const request2 = parseRequestBody(event.body);
-    logger26.info("Parsed request", {
+    logger25.info("Parsed request", {
       requestId,
       operation: request2.op,
       resource: request2.resource