@exabugs/dynamodb-client 1.5.3 → 1.6.1

package/dist/server/media-process-handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.5.3
-// Built: 2026-10-04T14:32:33.468Z
+// @exabugs/dynamodb-client v1.6.1
+// Built: 2026-10-11T12:45:55.244Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -2041,19 +2041,19 @@ var init_ProviderError = __esm({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger13;
+        let logger14;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger13 = void 0;
+          logger14 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger13 = options.logger;
+          logger14 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger13?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger14?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -2486,8 +2486,8 @@ var init_configLoader = __esm({
     init_fromSharedConfigFiles();
     init_fromStatic();
     loadConfig = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger13 } = configuration;
-      const envOptions = { signingName, logger: logger13 };
+      const { signingName, logger: logger14 } = configuration;
+      const envOptions = { signingName, logger: logger14 };
       return memoize(chain(fromEnv(environmentVariableSelector, envOptions), fromSharedConfigFiles(configFileSelector, configuration), fromStatic(defaultValue)));
     }, "loadConfig");
   }
@@ -4106,7 +4106,7 @@ var init_ByteArrayCollector = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.browser.js
-function createBufferedReadableStream(upstream, size, logger13) {
+function createBufferedReadableStream(upstream, size, logger14) {
   const reader = upstream.getReader();
   let streamBufferingLoggedWarning = false;
   let bytesSeen = 0;
@@ -4144,7 +4144,7 @@ function createBufferedReadableStream(upstream, size, logger13) {
         const newSize = merge(buffers, mode, chunk);
         if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
           streamBufferingLoggedWarning = true;
-          logger13?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+          logger14?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
         }
         if (newSize >= size) {
           controller.enqueue(flush(buffers, mode));
@@ -4208,9 +4208,9 @@ var init_createBufferedReadable_browser = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.js
-function createBufferedReadable(upstream, size, logger13) {
+function createBufferedReadable(upstream, size, logger14) {
   if (isReadableStream(upstream)) {
-    return createBufferedReadableStream(upstream, size, logger13);
+    return createBufferedReadableStream(upstream, size, logger14);
   }
   const downstream = new import_node_stream2.Readable({ read() {
   } });
@@ -4243,7 +4243,7 @@ function createBufferedReadable(upstream, size, logger13) {
       const newSize = merge(buffers, mode, chunk);
       if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
         streamBufferingLoggedWarning = true;
-        logger13?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+        logger14?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
       }
       if (newSize >= size) {
         downstream.push(flush(buffers, mode));
@@ -8281,19 +8281,19 @@ var require_dist_cjs4 = __commonJS({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger13;
+        let logger14;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger13 = void 0;
+          logger14 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger13 = options.logger;
+          logger14 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger13?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger14?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -11106,9 +11106,9 @@ var require_dist_cjs13 = __commonJS({
           this.middlewareStack.use(mw);
         }
         const stack = clientStack.concat(this.middlewareStack);
-        const { logger: logger13 } = configuration;
+        const { logger: logger14 } = configuration;
         const handlerExecutionContext = {
-          logger: logger13,
+          logger: logger14,
           clientName,
           commandName,
           inputFilterSensitiveLog,
@@ -14922,7 +14922,7 @@ var require_createBufferedReadableStream = __commonJS({
     exports2.sizeOf = sizeOf2;
     exports2.modeOf = modeOf2;
     var ByteArrayCollector_1 = require_ByteArrayCollector();
-    function createBufferedReadableStream2(upstream, size, logger13) {
+    function createBufferedReadableStream2(upstream, size, logger14) {
       const reader = upstream.getReader();
       let streamBufferingLoggedWarning = false;
       let bytesSeen = 0;
@@ -14960,7 +14960,7 @@ var require_createBufferedReadableStream = __commonJS({
             const newSize = merge2(buffers, mode, chunk);
             if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
               streamBufferingLoggedWarning = true;
-              logger13?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+              logger14?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
             }
             if (newSize >= size) {
               controller.enqueue(flush2(buffers, mode));
@@ -15031,9 +15031,9 @@ var require_createBufferedReadable = __commonJS({
     var ByteArrayCollector_1 = require_ByteArrayCollector();
     var createBufferedReadableStream_1 = require_createBufferedReadableStream();
     var stream_type_check_1 = require_stream_type_check();
-    function createBufferedReadable2(upstream, size, logger13) {
+    function createBufferedReadable2(upstream, size, logger14) {
       if ((0, stream_type_check_1.isReadableStream)(upstream)) {
-        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger13);
+        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger14);
       }
       const downstream = new node_stream_1.Readable({ read() {
       } });
@@ -15066,7 +15066,7 @@ var require_createBufferedReadable = __commonJS({
           const newSize = (0, createBufferedReadableStream_1.merge)(buffers, mode, chunk);
           if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
             streamBufferingLoggedWarning = true;
-            logger13?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+            logger14?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
           }
           if (newSize >= size) {
             downstream.push((0, createBufferedReadableStream_1.flush)(buffers, mode));
@@ -15474,7 +15474,7 @@ var require_dist_cjs18 = __commonJS({
       }
       return timing.setTimeout(registerTimeout.bind(null, DEFER_EVENT_LISTENER_TIME$2), DEFER_EVENT_LISTENER_TIME$2);
     }, "setConnectionTimeout");
-    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger13) => {
+    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger14) => {
       if (timeoutInMs) {
         return timing.setTimeout(() => {
           let msg = `@smithy/node-http-handler - [${throwOnRequestTimeout ? "ERROR" : "WARN"}] a request has exceeded the configured ${timeoutInMs} ms requestTimeout.`;
@@ -15487,7 +15487,7 @@ var require_dist_cjs18 = __commonJS({
             reject(error2);
           } else {
             msg += ` Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.`;
-            logger13?.warn?.(msg);
+            logger14?.warn?.(msg);
           }
         }, timeoutInMs);
       }
@@ -15603,7 +15603,7 @@ var require_dist_cjs18 = __commonJS({
         }
         return new _NodeHttpHandler(instanceOrOptions);
       }
-      static checkSocketUsage(agent, socketWarningTimestamp, logger13 = console) {
+      static checkSocketUsage(agent, socketWarningTimestamp, logger14 = console) {
         const { sockets, requests, maxSockets } = agent;
         if (typeof maxSockets !== "number" || maxSockets === Infinity) {
           return socketWarningTimestamp;
@@ -15617,7 +15617,7 @@ var require_dist_cjs18 = __commonJS({
             const socketsInUse = sockets[origin]?.length ?? 0;
             const requestsEnqueued = requests[origin]?.length ?? 0;
             if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
-              logger13?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
+              logger14?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
 See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
 or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`);
               return Date.now();
@@ -18642,7 +18642,7 @@ For more information please go to https://github.com/aws/aws-sdk-js-v3#functiona
       return false;
     }, "isChecksumWithPartNumber");
     var getChecksum = /* @__PURE__ */ __name(async (body, { checksumAlgorithmFn, base64Encoder }) => base64Encoder(await stringHasher(checksumAlgorithmFn, body)), "getChecksum");
-    var validateChecksumFromResponse = /* @__PURE__ */ __name(async (response, { config, responseAlgorithms, logger: logger13 }) => {
+    var validateChecksumFromResponse = /* @__PURE__ */ __name(async (response, { config, responseAlgorithms, logger: logger14 }) => {
       const checksumAlgorithms = getChecksumAlgorithmListForResponse(responseAlgorithms);
       const { body: responseBody, headers: responseHeaders } = response;
       for (const algorithm of checksumAlgorithms) {
@@ -18654,7 +18654,7 @@ For more information please go to https://github.com/aws/aws-sdk-js-v3#functiona
             checksumAlgorithmFn = selectChecksumAlgorithmFunction(algorithm, config);
           } catch (error2) {
             if (algorithm === exports2.ChecksumAlgorithm.CRC64NVME) {
-              logger13?.warn(`Skipping ${exports2.ChecksumAlgorithm.CRC64NVME} checksum validation: ${error2.message}`);
+              logger14?.warn(`Skipping ${exports2.ChecksumAlgorithm.CRC64NVME} checksum validation: ${error2.message}`);
               continue;
             }
             throw error2;
@@ -18796,12 +18796,12 @@ var require_dist_cjs27 = __commonJS({
     var loggerMiddleware = /* @__PURE__ */ __name(() => (next, context) => async (args) => {
       try {
         const response = await next(args);
-        const { clientName, commandName, logger: logger13, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger14, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog, overrideOutputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
         const outputFilterSensitiveLog = overrideOutputFilterSensitiveLog ?? context.outputFilterSensitiveLog;
         const { $metadata, ...outputWithoutMetadata } = response.output;
-        logger13?.info?.({
+        logger14?.info?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -18810,10 +18810,10 @@ var require_dist_cjs27 = __commonJS({
         });
         return response;
       } catch (error2) {
-        const { clientName, commandName, logger: logger13, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger14, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
-        logger13?.error?.({
+        logger14?.error?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -20104,7 +20104,7 @@ var require_dist_cjs32 = __commonJS({
       evaluateTreeRule
     };
     var resolveEndpoint4 = /* @__PURE__ */ __name((ruleSetObject, options) => {
-      const { endpointParams, logger: logger13 } = options;
+      const { endpointParams, logger: logger14 } = options;
       const { parameters, rules } = ruleSetObject;
       options.logger?.debug?.(`${debugId} Initial EndpointParams: ${toDebugString(endpointParams)}`);
       const paramsWithDefault = Object.entries(parameters).filter(([, v5]) => v5.default != null).map(([k4, v5]) => [k4, v5.default]);
@@ -20119,7 +20119,7 @@ var require_dist_cjs32 = __commonJS({
           throw new EndpointError(`Missing required parameter: '${requiredParam}'`);
         }
       }
-      const endpoint = evaluateRules(rules, { endpointParams, logger: logger13, referenceRecord: {} });
+      const endpoint = evaluateRules(rules, { endpointParams, logger: logger14, referenceRecord: {} });
       options.logger?.debug?.(`${debugId} Resolved endpoint: ${toDebugString(endpoint)}`);
       return endpoint;
     }, "resolveEndpoint");
@@ -20628,11 +20628,11 @@ var require_dist_cjs36 = __commonJS({
         userAgentAppId: /* @__PURE__ */ __name(async () => {
           const appId = await normalizedAppIdProvider();
           if (!isValidUserAgentAppId(appId)) {
-            const logger13 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
+            const logger14 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
             if (typeof appId !== "string") {
-              logger13?.warn("userAgentAppId must be a string or undefined.");
+              logger14?.warn("userAgentAppId must be a string or undefined.");
             } else if (appId.length > 50) {
-              logger13?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
+              logger14?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
             }
           }
           return appId;
@@ -21500,8 +21500,8 @@ var require_dist_cjs42 = __commonJS({
     var isFunction2 = /* @__PURE__ */ __name((func) => typeof func === "function", "isFunction");
     var fromStatic2 = /* @__PURE__ */ __name((defaultValue) => isFunction2(defaultValue) ? async () => await defaultValue() : propertyProvider.fromStatic(defaultValue), "fromStatic");
     var loadConfig2 = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger13 } = configuration;
-      const envOptions = { signingName, logger: logger13 };
+      const { signingName, logger: logger14 } = configuration;
+      const envOptions = { signingName, logger: logger14 };
       return propertyProvider.memoize(propertyProvider.chain(fromEnv2(environmentVariableSelector, envOptions), fromSharedConfigFiles2(configFileSelector, configuration), fromStatic2(defaultValue)));
     }, "loadConfig");
     exports2.loadConfig = loadConfig2;
@@ -23737,7 +23737,7 @@ var require_dist_cjs53 = __commonJS({
       "http:": true,
       "https:": true
     };
-    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger13 }) => {
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger14 }) => {
       if (process.env[ENV_CMDS_RELATIVE_URI]) {
         return {
           hostname: CMDS_IP,
@@ -23749,13 +23749,13 @@ var require_dist_cjs53 = __commonJS({
         if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
             tryNextLink: false,
-            logger: logger13
+            logger: logger14
           });
         }
         if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
             tryNextLink: false,
-            logger: logger13
+            logger: logger14
           });
         }
         return {
@@ -23765,7 +23765,7 @@ var require_dist_cjs53 = __commonJS({
       }
       throw new propertyProvider.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
         tryNextLink: false,
-        logger: logger13
+        logger: logger14
       });
     }, "getCmdsUri");
     var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends propertyProvider.CredentialsProviderError {
@@ -23820,10 +23820,10 @@ var require_dist_cjs53 = __commonJS({
     var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
     var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
     var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
-    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger13) => {
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger14) => {
       const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
       const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
-      logger13.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+      logger14.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
 For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
       return {
@@ -23833,19 +23833,19 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       };
     }, "getExtendedInstanceMetadataCredentials");
     var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
-      const logger13 = options?.logger || console;
+      const logger14 = options?.logger || console;
       let pastCredentials;
       return async () => {
         let credentials;
         try {
           credentials = await provider();
           if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
-            credentials = getExtendedInstanceMetadataCredentials(credentials, logger13);
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger14);
           }
         } catch (e4) {
           if (pastCredentials) {
-            logger13.warn("Credential renew failed: ", e4);
-            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger13);
+            logger14.warn("Credential renew failed: ", e4);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger14);
           } else {
             throw e4;
           }
@@ -23862,7 +23862,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
     var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
     var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
       let disableFetchToken = false;
-      const { logger: logger13, profile } = init;
+      const { logger: logger14, profile } = init;
       const { timeout, maxRetries } = providerConfigFromInit(init);
       const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
         const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
@@ -23926,7 +23926,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       return async () => {
         const endpoint = await getInstanceMetadataEndpoint();
         if (disableFetchToken) {
-          logger13?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          logger14?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
           return getCredentials(maxRetries, { ...endpoint, timeout });
         } else {
           let token;
@@ -23940,7 +23940,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
             } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
               disableFetchToken = true;
             }
-            logger13?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            logger14?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
             return getCredentials(maxRetries, { ...endpoint, timeout });
           }
           return getCredentials(maxRetries, {
@@ -23997,7 +23997,7 @@ var require_checkUrl = __commonJS({
     var ECS_CONTAINER_HOST = "169.254.170.2";
     var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
     var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-    var checkUrl = /* @__PURE__ */ __name((url, logger13) => {
+    var checkUrl = /* @__PURE__ */ __name((url, logger14) => {
       if (url.protocol === "https:") {
         return;
       }
@@ -24024,7 +24024,7 @@ var require_checkUrl = __commonJS({
       throw new property_provider_1.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
   - loopback CIDR 127.0.0.0/8 or [::1/128]
   - ECS container host 169.254.170.2
-  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger13 });
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger14 });
     }, "checkUrl");
     exports2.checkUrl = checkUrl;
   }
@@ -24055,13 +24055,13 @@ var require_requestHelpers = __commonJS({
       });
     }
     __name(createGetRequest, "createGetRequest");
-    async function getCredentials(response, logger13) {
+    async function getCredentials(response, logger14) {
       const stream = (0, util_stream_1.sdkStreamMixin)(response.body);
       const str = await stream.transformToString();
       if (response.statusCode === 200) {
         const parsed = JSON.parse(str);
         if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger13 });
+          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger14 });
         }
         return {
           accessKeyId: parsed.AccessKeyId,
@@ -24076,12 +24076,12 @@ var require_requestHelpers = __commonJS({
           parsedBody = JSON.parse(str);
         } catch (e4) {
         }
-        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger13 }), {
+        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger14 }), {
           Code: parsedBody.Code,
           Message: parsedBody.Message
         });
       }
-      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger13 });
+      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger14 });
     }
     __name(getCredentials, "getCredentials");
   }
@@ -25445,14 +25445,14 @@ var require_dist_cjs60 = __commonJS({
     var propertyProvider = require_dist_cjs4();
     var sharedIniFileLoader = require_dist_cjs41();
     var fs = require("fs");
-    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger13, signingName } = {}) => async () => {
-      logger13?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
+    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger14, signingName } = {}) => async () => {
+      logger14?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
       if (!signingName) {
-        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger13 });
+        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger14 });
       }
       const bearerTokenKey = httpAuthSchemes.getBearerTokenEnvKey(signingName);
       if (!(bearerTokenKey in process.env)) {
-        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger13 });
+        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger14 });
       }
       const token = { token: process.env[bearerTokenKey] };
       client.setTokenFeature(token, "BEARER_SERVICE_ENV_VARS", "3");
@@ -25573,8 +25573,8 @@ var require_dist_cjs60 = __commonJS({
         return existingToken;
       }
     }, "fromSso");
-    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger13 }) => async () => {
-      logger13?.debug("@aws-sdk/token-providers - fromStatic");
+    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger14 }) => async () => {
+      logger14?.debug("@aws-sdk/token-providers - fromStatic");
       if (!token || !token.token) {
         throw new propertyProvider.TokenProviderError(`Please pass a valid token to fromStatic`, false);
       }
@@ -26363,7 +26363,7 @@ var require_dist_cjs62 = __commonJS({
     var tokenProviders = require_dist_cjs60();
     var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
     var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
-    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger13 }) => {
+    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger14 }) => {
       let token;
       const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
       if (ssoSession) {
@@ -26381,7 +26381,7 @@ var require_dist_cjs62 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(e4.message, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger13
+            logger: logger14
           });
         }
       } else {
@@ -26390,14 +26390,14 @@ var require_dist_cjs62 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger13
+            logger: logger14
           });
         }
       }
       if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
         throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger13
+          logger: logger14
         });
       }
       const { accessToken } = token;
@@ -26419,14 +26419,14 @@ var require_dist_cjs62 = __commonJS({
       } catch (e4) {
         throw new propertyProvider.CredentialsProviderError(e4, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger13
+          logger: logger14
         });
       }
       const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {} } = ssoResp;
       if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
         throw new propertyProvider.CredentialsProviderError("SSO returns an invalid temporary credential.", {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger13
+          logger: logger14
         });
       }
       const credentials = {
@@ -26444,11 +26444,11 @@ var require_dist_cjs62 = __commonJS({
       }
       return credentials;
     }, "resolveSSOCredentials");
-    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger13) => {
+    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger14) => {
       const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
       if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
         throw new propertyProvider.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger13 });
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger14 });
       }
       return profile;
     }, "validateSsoProfile");
@@ -27231,7 +27231,7 @@ var require_dist_cjs63 = __commonJS({
       }
       async refresh(token) {
         const { SigninClient: SigninClient2, CreateOAuth2TokenCommand: CreateOAuth2TokenCommand2 } = await Promise.resolve().then(() => (init_signin(), signin_exports));
-        const { logger: logger13, userAgentAppId } = this.callerClientConfig ?? {};
+        const { logger: logger14, userAgentAppId } = this.callerClientConfig ?? {};
         const isH22 = /* @__PURE__ */ __name((requestHandler2) => {
           return requestHandler2?.metadata?.handlerProtocol === "h2";
         }, "isH2");
@@ -27244,7 +27244,7 @@ var require_dist_cjs63 = __commonJS({
           },
           region,
           requestHandler,
-          logger: logger13,
+          logger: logger14,
           userAgentAppId,
           ...this.init?.clientConfig
         });
@@ -28262,9 +28262,9 @@ var init_defaultStsRoleAssumers = __esm({
       return async (sourceCreds, params) => {
         closureSourceCreds = sourceCreds;
         if (!stsClient) {
-          const { logger: logger13 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger14 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger13,
+            logger: logger14,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -28275,7 +28275,7 @@ var init_defaultStsRoleAssumers = __esm({
             credentialDefaultProvider: /* @__PURE__ */ __name(() => async () => closureSourceCreds, "credentialDefaultProvider"),
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger13
+            logger: logger14
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleCommand(params));
@@ -28299,9 +28299,9 @@ var init_defaultStsRoleAssumers = __esm({
       let stsClient;
       return async (params) => {
         if (!stsClient) {
-          const { logger: logger13 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger14 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger13,
+            logger: logger14,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -28311,7 +28311,7 @@ var init_defaultStsRoleAssumers = __esm({
             profile,
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger13
+            logger: logger14
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
@@ -28441,7 +28441,7 @@ var require_dist_cjs64 = __commonJS({
       client.setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
       return credentials;
     }, "getValidatedProcessCredentials");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger13) => {
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger14) => {
       const profile = profiles[profileName];
       if (profiles[profileName]) {
         const credentialProcess = profile["credential_process"];
@@ -28457,14 +28457,14 @@ var require_dist_cjs64 = __commonJS({
             }
             return getValidatedProcessCredentials(profileName, data, profiles);
           } catch (error2) {
-            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger13 });
+            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger14 });
           }
         } else {
-          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger13 });
+          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger14 });
         }
       } else {
         throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {
-          logger: logger13
+          logger: logger14
         });
       }
     }, "resolveProcessCredentials");
@@ -28623,21 +28623,21 @@ var require_dist_cjs66 = __commonJS({
     var propertyProvider = require_dist_cjs4();
     var client = (init_client(), __toCommonJS(client_exports));
     var credentialProviderLogin = require_dist_cjs63();
-    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger13) => {
+    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger14) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
           const { fromHttp } = await Promise.resolve().then(() => __toESM(require_dist_cjs54()));
           const { fromContainerMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs53()));
-          logger13?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+          logger14?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
           return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         }, "EcsContainer"),
         Ec2InstanceMetadata: /* @__PURE__ */ __name(async (options) => {
-          logger13?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+          logger14?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
           const { fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs53()));
           return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         }, "Ec2InstanceMetadata"),
         Environment: /* @__PURE__ */ __name(async (options) => {
-          logger13?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+          logger14?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
           const { fromEnv: fromEnv2 } = await Promise.resolve().then(() => __toESM(require_dist_cjs52()));
           return async () => fromEnv2(options)().then(setNamedProvider);
         }, "Environment")
@@ -28645,24 +28645,24 @@ var require_dist_cjs66 = __commonJS({
       if (credentialSource in sourceProvidersMap) {
         return sourceProvidersMap[credentialSource];
       } else {
-        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger13 });
+        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger14 });
       }
     }, "resolveCredentialSource");
     var setNamedProvider = /* @__PURE__ */ __name((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p"), "setNamedProvider");
-    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger13 } = {}) => {
-      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger13 }) || isCredentialSourceProfile(arg, { profile, logger: logger13 }));
+    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger14 } = {}) => {
+      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger14 }) || isCredentialSourceProfile(arg, { profile, logger: logger14 }));
     }, "isAssumeRoleProfile");
-    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger13 }) => {
+    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger14 }) => {
       const withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
       if (withSourceProfile) {
-        logger13?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
+        logger14?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
       }
       return withSourceProfile;
     }, "isAssumeRoleWithSourceProfile");
-    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger13 }) => {
+    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger14 }) => {
       const withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
       if (withProviderProfile) {
-        logger13?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
+        logger14?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
       }
       return withProviderProfile;
     }, "isCredentialSourceProfile");
@@ -56443,7 +56443,7 @@ var require_dist_cjs81 = __commonJS({
         return async () => handler2(this.clientCommand);
       }
     };
-    var BatchGetCommand4 = class extends DynamoDBDocumentClientCommand {
+    var BatchGetCommand5 = class extends DynamoDBDocumentClientCommand {
       static {
         __name(this, "BatchGetCommand");
       }
@@ -56946,7 +56946,7 @@ var require_dist_cjs81 = __commonJS({
         }
       }
       batchGet(args, optionsOrCb, cb) {
-        const command = new BatchGetCommand4(args);
+        const command = new BatchGetCommand5(args);
         if (typeof optionsOrCb === "function") {
           this.send(command, optionsOrCb);
         } else if (typeof cb === "function") {
@@ -57123,7 +57123,7 @@ var require_dist_cjs81 = __commonJS({
       }, "get")
     });
     exports2.BatchExecuteStatementCommand = BatchExecuteStatementCommand;
-    exports2.BatchGetCommand = BatchGetCommand4;
+    exports2.BatchGetCommand = BatchGetCommand5;
     exports2.BatchWriteCommand = BatchWriteCommand;
     exports2.DeleteCommand = DeleteCommand;
     exports2.DynamoDBDocument = DynamoDBDocument;
@@ -57955,235 +57955,86 @@ var init_shadow = __esm({
   }
 });
 
-// src/server/utils/bulkOperations.ts
-function logLargeBatchWarning(operation2, recordCount, requestId, resource) {
-  if (recordCount > LARGE_BATCH_WARNING_THRESHOLD) {
-    logger2.warn(`Large batch ${operation2} operation detected`, {
-      requestId,
-      resource,
-      recordCount,
-      warningThreshold: LARGE_BATCH_WARNING_THRESHOLD,
-      estimatedTimeoutRisk: "high",
-      recommendation: "Consider splitting the batch into smaller requests to avoid Lambda timeout (15 min limit)"
+// src/server/utils/dynamodb.ts
+function getDBClient() {
+  if (!dbClient) {
+    dbClient = createDynamoDBClient({
+      region: process.env.AWS_REGION || process.env.REGION
     });
   }
+  return dbClient;
 }
-function calculateTimeoutRisk(startTime) {
-  const elapsedMs = Date.now() - startTime;
-  const remainingMs = LAMBDA_TIMEOUT_MS - elapsedMs;
-  const utilizationPercent = Math.round(elapsedMs / LAMBDA_TIMEOUT_MS * 100);
-  const risk = remainingMs < LAMBDA_TIMEOUT_MS * TIMEOUT_RISK_THRESHOLD ? "high" : "low";
-  return {
-    elapsedMs,
-    remainingMs,
-    risk,
-    utilizationPercent
-  };
-}
-function logPreparationTimeoutRisk(requestId, resource, totalRecords, chunkCount, riskInfo) {
-  logger2.info("Records prepared for chunk execution", {
-    requestId,
-    resource,
-    totalRecords,
-    chunkCount,
-    preparationTimeMs: riskInfo.elapsedMs,
-    remainingTimeMs: riskInfo.remainingMs,
-    timeoutRisk: riskInfo.risk
-  });
-  if (riskInfo.risk === "high") {
-    logger2.warn("High timeout risk detected during preparation phase", {
-      requestId,
-      resource,
-      preparationElapsedMs: riskInfo.elapsedMs,
-      remainingTimeMs: riskInfo.remainingMs,
-      lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
-      recommendation: "Consider reducing batch size or optimizing preparation logic"
-    });
+function getTableName() {
+  const tableName = process.env.TABLE_NAME;
+  if (!tableName) {
+    throw new ConfigError("TABLE_NAME environment variable is not set");
   }
+  return tableName;
 }
-function logBulkOperationComplete(operation2, requestId, resource, requested, succeeded, failed, riskInfo, additionalInfo) {
-  const totalElapsedSeconds = Math.round(riskInfo.elapsedMs / 1e3);
-  logger2.info(`${operation2} completed`, {
-    requestId,
-    resource,
-    requested,
-    succeeded,
-    totalFailed: failed,
-    totalExecutionTimeMs: riskInfo.elapsedMs,
-    totalExecutionTimeSeconds: totalElapsedSeconds,
-    lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
-    timeoutUtilization: `${riskInfo.utilizationPercent}%`,
-    ...additionalInfo
-  });
+function removeShadowKeys(record) {
+  const { __shadowKeys, ...rest } = record;
+  return rest;
 }
-function logPartialFailure(operation2, requestId, resource, requested, succeeded, failed, errorCodes, additionalInfo) {
-  const failureRate = Math.round(failed / requested * 100);
-  logger2.warn(`Partial failure in ${operation2} operation`, {
-    requestId,
-    resource,
-    totalRequested: requested,
-    successCount: succeeded,
-    failedCount: failed,
-    failureRate: `${failureRate}%`,
-    errorCodes: [...new Set(errorCodes)],
-    ...additionalInfo
-  });
+function extractCleanRecord(item) {
+  const data = item.data || item;
+  return removeShadowKeys(data);
 }
-var logger2;
-var init_bulkOperations = __esm({
-  "src/server/utils/bulkOperations.ts"() {
+async function executeDynamoDBOperation(operation2, operationName) {
+  try {
+    return await operation2();
+  } catch (error2) {
+    if (error2 instanceof Error && error2.name === "AccessDeniedException") {
+      logger2.error("DynamoDB access denied", {
+        errorName: error2.name,
+        errorMessage: error2.message,
+        operation: operationName,
+        tableName: process.env.TABLE_NAME,
+        region: process.env.AWS_REGION || process.env.REGION
+      });
+      throw new Error(`Insufficient permissions to access DynamoDB: ${operationName}`);
+    }
+    throw error2;
+  }
+}
+var logger2, dbClient;
+var init_dynamodb3 = __esm({
+  "src/server/utils/dynamodb.ts"() {
     "use strict";
     init_shared();
     logger2 = createLogger({ service: "records-lambda" });
-    __name(logLargeBatchWarning, "logLargeBatchWarning");
-    __name(calculateTimeoutRisk, "calculateTimeoutRisk");
-    __name(logPreparationTimeoutRisk, "logPreparationTimeoutRisk");
-    __name(logBulkOperationComplete, "logBulkOperationComplete");
-    __name(logPartialFailure, "logPartialFailure");
+    dbClient = null;
+    __name(getDBClient, "getDBClient");
+    __name(getTableName, "getTableName");
+    __name(removeShadowKeys, "removeShadowKeys");
+    __name(extractCleanRecord, "extractCleanRecord");
+    __name(executeDynamoDBOperation, "executeDynamoDBOperation");
   }
 });
 
-// src/server/utils/chunking.ts
-function calculateChunks(records, getItemCount) {
-  const chunks = [];
-  const itemCounts = [];
-  let currentChunk = [];
-  let currentItemCount = 0;
-  for (const record of records) {
-    const itemCount = getItemCount(record);
-    if (itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
-      const errorMsg = `Single record exceeds ${DYNAMODB_TRANSACT_WRITE_MAX_ITEMS} items limit: ${itemCount} items`;
-      logger3.error("Chunk validation failed", {
-        itemCount,
-        limit: DYNAMODB_TRANSACT_WRITE_MAX_ITEMS
-      });
-      throw new Error(errorMsg);
-    }
-    if (currentItemCount + itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
-      if (currentChunk.length > 0) {
-        chunks.push(currentChunk);
-        itemCounts.push(currentItemCount);
-      }
-      currentChunk = [record];
-      currentItemCount = itemCount;
-    } else {
-      currentChunk.push(record);
-      currentItemCount += itemCount;
-    }
-  }
-  if (currentChunk.length > 0) {
-    chunks.push(currentChunk);
-    itemCounts.push(currentItemCount);
-  }
-  logger3.info("Chunk calculation completed", {
-    totalRecords: records.length,
-    chunkCount: chunks.length,
-    itemCounts,
-    minItemsPerChunk: itemCounts.length > 0 ? Math.min(...itemCounts) : 0,
-    maxItemsPerChunk: itemCounts.length > 0 ? Math.max(...itemCounts) : 0,
-    avgItemsPerChunk: itemCounts.length > 0 ? Math.round(itemCounts.reduce((sum, count) => sum + count, 0) / itemCounts.length) : 0
-  });
-  return { chunks, itemCounts };
+// src/server/utils/validation.ts
+function validateSortField(_config, _resource, _sort) {
+  return;
 }
-async function executeChunks(chunks, executeChunk, getRecordId) {
-  const successRecords = [];
-  const failedIds = [];
-  const errors = [];
-  const totalRecords = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
-  const executionStartTime = Date.now();
-  logger3.info("Starting chunk execution", {
-    totalChunks: chunks.length,
-    totalRecords
-  });
-  for (let i4 = 0; i4 < chunks.length; i4++) {
-    const chunk = chunks[i4];
-    const chunkStartTime = Date.now();
-    try {
-      logger3.debug(`Executing chunk ${i4 + 1}/${chunks.length}`, {
-        chunkIndex: i4,
-        recordCount: chunk.length
-      });
-      const successfulRecords = await executeChunk(chunk);
-      successRecords.push(...successfulRecords);
-      const chunkDuration = Date.now() - chunkStartTime;
-      logger3.info(`Chunk ${i4 + 1}/${chunks.length} succeeded`, {
-        chunkIndex: i4,
-        recordCount: chunk.length,
-        durationMs: chunkDuration
-      });
-    } catch (error2) {
-      const chunkDuration = Date.now() - chunkStartTime;
-      const errorMessage = error2 instanceof Error ? error2.message : "Unknown error";
-      const errorCode = getErrorCode(error2);
-      logger3.error(`Chunk ${i4 + 1}/${chunks.length} failed`, {
-        chunkIndex: i4,
-        recordCount: chunk.length,
-        durationMs: chunkDuration,
-        error: errorMessage,
-        errorCode
-      });
-      for (const record of chunk) {
-        const recordId = getRecordId(record);
-        failedIds.push(recordId);
-        errors.push({
-          id: recordId,
-          code: errorCode,
-          message: errorMessage
-        });
-      }
-    }
-  }
-  const totalExecutionTime = Date.now() - executionStartTime;
-  logger3.info("Chunk execution completed", {
-    totalChunks: chunks.length,
-    totalRecords,
-    successCount: successRecords.length,
-    failedCount: failedIds.length,
-    totalExecutionTimeMs: totalExecutionTime,
-    avgTimePerChunkMs: chunks.length > 0 ? Math.round(totalExecutionTime / chunks.length) : 0
-  });
-  if (failedIds.length > 0) {
-    logger3.warn("Partial failure detected in chunk execution", {
-      totalRecords,
-      successCount: successRecords.length,
-      failedCount: failedIds.length,
-      failureRate: `${Math.round(failedIds.length / totalRecords * 100)}%`,
-      failedIds: failedIds.slice(0, 10),
-      // 最初の10件のみログ出力
-      errorSummary: errors.slice(0, 5).map((e4) => ({
-        id: e4.id,
-        code: e4.code,
-        message: e4.message.substring(0, 100)
-        // メッセージを100文字に制限
-      }))
-    });
+function normalizePagination(pagination) {
+  const perPage = Math.min(pagination?.perPage || 50, 50);
+  const nextToken = pagination?.nextToken;
+  return { perPage, nextToken };
+}
+function normalizeSort(config, _resource, sort) {
+  if (sort) {
+    return sort;
   }
   return {
-    successRecords,
-    failedIds,
-    errors
+    field: config.updatedAtField,
+    order: "DESC"
   };
 }
-function getErrorCode(error2) {
-  if (error2 && typeof error2 === "object") {
-    if ("name" in error2 && typeof error2.name === "string") {
-      return error2.name;
-    }
-    if ("code" in error2 && typeof error2.code === "string") {
-      return error2.code;
-    }
-  }
-  return "TRANSACTION_FAILED";
-}
-var logger3;
-var init_chunking = __esm({
-  "src/server/utils/chunking.ts"() {
+var init_validation2 = __esm({
+  "src/server/utils/validation.ts"() {
     "use strict";
-    init_shared();
-    logger3 = createLogger({ service: "records-lambda" });
-    __name(calculateChunks, "calculateChunks");
-    __name(executeChunks, "executeChunks");
-    __name(getErrorCode, "getErrorCode");
+    __name(validateSortField, "validateSortField");
+    __name(normalizePagination, "normalizePagination");
+    __name(normalizeSort, "normalizeSort");
   }
 });
 
@@ -58253,62 +58104,6 @@ var init_cost_tracker = __esm({
   }
 });
 
-// src/server/utils/dynamodb.ts
-function getDBClient() {
-  if (!dbClient) {
-    dbClient = createDynamoDBClient({
-      region: process.env.AWS_REGION || process.env.REGION
-    });
-  }
-  return dbClient;
-}
-function getTableName() {
-  const tableName = process.env.TABLE_NAME;
-  if (!tableName) {
-    throw new ConfigError("TABLE_NAME environment variable is not set");
-  }
-  return tableName;
-}
-function removeShadowKeys(record) {
-  const { __shadowKeys, ...rest } = record;
-  return rest;
-}
-function extractCleanRecord(item) {
-  const data = item.data || item;
-  return removeShadowKeys(data);
-}
-async function executeDynamoDBOperation(operation2, operationName) {
-  try {
-    return await operation2();
-  } catch (error2) {
-    if (error2 instanceof Error && error2.name === "AccessDeniedException") {
-      logger4.error("DynamoDB access denied", {
-        errorName: error2.name,
-        errorMessage: error2.message,
-        operation: operationName,
-        tableName: process.env.TABLE_NAME,
-        region: process.env.AWS_REGION || process.env.REGION
-      });
-      throw new Error(`Insufficient permissions to access DynamoDB: ${operationName}`);
-    }
-    throw error2;
-  }
-}
-var logger4, dbClient;
-var init_dynamodb3 = __esm({
-  "src/server/utils/dynamodb.ts"() {
-    "use strict";
-    init_shared();
-    logger4 = createLogger({ service: "records-lambda" });
-    dbClient = null;
-    __name(getDBClient, "getDBClient");
-    __name(getTableName, "getTableName");
-    __name(removeShadowKeys, "removeShadowKeys");
-    __name(extractCleanRecord, "extractCleanRecord");
-    __name(executeDynamoDBOperation, "executeDynamoDBOperation");
-  }
-});
-
 // src/client/FindCursor.ts
 var init_FindCursor = __esm({
   "src/client/FindCursor.ts"() {
@@ -58517,80 +58312,6 @@ var init_index2 = __esm({
   }
 });
 
-// src/server/utils/timestamps.ts
-var timestamps_exports = {};
-__export(timestamps_exports, {
-  addCreateTimestamps: () => addCreateTimestamps,
-  addUpdateTimestamp: () => addUpdateTimestamp,
-  getTimestampFields: () => getTimestampFields
-});
-function getTimestampFields() {
-  const shadowConfig = getShadowConfig();
-  return {
-    createdAt: shadowConfig.createdAtField,
-    updatedAt: shadowConfig.updatedAtField
-  };
-}
-function addCreateTimestamps(data) {
-  const timestampFields = getTimestampFields();
-  if (!timestampFields) {
-    return data;
-  }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  return {
-    [timestampFields.createdAt]: now,
-    [timestampFields.updatedAt]: now,
-    ...data
-  };
-}
-function addUpdateTimestamp(data) {
-  const timestampFields = getTimestampFields();
-  if (!timestampFields) {
-    return data;
-  }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  return {
-    [timestampFields.updatedAt]: now,
-    ...data
-  };
-}
-var init_timestamps = __esm({
-  "src/server/utils/timestamps.ts"() {
-    "use strict";
-    init_index2();
-    __name(getTimestampFields, "getTimestampFields");
-    __name(addCreateTimestamps, "addCreateTimestamps");
-    __name(addUpdateTimestamp, "addUpdateTimestamp");
-  }
-});
-
-// src/server/utils/validation.ts
-function validateSortField(_config, _resource, _sort) {
-  return;
-}
-function normalizePagination(pagination) {
-  const perPage = Math.min(pagination?.perPage || 50, 50);
-  const nextToken = pagination?.nextToken;
-  return { perPage, nextToken };
-}
-function normalizeSort(config, _resource, sort) {
-  if (sort) {
-    return sort;
-  }
-  return {
-    field: config.updatedAtField,
-    order: "DESC"
-  };
-}
-var init_validation2 = __esm({
-  "src/server/utils/validation.ts"() {
-    "use strict";
-    __name(validateSortField, "validateSortField");
-    __name(normalizePagination, "normalizePagination");
-    __name(normalizeSort, "normalizeSort");
-  }
-});
-
 // src/shared/constants/validation.ts
 var VALIDATION_ERROR_MESSAGES;
 var init_validation3 = __esm({
@@ -58753,7 +58474,7 @@ function parseFilters(filter) {
         parsedFilters.push({ parsed, value });
       }
     } catch (error2) {
-      logger5.error("Invalid filter field syntax", {
+      logger3.error("Invalid filter field syntax", {
         fieldKey,
         error: error2 instanceof Error ? error2.message : String(error2)
       });
@@ -58822,7 +58543,7 @@ function detectNearQuery(filter) {
   }
   return null;
 }
-var logger5;
+var logger3;
 var init_utils5 = __esm({
   "src/server/operations/find/utils.ts"() {
     "use strict";
@@ -58831,7 +58552,7 @@ var init_utils5 = __esm({
     init_shadow();
     init_filter();
     init_validation2();
-    logger5 = createLogger({
+    logger3 = createLogger({
       service: "find-utils",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -58848,7 +58569,7 @@ var init_utils5 = __esm({
 async function executeIdQuery(resource, normalizedParams, requestId) {
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
-  logger6.debug("Executing ID optimized query", {
+  logger4.debug("Executing ID optimized query", {
     requestId,
     resource,
     sort,
@@ -58885,7 +58606,7 @@ async function executeSpecificIdQuery(resource, targetId, requestId) {
   costTracker.add(queryResult.ConsumedCapacity);
   const mainRecords = queryResult.Items || [];
   const items = mainRecords.map((item) => extractCleanRecord(item));
-  logger6.info("ID specific query succeeded", {
+  logger4.info("ID specific query succeeded", {
     requestId,
     resource,
     targetId,
@@ -58932,7 +58653,7 @@ async function executeInQuery(resource, targetIds, sort, requestId) {
     const bVal = String(b4.id ?? "");
     return sort.order === "ASC" ? aVal.localeCompare(bVal) : bVal.localeCompare(aVal);
   });
-  logger6.info("ID $in query succeeded", {
+  logger4.info("ID $in query succeeded", {
     requestId,
     resource,
     requestedCount: targetIds.length,
@@ -59001,7 +58722,7 @@ async function executeAllRecordsQuery(resource, sort, perPage, nextToken, parsed
     queryResult.LastEvaluatedKey.PK,
     queryResult.LastEvaluatedKey.SK
   ) : void 0;
-  logger6.info("ID all records query succeeded", {
+  logger4.info("ID all records query succeeded", {
     requestId,
     resource,
     count: items.length,
@@ -59022,7 +58743,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
   const tableName = getTableName();
   const costTracker = new CostTracker();
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
-  logger6.debug("Executing full scan query (ID sort)", {
+  logger4.debug("Executing full scan query (ID sort)", {
     requestId,
     resource,
     offset
@@ -59034,7 +58755,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
   let iterations = 0;
   do {
     if (++iterations > MAX_ITERATIONS) {
-      logger6.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger4.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
         requestId,
         resource,
         iterations
@@ -59065,7 +58786,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
     const nextKey = queryResult.LastEvaluatedKey;
     const nextKeySignature = nextKey ? `${nextKey.PK}#${nextKey.SK}` : void 0;
     if (nextKeySignature && nextKeySignature === previousKeySignature) {
-      logger6.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger4.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
         requestId,
         resource,
         iterations
@@ -59080,7 +58801,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger6.info("ID full scan query succeeded", {
+  logger4.info("ID full scan query succeeded", {
     requestId,
     resource,
     totalMatched: items.length,
@@ -59095,7 +58816,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb2, logger6;
+var import_lib_dynamodb2, logger4;
 var init_idQuery = __esm({
   "src/server/operations/find/idQuery.ts"() {
     "use strict";
@@ -59105,7 +58826,7 @@ var init_idQuery = __esm({
     init_dynamodb3();
     init_pagination();
     init_utils5();
-    logger6 = createLogger({
+    logger4 = createLogger({
       service: "id-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -59119,7 +58840,7 @@ var init_idQuery = __esm({
 
 // src/server/operations/find/nearQuery.ts
 async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId) {
-  logger7.debug("Executing $near query", {
+  logger5.debug("Executing $near query", {
     requestId,
     resource,
     fieldName,
@@ -59130,7 +58851,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
   const searchFunction = /* @__PURE__ */ __name(async (geohashPrefix) => {
     const dbClient2 = getDBClient();
     const tableName = getTableName();
-    logger7.debug("Searching shadow records", {
+    logger5.debug("Searching shadow records", {
       requestId,
       resource,
       fieldName,
@@ -59155,7 +58876,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     );
     costTracker.add(queryResult.ConsumedCapacity);
     const shadowRecords = queryResult.Items || [];
-    logger7.debug("Shadow records found", {
+    logger5.debug("Shadow records found", {
       requestId,
       resource,
       geohashPrefix,
@@ -59166,7 +58887,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       const parts = sk.split("#id#");
       return parts.length === 2 ? parts[1] : null;
     }).filter((id) => id !== null);
-    logger7.debug("Main record IDs extracted", {
+    logger5.debug("Main record IDs extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -59200,14 +58921,14 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       }
       validRecords.push(...batchGetResult.Responses?.[tableName] || []);
     }
-    logger7.debug("Main records retrieved", {
+    logger5.debug("Main records retrieved", {
       requestId,
       resource,
       geohashPrefix,
       count: validRecords.length
     });
     const cleanRecords = validRecords.map((record) => extractCleanRecord(record));
-    logger7.debug("Clean records extracted", {
+    logger5.debug("Clean records extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -59226,7 +58947,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     config
   );
   const items = result.documents;
-  logger7.info("$near query succeeded", {
+  logger5.info("$near query succeeded", {
     requestId,
     resource,
     fieldName,
@@ -59244,7 +58965,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb3, logger7;
+var import_lib_dynamodb3, logger5;
 var init_nearQuery = __esm({
   "src/server/operations/find/nearQuery.ts"() {
     "use strict";
@@ -59254,7 +58975,7 @@ var init_nearQuery = __esm({
     init_nearSearch();
     init_cost_tracker();
     init_dynamodb3();
-    logger7 = createLogger({
+    logger5 = createLogger({
       service: "near-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -59284,7 +59005,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     (f4) => !(isKeyConditionOptimized && f4 === optimizableFilter)
   );
   if (residualFilters.length > 0) {
-    logger8.debug("Residual filters detected, falling back to full scan", {
+    logger6.debug("Residual filters detected, falling back to full scan", {
       requestId,
       resource,
       sortField: sort.field,
@@ -59292,7 +59013,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     });
     return executeFullScanQuery(resource, normalizedParams, costTracker, requestId);
   }
-  logger8.debug("Executing shadow query", {
+  logger6.debug("Executing shadow query", {
     requestId,
     resource,
     sortField: sort.field,
@@ -59340,7 +59061,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     shadowRecords.LastEvaluatedKey.PK,
     shadowRecords.LastEvaluatedKey.SK
   ) : void 0;
-  logger8.info("Shadow query succeeded", {
+  logger6.info("Shadow query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -59365,7 +59086,7 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
   const filterSort = { field: filterCandidate.parsed.field, order: "ASC" };
   const remainingFilters = parsedFilters.filter((f4) => f4 !== filterCandidate);
-  logger8.debug("Executing filter-first query", {
+  logger6.debug("Executing filter-first query", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -59386,7 +59107,7 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger8.info("Filter-first query succeeded", {
+  logger6.info("Filter-first query succeeded", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -59407,7 +59128,7 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
-  logger8.debug("Executing full scan query", {
+  logger6.debug("Executing full scan query", {
     requestId,
     resource,
     sortField: sort.field,
@@ -59420,7 +59141,7 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger8.info("Full scan query succeeded", {
+  logger6.info("Full scan query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -59444,7 +59165,7 @@ async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, c
   let iterations = 0;
   do {
     if (++iterations > MAX_ITERATIONS) {
-      logger8.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger6.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
         requestId,
         resource,
         iterations
@@ -59465,7 +59186,7 @@ async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, c
     const nextKey = result.LastEvaluatedKey;
     const nextKeySignature = nextKey ? `${nextKey.PK}#${nextKey.SK}` : void 0;
     if (nextKeySignature && nextKeySignature === previousKeySignature) {
-      logger8.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger6.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
         requestId,
         resource,
         iterations
@@ -59676,7 +59397,7 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
     }
     allRecords.push(...batchGetResult.Responses?.[tableName] || []);
   }
-  logger8.debug("Main records fetched", {
+  logger6.debug("Main records fetched", {
     requestId,
     resource,
     requestedCount: uniqueRecordIds.length,
@@ -59684,7 +59405,7 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
   });
   return allRecords;
 }
-var import_lib_dynamodb4, logger8, KEY_CONDITION_OPERATORS;
+var import_lib_dynamodb4, logger6, KEY_CONDITION_OPERATORS;
 var init_shadowQuery = __esm({
   "src/server/operations/find/shadowQuery.ts"() {
     "use strict";
@@ -59695,7 +59416,7 @@ var init_shadowQuery = __esm({
     init_dynamodb3();
     init_pagination();
     init_utils5();
-    logger8 = createLogger({
+    logger6 = createLogger({
       service: "shadow-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -59716,14 +59437,14 @@ var init_shadowQuery = __esm({
 
 // src/server/operations/find/handler.ts
 async function handleFind(resource, params, requestId) {
-  logger9.debug("Executing find", {
+  logger7.debug("Executing find", {
     requestId,
     resource,
     params
   });
   const nearDetection = detectNearQuery(params.filter);
   if (nearDetection) {
-    logger9.debug("$near operator detected, executing near search", {
+    logger7.debug("$near operator detected, executing near search", {
       requestId,
       resource,
       fieldName: nearDetection.fieldName
@@ -59740,7 +59461,7 @@ async function handleFind(resource, params, requestId) {
   const config = initializeFindConfig();
   const normalizedParams = normalizeFindParams(config, resource, params);
   validateSortField(config, resource, normalizedParams.sort);
-  logger9.debug("Find parameters normalized", {
+  logger7.debug("Find parameters normalized", {
     requestId,
     resource,
     sort: normalizedParams.sort,
@@ -59755,7 +59476,7 @@ async function handleFind(resource, params, requestId) {
   }
   return executeShadowQuery(resource, normalizedParams, requestId);
 }
-var logger9;
+var logger7;
 var init_handler = __esm({
   "src/server/operations/find/handler.ts"() {
     "use strict";
@@ -59765,7 +59486,7 @@ var init_handler = __esm({
     init_nearQuery();
     init_shadowQuery();
     init_utils5();
-    logger9 = createLogger({
+    logger7 = createLogger({
       service: "find-handler",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -59785,6 +59506,285 @@ var init_find = __esm({
   }
 });
 
+// src/server/utils/bulkOperations.ts
+function logLargeBatchWarning(operation2, recordCount, requestId, resource) {
+  if (recordCount > LARGE_BATCH_WARNING_THRESHOLD) {
+    logger9.warn(`Large batch ${operation2} operation detected`, {
+      requestId,
+      resource,
+      recordCount,
+      warningThreshold: LARGE_BATCH_WARNING_THRESHOLD,
+      estimatedTimeoutRisk: "high",
+      recommendation: "Consider splitting the batch into smaller requests to avoid Lambda timeout (15 min limit)"
+    });
+  }
+}
+function calculateTimeoutRisk(startTime) {
+  const elapsedMs = Date.now() - startTime;
+  const remainingMs = LAMBDA_TIMEOUT_MS - elapsedMs;
+  const utilizationPercent = Math.round(elapsedMs / LAMBDA_TIMEOUT_MS * 100);
+  const risk = remainingMs < LAMBDA_TIMEOUT_MS * TIMEOUT_RISK_THRESHOLD ? "high" : "low";
+  return {
+    elapsedMs,
+    remainingMs,
+    risk,
+    utilizationPercent
+  };
+}
+function logPreparationTimeoutRisk(requestId, resource, totalRecords, chunkCount, riskInfo) {
+  logger9.info("Records prepared for chunk execution", {
+    requestId,
+    resource,
+    totalRecords,
+    chunkCount,
+    preparationTimeMs: riskInfo.elapsedMs,
+    remainingTimeMs: riskInfo.remainingMs,
+    timeoutRisk: riskInfo.risk
+  });
+  if (riskInfo.risk === "high") {
+    logger9.warn("High timeout risk detected during preparation phase", {
+      requestId,
+      resource,
+      preparationElapsedMs: riskInfo.elapsedMs,
+      remainingTimeMs: riskInfo.remainingMs,
+      lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
+      recommendation: "Consider reducing batch size or optimizing preparation logic"
+    });
+  }
+}
+function logBulkOperationComplete(operation2, requestId, resource, requested, succeeded, failed, riskInfo, additionalInfo) {
+  const totalElapsedSeconds = Math.round(riskInfo.elapsedMs / 1e3);
+  logger9.info(`${operation2} completed`, {
+    requestId,
+    resource,
+    requested,
+    succeeded,
+    totalFailed: failed,
+    totalExecutionTimeMs: riskInfo.elapsedMs,
+    totalExecutionTimeSeconds: totalElapsedSeconds,
+    lambdaTimeoutMs: LAMBDA_TIMEOUT_MS,
+    timeoutUtilization: `${riskInfo.utilizationPercent}%`,
+    ...additionalInfo
+  });
+}
+function logPartialFailure(operation2, requestId, resource, requested, succeeded, failed, errorCodes, additionalInfo) {
+  const failureRate = Math.round(failed / requested * 100);
+  logger9.warn(`Partial failure in ${operation2} operation`, {
+    requestId,
+    resource,
+    totalRequested: requested,
+    successCount: succeeded,
+    failedCount: failed,
+    failureRate: `${failureRate}%`,
+    errorCodes: [...new Set(errorCodes)],
+    ...additionalInfo
+  });
+}
+var logger9;
+var init_bulkOperations = __esm({
+  "src/server/utils/bulkOperations.ts"() {
+    "use strict";
+    init_shared();
+    logger9 = createLogger({ service: "records-lambda" });
+    __name(logLargeBatchWarning, "logLargeBatchWarning");
+    __name(calculateTimeoutRisk, "calculateTimeoutRisk");
+    __name(logPreparationTimeoutRisk, "logPreparationTimeoutRisk");
+    __name(logBulkOperationComplete, "logBulkOperationComplete");
+    __name(logPartialFailure, "logPartialFailure");
+  }
+});
+
+// src/server/utils/chunking.ts
+function calculateChunks(records, getItemCount) {
+  const chunks = [];
+  const itemCounts = [];
+  let currentChunk = [];
+  let currentItemCount = 0;
+  for (const record of records) {
+    const itemCount = getItemCount(record);
+    if (itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
+      const errorMsg = `Single record exceeds ${DYNAMODB_TRANSACT_WRITE_MAX_ITEMS} items limit: ${itemCount} items`;
+      logger10.error("Chunk validation failed", {
+        itemCount,
+        limit: DYNAMODB_TRANSACT_WRITE_MAX_ITEMS
+      });
+      throw new Error(errorMsg);
+    }
+    if (currentItemCount + itemCount > DYNAMODB_TRANSACT_WRITE_MAX_ITEMS) {
+      if (currentChunk.length > 0) {
+        chunks.push(currentChunk);
+        itemCounts.push(currentItemCount);
+      }
+      currentChunk = [record];
+      currentItemCount = itemCount;
+    } else {
+      currentChunk.push(record);
+      currentItemCount += itemCount;
+    }
+  }
+  if (currentChunk.length > 0) {
+    chunks.push(currentChunk);
+    itemCounts.push(currentItemCount);
+  }
+  logger10.info("Chunk calculation completed", {
+    totalRecords: records.length,
+    chunkCount: chunks.length,
+    itemCounts,
+    minItemsPerChunk: itemCounts.length > 0 ? Math.min(...itemCounts) : 0,
+    maxItemsPerChunk: itemCounts.length > 0 ? Math.max(...itemCounts) : 0,
+    avgItemsPerChunk: itemCounts.length > 0 ? Math.round(itemCounts.reduce((sum, count) => sum + count, 0) / itemCounts.length) : 0
+  });
+  return { chunks, itemCounts };
+}
+async function executeChunks(chunks, executeChunk, getRecordId) {
+  const successRecords = [];
+  const failedIds = [];
+  const errors = [];
+  const totalRecords = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+  const executionStartTime = Date.now();
+  logger10.info("Starting chunk execution", {
+    totalChunks: chunks.length,
+    totalRecords
+  });
+  for (let i4 = 0; i4 < chunks.length; i4++) {
+    const chunk = chunks[i4];
+    const chunkStartTime = Date.now();
+    try {
+      logger10.debug(`Executing chunk ${i4 + 1}/${chunks.length}`, {
+        chunkIndex: i4,
+        recordCount: chunk.length
+      });
+      const successfulRecords = await executeChunk(chunk);
+      successRecords.push(...successfulRecords);
+      const chunkDuration = Date.now() - chunkStartTime;
+      logger10.info(`Chunk ${i4 + 1}/${chunks.length} succeeded`, {
+        chunkIndex: i4,
+        recordCount: chunk.length,
+        durationMs: chunkDuration
+      });
+    } catch (error2) {
+      const chunkDuration = Date.now() - chunkStartTime;
+      const errorMessage = error2 instanceof Error ? error2.message : "Unknown error";
+      const errorCode = getErrorCode(error2);
+      logger10.error(`Chunk ${i4 + 1}/${chunks.length} failed`, {
+        chunkIndex: i4,
+        recordCount: chunk.length,
+        durationMs: chunkDuration,
+        error: errorMessage,
+        errorCode
+      });
+      for (const record of chunk) {
+        const recordId = getRecordId(record);
+        failedIds.push(recordId);
+        errors.push({
+          id: recordId,
+          code: errorCode,
+          message: errorMessage
+        });
+      }
+    }
+  }
+  const totalExecutionTime = Date.now() - executionStartTime;
+  logger10.info("Chunk execution completed", {
+    totalChunks: chunks.length,
+    totalRecords,
+    successCount: successRecords.length,
+    failedCount: failedIds.length,
+    totalExecutionTimeMs: totalExecutionTime,
+    avgTimePerChunkMs: chunks.length > 0 ? Math.round(totalExecutionTime / chunks.length) : 0
+  });
+  if (failedIds.length > 0) {
+    logger10.warn("Partial failure detected in chunk execution", {
+      totalRecords,
+      successCount: successRecords.length,
+      failedCount: failedIds.length,
+      failureRate: `${Math.round(failedIds.length / totalRecords * 100)}%`,
+      failedIds: failedIds.slice(0, 10),
+      // 最初の10件のみログ出力
+      errorSummary: errors.slice(0, 5).map((e4) => ({
+        id: e4.id,
+        code: e4.code,
+        message: e4.message.substring(0, 100)
+        // メッセージを100文字に制限
+      }))
+    });
+  }
+  return {
+    successRecords,
+    failedIds,
+    errors
+  };
+}
+function getErrorCode(error2) {
+  if (error2 && typeof error2 === "object") {
+    if ("name" in error2 && typeof error2.name === "string") {
+      return error2.name;
+    }
+    if ("code" in error2 && typeof error2.code === "string") {
+      return error2.code;
+    }
+  }
+  return "TRANSACTION_FAILED";
+}
+var logger10;
+var init_chunking = __esm({
+  "src/server/utils/chunking.ts"() {
+    "use strict";
+    init_shared();
+    logger10 = createLogger({ service: "records-lambda" });
+    __name(calculateChunks, "calculateChunks");
+    __name(executeChunks, "executeChunks");
+    __name(getErrorCode, "getErrorCode");
+  }
+});
+
+// src/server/utils/timestamps.ts
+var timestamps_exports = {};
+__export(timestamps_exports, {
+  addCreateTimestamps: () => addCreateTimestamps,
+  addUpdateTimestamp: () => addUpdateTimestamp,
+  getTimestampFields: () => getTimestampFields
+});
+function getTimestampFields() {
+  const shadowConfig = getShadowConfig();
+  return {
+    createdAt: shadowConfig.createdAtField,
+    updatedAt: shadowConfig.updatedAtField
+  };
+}
+function addCreateTimestamps(data) {
+  const timestampFields = getTimestampFields();
+  if (!timestampFields) {
+    return data;
+  }
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  return {
+    [timestampFields.createdAt]: now,
+    [timestampFields.updatedAt]: now,
+    ...data
+  };
+}
+function addUpdateTimestamp(data) {
+  const timestampFields = getTimestampFields();
+  if (!timestampFields) {
+    return data;
+  }
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  return {
+    [timestampFields.updatedAt]: now,
+    ...data
+  };
+}
+var init_timestamps = __esm({
+  "src/server/utils/timestamps.ts"() {
+    "use strict";
+    init_index2();
+    __name(getTimestampFields, "getTimestampFields");
+    __name(addCreateTimestamps, "addCreateTimestamps");
+    __name(addUpdateTimestamp, "addUpdateTimestamp");
+  }
+});
+
 // src/server/operations/updateMany.ts
 var updateMany_exports = {};
 __export(updateMany_exports, {
@@ -59835,7 +59835,7 @@ async function handleUpdateMany(resource, params, requestId) {
   const upsert = options?.upsert ?? false;
   const startTime = Date.now();
   const costTracker = new CostTracker();
-  logger10.debug("Executing updateMany", {
+  logger11.debug("Executing updateMany", {
     requestId,
     resource,
     upsert
@@ -59843,13 +59843,13 @@ async function handleUpdateMany(resource, params, requestId) {
   let ids;
   if ("ids" in params) {
     ids = params.ids;
-    logger10.debug("Executing updateMany with ids", {
+    logger11.debug("Executing updateMany with ids", {
       requestId,
       resource,
       count: ids.length
     });
   } else {
-    logger10.debug("Executing updateMany with filter", {
+    logger11.debug("Executing updateMany with filter", {
       requestId,
       resource,
       filter: params.filter
@@ -59857,7 +59857,7 @@ async function handleUpdateMany(resource, params, requestId) {
     const { handleFind: handleFind2 } = await Promise.resolve().then(() => (init_find(), find_exports));
     const findResult = await handleFind2(resource, { filter: params.filter }, requestId);
     ids = findResult.items.map((item) => item.id);
-    logger10.debug("Found records with filter", {
+    logger11.debug("Found records with filter", {
       requestId,
       resource,
       count: ids.length
@@ -59866,7 +59866,7 @@ async function handleUpdateMany(resource, params, requestId) {
       if (upsert) {
         const newId = ulid2();
         ids = [newId];
-        logger10.info("Creating new record with filter (upsert: true)", {
+        logger11.info("Creating new record with filter (upsert: true)", {
           requestId,
           resource,
           newId,
@@ -59902,7 +59902,7 @@ async function handleUpdateMany(resource, params, requestId) {
   }));
   const batchGetResult = await executeDynamoDBOperation(
     () => dbClient2.send(
-      new import_lib_dynamodb5.BatchGetCommand({
+      new import_lib_dynamodb6.BatchGetCommand({
         RequestItems: {
           [tableName]: {
             Keys: keys,
@@ -59930,7 +59930,7 @@ async function handleUpdateMany(resource, params, requestId) {
   );
   const notFoundIds = ids.filter((id) => !existingIds.has(id));
   if (!upsert && notFoundIds.length > 0) {
-    logger10.warn("Records not found (upsert: false)", {
+    logger11.warn("Records not found (upsert: false)", {
       requestId,
       resource,
       notFoundCount: notFoundIds.length,
@@ -59939,7 +59939,7 @@ async function handleUpdateMany(resource, params, requestId) {
     });
   }
   if (upsert && notFoundIds.length > 0) {
-    logger10.info("Creating new records (upsert: true)", {
+    logger11.info("Creating new records (upsert: true)", {
       requestId,
       resource,
       notFoundCount: notFoundIds.length,
@@ -59977,7 +59977,7 @@ async function handleUpdateMany(resource, params, requestId) {
       const failedId = existingData.id || "unknown-id";
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode(error2);
-      logger10.error("Failed to prepare record for update", {
+      logger11.error("Failed to prepare record for update", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -60017,7 +60017,7 @@ async function handleUpdateMany(resource, params, requestId) {
       } catch (error2) {
         const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
         const errorCode = getPreparationErrorCode(error2);
-        logger10.error("Failed to prepare new record for upsert", {
+        logger11.error("Failed to prepare new record for upsert", {
           requestId,
           recordId: id,
           error: errorMessage,
@@ -60088,7 +60088,7 @@ async function handleUpdateMany(resource, params, requestId) {
     }
     const result = await executeDynamoDBOperation(
       () => dbClient2.send(
-        new import_lib_dynamodb5.TransactWriteCommand({
+        new import_lib_dynamodb6.TransactWriteCommand({
           TransactItems: transactItems,
           ReturnConsumedCapacity: "TOTAL"
         })
@@ -60230,11 +60230,11 @@ function getPreparationErrorCode(error2) {
   }
   return "VALIDATION_ERROR" /* VALIDATION_ERROR */;
 }
-var import_lib_dynamodb5, logger10;
+var import_lib_dynamodb6, logger11;
 var init_updateMany = __esm({
   "src/server/operations/updateMany.ts"() {
     "use strict";
-    import_lib_dynamodb5 = __toESM(require_dist_cjs81(), 1);
+    import_lib_dynamodb6 = __toESM(require_dist_cjs81(), 1);
     init_shared();
     init_shadow();
     init_shadow();
@@ -60243,7 +60243,7 @@ var init_updateMany = __esm({
     init_cost_tracker();
     init_dynamodb3();
     init_timestamps();
-    logger10 = createLogger({ service: "records-lambda" });
+    logger11 = createLogger({ service: "records-lambda" });
     __name(expandDotNotation, "expandDotNotation");
     __name(applyJsonMergePatch, "applyJsonMergePatch");
     __name(handleUpdateMany, "handleUpdateMany");
@@ -60262,15 +60262,88 @@ var import_client_s3 = __toESM(require_dist_cjs74(), 1);
 var import_client_ssm2 = __toESM(require_dist_cjs75(), 1);
 init_shared();
 
+// src/server/operations/findMany.ts
+var import_lib_dynamodb5 = __toESM(require_dist_cjs81(), 1);
+init_shared();
+init_shadow();
+init_dynamodb3();
+init_find();
+var logger8 = createLogger({ service: "records-lambda" });
+async function handleFindMany(resource, params, requestId) {
+  if ("ids" in params) {
+    const { ids } = params;
+    logger8.debug("Executing findMany by ids", {
+      requestId,
+      resource,
+      count: ids.length
+    });
+    if (ids.length === 0) {
+      return [];
+    }
+    const dbClient2 = getDBClient();
+    const tableName = getTableName();
+    const keys = ids.map((id) => ({
+      PK: resource,
+      SK: generateMainRecordSK2(id)
+    }));
+    const result = await executeDynamoDBOperation(
+      () => dbClient2.send(
+        new import_lib_dynamodb5.BatchGetCommand({
+          RequestItems: {
+            [tableName]: {
+              Keys: keys,
+              ConsistentRead: true
+            }
+          }
+        })
+      ),
+      "BatchGetItem"
+    );
+    const items = result.Responses?.[tableName] || [];
+    const records = items.map((item) => extractCleanRecord(item));
+    logger8.info("findMany by ids succeeded", {
+      requestId,
+      resource,
+      requested: ids.length,
+      found: records.length
+    });
+    return records;
+  }
+  if ("filter" in params) {
+    const { filter } = params;
+    logger8.debug("Executing findMany by filter", {
+      requestId,
+      resource,
+      filter
+    });
+    const findResult = await handleFind(
+      resource,
+      {
+        filter
+      },
+      requestId
+    );
+    logger8.info("findMany by filter succeeded", {
+      requestId,
+      resource,
+      filter,
+      found: findResult.items.length
+    });
+    return findResult.items;
+  }
+  throw new Error("findMany requires either ids or filter");
+}
+__name(handleFindMany, "handleFindMany");
+
 // src/server/operations/updateOne.ts
 init_shared();
-var logger11 = createLogger({ service: "records-lambda" });
+var logger12 = createLogger({ service: "records-lambda" });
 async function handleUpdateOne(resource, params, requestId) {
   const { data: patchData, options } = params;
   const { handleUpdateMany: handleUpdateMany2 } = await Promise.resolve().then(() => (init_updateMany(), updateMany_exports));
   if ("id" in params) {
     const targetId = params.id;
-    logger11.debug("Executing updateOne with id", {
+    logger12.debug("Executing updateOne with id", {
       requestId,
       resource,
       id: targetId,
@@ -60309,7 +60382,7 @@ async function handleUpdateOne(resource, params, requestId) {
       consumedCapacity: updateManyResult.consumedCapacity
     };
   } else {
-    logger11.debug("Executing updateOne with filter", {
+    logger12.debug("Executing updateOne with filter", {
       requestId,
       resource,
       filter: params.filter,
@@ -60357,29 +60430,35 @@ __name(handleUpdateOne, "handleUpdateOne");
 
 // src/server/media/magicBytes.ts
 var SIGNATURES = {
-  "image/jpeg": [{ bytes: [255, 216, 255] }],
-  "image/png": [{ bytes: [137, 80, 78, 71, 13, 10, 26, 10] }],
+  "image/jpeg": [[{ bytes: [255, 216, 255] }]],
+  "image/png": [[{ bytes: [137, 80, 78, 71, 13, 10, 26, 10] }]],
   "image/gif": [
-    { bytes: [71, 73, 70, 56, 55, 97] },
-    { bytes: [71, 73, 70, 56, 57, 97] }
+    [{ bytes: [71, 73, 70, 56, 55, 97] }],
+    // GIF87a
+    [{ bytes: [71, 73, 70, 56, 57, 97] }]
+    // GIF89a
   ],
   "image/webp": [
-    { bytes: [82, 73, 70, 70] },
-    // "RIFF"
-    { bytes: [87, 69, 66, 80], offset: 8 }
-    // "WEBP"
+    [
+      { bytes: [82, 73, 70, 70] },
+      // "RIFF"
+      { bytes: [87, 69, 66, 80], offset: 8 }
+      // "WEBP"
+    ]
   ]
 };
+function matchesCondition(sig, buffer) {
+  const offset = sig.offset ?? 0;
+  if (buffer.length < offset + sig.bytes.length) return false;
+  return sig.bytes.every((byte, i4) => buffer[offset + i4] === byte);
+}
+__name(matchesCondition, "matchesCondition");
 function verifyMagicBytes(contentType, buffer) {
-  const signatures = SIGNATURES[contentType];
-  if (!signatures) {
+  const candidates = SIGNATURES[contentType];
+  if (!candidates) {
     return true;
   }
-  return signatures.every((sig) => {
-    const offset = sig.offset ?? 0;
-    if (buffer.length < offset + sig.bytes.length) return false;
-    return sig.bytes.every((byte, i4) => buffer[offset + i4] === byte);
-  });
+  return candidates.some((conditions) => conditions.every((sig) => matchesCondition(sig, buffer)));
 }
 __name(verifyMagicBytes, "verifyMagicBytes");
 function isProcessableImage(contentType) {
@@ -60387,6 +60466,36 @@ function isProcessableImage(contentType) {
 }
 __name(isProcessableImage, "isProcessableImage");
 
+// src/server/media/metadata.ts
+var RESERVED_METADATA_KEYS = /* @__PURE__ */ new Set(["original-filename"]);
+function extractAppMetadata(metadata) {
+  const result = {};
+  for (const [key, value] of Object.entries(metadata)) {
+    if (!RESERVED_METADATA_KEYS.has(key)) {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+__name(extractAppMetadata, "extractAppMetadata");
+function decodeOriginalFilename(raw) {
+  if (!raw) return void 0;
+  try {
+    return decodeURIComponent(raw);
+  } catch {
+    return raw;
+  }
+}
+__name(decodeOriginalFilename, "decodeOriginalFilename");
+function buildContentDisposition(decodedFilename) {
+  if (!decodedFilename) return "attachment";
+  const sanitized = decodedFilename.replace(/["\r\n]/g, "");
+  const asciiFallback = sanitized.replace(/[^\x20-\x7e]/g, "").trim() || "download";
+  const encoded = encodeURIComponent(sanitized);
+  return `attachment; filename="${asciiFallback}"; filename*=UTF-8''${encoded}`;
+}
+__name(buildContentDisposition, "buildContentDisposition");
+
 // src/server/media/ssmParams.ts
 var import_client_ssm = __toESM(require_dist_cjs75(), 1);
 var cachedImagePolicy;
@@ -60418,30 +60527,23 @@ async function getImagePolicy(ssmClient2, paramName) {
 __name(getImagePolicy, "getImagePolicy");
 
 // src/server/media/process-handler.ts
-var logger12 = createLogger({ service: "media-process-handler" });
+var logger13 = createLogger({ service: "media-process-handler" });
 var s3Client = new import_client_s3.S3Client({ region: process.env.AWS_REGION });
 var ssmClient = new import_client_ssm2.SSMClient({ region: process.env.AWS_REGION });
 var MAX_INPUT_PIXELS = 1e8;
-var RESERVED_METADATA_KEYS = /* @__PURE__ */ new Set(["original-filename"]);
-function extractAppMetadata(metadata) {
-  const result = {};
-  for (const [key, value] of Object.entries(metadata)) {
-    if (!RESERVED_METADATA_KEYS.has(key)) {
-      result[key] = value;
-    }
-  }
-  return result;
-}
-__name(extractAppMetadata, "extractAppMetadata");
-function sanitizeFilenameForHeader(filename) {
-  return filename.replace(/["\r\n]/g, "");
-}
-__name(sanitizeFilenameForHeader, "sanitizeFilenameForHeader");
+var MAGIC_BYTES_CHECK_RANGE = 255;
 async function streamToBuffer(body) {
   const bytes = await body.transformToByteArray();
   return Buffer.from(bytes);
 }
 __name(streamToBuffer, "streamToBuffer");
+async function getHeadBytes(bucket, key) {
+  const result = await s3Client.send(
+    new import_client_s3.GetObjectCommand({ Bucket: bucket, Key: key, Range: `bytes=0-${MAGIC_BYTES_CHECK_RANGE}` })
+  );
+  return streamToBuffer(result.Body);
+}
+__name(getHeadBytes, "getHeadBytes");
 async function writeMediaRecord(fileId, fields, requestId) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await handleUpdateOne(
@@ -60462,14 +60564,22 @@ async function processRecord(bucket, rawKey) {
   const key = decodeURIComponent(rawKey.replace(/\+/g, " "));
   const fileId = key.replace(/^raw\//, "");
   const requestId = `s3-event-${fileId}`;
+  const existing = await handleFindMany("media", { ids: [fileId] }, requestId);
+  const existingRecord = existing[0];
+  if (existingRecord?.status === "completed") {
+    logger13.warn("Media already completed, ignoring re-upload to the same fileId", {
+      requestId,
+      fileId
+    });
+    return;
+  }
   const head = await s3Client.send(new import_client_s3.HeadObjectCommand({ Bucket: bucket, Key: key }));
   const contentType = head.ContentType || "application/octet-stream";
   const metadata = head.Metadata || {};
-  const originalFilename = metadata["original-filename"];
-  const getResult = await s3Client.send(new import_client_s3.GetObjectCommand({ Bucket: bucket, Key: key }));
-  const buffer = await streamToBuffer(getResult.Body);
-  if (!verifyMagicBytes(contentType, buffer)) {
-    logger12.warn("Content type does not match file signature", { requestId, fileId, contentType });
+  const originalFilename = decodeOriginalFilename(metadata["original-filename"]);
+  const headBytes = await getHeadBytes(bucket, key);
+  if (!verifyMagicBytes(contentType, headBytes)) {
+    logger13.warn("Content type does not match file signature", { requestId, fileId, contentType });
     await writeMediaRecord(
       fileId,
       {
@@ -60489,6 +60599,8 @@ async function processRecord(bucket, rawKey) {
       throw new Error("IMAGE_POLICY_PARAM environment variable is not set");
     }
     const imagePolicy = await getImagePolicy(ssmClient, imagePolicyParam);
+    const getResult = await s3Client.send(new import_client_s3.GetObjectCommand({ Bucket: bucket, Key: key }));
+    const buffer = await streamToBuffer(getResult.Body);
     const image = (0, import_sharp.default)(buffer, { limitInputPixels: MAX_INPUT_PIXELS }).rotate();
     const inputMeta = await image.metadata();
     const maxDim = imagePolicy.masterMaxDimension;
@@ -60526,7 +60638,7 @@ async function processRecord(bucket, rawKey) {
         CopySource: `${bucket}/${key}`,
         MetadataDirective: "REPLACE",
         ContentType: contentType,
-        ContentDisposition: originalFilename ? `attachment; filename="${sanitizeFilenameForHeader(originalFilename)}"` : "attachment"
+        ContentDisposition: buildContentDisposition(originalFilename)
       })
     );
     await writeMediaRecord(
@@ -60535,14 +60647,14 @@ async function processRecord(bucket, rawKey) {
         status: "completed",
         contentType,
         outputContentType: contentType,
-        size: head.ContentLength ?? buffer.length,
+        size: head.ContentLength ?? 0,
         ...originalFilename ? { originalFilename } : {},
         ...appMetadata
       },
       requestId
     );
   }
-  logger12.info("Media processed", { requestId, fileId, contentType });
+  logger13.info("Media processed", { requestId, fileId, contentType });
 }
 __name(processRecord, "processRecord");
 var handler = /* @__PURE__ */ __name(async (event) => {
@@ -60552,7 +60664,7 @@ var handler = /* @__PURE__ */ __name(async (event) => {
     try {
       await processRecord(bucket, key);
     } catch (error2) {
-      logger12.error("Failed to process media", {
+      logger13.error("Failed to process media", {
         bucket,
         key,
         error: error2 instanceof Error ? error2.message : String(error2)