@exabugs/dynamodb-client 1.7.0 → 1.9.0

package/dist/server/handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.7.0
-// Built: 2026-10-11T16:38:03.698Z
+// @exabugs/dynamodb-client v1.9.0
+// Built: 2026-10-11T23:33:20.708Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -1548,12 +1548,12 @@ var require_dist_cjs7 = __commonJS({
     var loggerMiddleware = /* @__PURE__ */ __name(() => (next, context) => async (args) => {
       try {
         const response = await next(args);
-        const { clientName, commandName, logger: logger26, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger27, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog, overrideOutputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
         const outputFilterSensitiveLog = overrideOutputFilterSensitiveLog ?? context.outputFilterSensitiveLog;
         const { $metadata, ...outputWithoutMetadata } = response.output;
-        logger26?.info?.({
+        logger27?.info?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -1562,10 +1562,10 @@ var require_dist_cjs7 = __commonJS({
         });
         return response;
       } catch (error2) {
-        const { clientName, commandName, logger: logger26, dynamoDbDocumentClientOptions = {} } = context;
+        const { clientName, commandName, logger: logger27, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
-        logger26?.error?.({
+        logger27?.error?.({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
@@ -3191,19 +3191,19 @@ var init_ProviderError = __esm({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger26;
+        let logger27;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger26 = void 0;
+          logger27 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger26 = options.logger;
+          logger27 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger26?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger27?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -3636,8 +3636,8 @@ var init_configLoader = __esm({
     init_fromSharedConfigFiles();
     init_fromStatic();
     loadConfig = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger26 } = configuration;
-      const envOptions = { signingName, logger: logger26 };
+      const { signingName, logger: logger27 } = configuration;
+      const envOptions = { signingName, logger: logger27 };
       return memoize(chain(fromEnv(environmentVariableSelector, envOptions), fromSharedConfigFiles(configFileSelector, configuration), fromStatic(defaultValue)));
     }, "loadConfig");
   }
@@ -5256,7 +5256,7 @@ var init_ByteArrayCollector = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.browser.js
-function createBufferedReadableStream(upstream, size, logger26) {
+function createBufferedReadableStream(upstream, size, logger27) {
   const reader = upstream.getReader();
   let streamBufferingLoggedWarning = false;
   let bytesSeen = 0;
@@ -5294,7 +5294,7 @@ function createBufferedReadableStream(upstream, size, logger26) {
         const newSize = merge(buffers, mode, chunk);
         if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
           streamBufferingLoggedWarning = true;
-          logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+          logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
         }
         if (newSize >= size) {
           controller.enqueue(flush(buffers, mode));
@@ -5358,9 +5358,9 @@ var init_createBufferedReadable_browser = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/serde/util-stream/createBufferedReadable.js
-function createBufferedReadable(upstream, size, logger26) {
+function createBufferedReadable(upstream, size, logger27) {
   if (isReadableStream(upstream)) {
-    return createBufferedReadableStream(upstream, size, logger26);
+    return createBufferedReadableStream(upstream, size, logger27);
   }
   const downstream = new import_node_stream2.Readable({ read() {
   } });
@@ -5393,7 +5393,7 @@ function createBufferedReadable(upstream, size, logger26) {
       const newSize = merge(buffers, mode, chunk);
       if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
         streamBufferingLoggedWarning = true;
-        logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+        logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
       }
       if (newSize >= size) {
         downstream.push(flush(buffers, mode));
@@ -9159,7 +9159,7 @@ var require_dist_cjs9 = __commonJS({
       evaluateTreeRule
     };
     var resolveEndpoint4 = /* @__PURE__ */ __name((ruleSetObject, options) => {
-      const { endpointParams, logger: logger26 } = options;
+      const { endpointParams, logger: logger27 } = options;
       const { parameters, rules } = ruleSetObject;
       options.logger?.debug?.(`${debugId} Initial EndpointParams: ${toDebugString(endpointParams)}`);
       const paramsWithDefault = Object.entries(parameters).filter(([, v5]) => v5.default != null).map(([k4, v5]) => [k4, v5.default]);
@@ -9174,7 +9174,7 @@ var require_dist_cjs9 = __commonJS({
           throw new EndpointError(`Missing required parameter: '${requiredParam}'`);
         }
       }
-      const endpoint = evaluateRules(rules, { endpointParams, logger: logger26, referenceRecord: {} });
+      const endpoint = evaluateRules(rules, { endpointParams, logger: logger27, referenceRecord: {} });
       options.logger?.debug?.(`${debugId} Resolved endpoint: ${toDebugString(endpoint)}`);
       return endpoint;
     }, "resolveEndpoint");
@@ -9961,19 +9961,19 @@ var require_dist_cjs13 = __commonJS({
       name = "ProviderError";
       tryNextLink;
       constructor(message, options = true) {
-        let logger26;
+        let logger27;
         let tryNextLink = true;
         if (typeof options === "boolean") {
-          logger26 = void 0;
+          logger27 = void 0;
           tryNextLink = options;
         } else if (options != null && typeof options === "object") {
-          logger26 = options.logger;
+          logger27 = options.logger;
           tryNextLink = options.tryNextLink ?? true;
         }
         super(message);
         this.tryNextLink = tryNextLink;
         Object.setPrototypeOf(this, _ProviderError.prototype);
-        logger26?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
+        logger27?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
       static from(error2, options = true) {
         return Object.assign(new this(error2.message, options), error2);
@@ -12769,9 +12769,9 @@ var require_dist_cjs21 = __commonJS({
           this.middlewareStack.use(mw);
         }
         const stack = clientStack.concat(this.middlewareStack);
-        const { logger: logger26 } = configuration;
+        const { logger: logger27 } = configuration;
         const handlerExecutionContext = {
-          logger: logger26,
+          logger: logger27,
           clientName,
           commandName,
           inputFilterSensitiveLog,
@@ -16398,11 +16398,11 @@ var require_dist_cjs24 = __commonJS({
         userAgentAppId: /* @__PURE__ */ __name(async () => {
           const appId = await normalizedAppIdProvider();
           if (!isValidUserAgentAppId(appId)) {
-            const logger26 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
+            const logger27 = input.logger?.constructor?.name === "NoOpLogger" || !input.logger ? console : input.logger;
             if (typeof appId !== "string") {
-              logger26?.warn("userAgentAppId must be a string or undefined.");
+              logger27?.warn("userAgentAppId must be a string or undefined.");
             } else if (appId.length > 50) {
-              logger26?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
+              logger27?.warn("The provided userAgentAppId exceeds the maximum length of 50 characters.");
             }
           }
           return appId;
@@ -17289,8 +17289,8 @@ var require_dist_cjs30 = __commonJS({
     var isFunction2 = /* @__PURE__ */ __name((func) => typeof func === "function", "isFunction");
     var fromStatic2 = /* @__PURE__ */ __name((defaultValue) => isFunction2(defaultValue) ? async () => await defaultValue() : propertyProvider.fromStatic(defaultValue), "fromStatic");
     var loadConfig2 = /* @__PURE__ */ __name(({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {
-      const { signingName, logger: logger26 } = configuration;
-      const envOptions = { signingName, logger: logger26 };
+      const { signingName, logger: logger27 } = configuration;
+      const envOptions = { signingName, logger: logger27 };
       return propertyProvider.memoize(propertyProvider.chain(fromEnv2(environmentVariableSelector, envOptions), fromSharedConfigFiles2(configFileSelector, configuration), fromStatic2(defaultValue)));
     }, "loadConfig");
     exports2.loadConfig = loadConfig2;
@@ -19661,7 +19661,7 @@ var require_dist_cjs40 = __commonJS({
       "http:": true,
       "https:": true
     };
-    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger26 }) => {
+    var getCmdsUri = /* @__PURE__ */ __name(async ({ logger: logger27 }) => {
       if (process.env[ENV_CMDS_RELATIVE_URI]) {
         return {
           hostname: CMDS_IP,
@@ -19673,13 +19673,13 @@ var require_dist_cjs40 = __commonJS({
         if (!parsed.hostname || !(parsed.hostname in GREENGRASS_HOSTS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.hostname} is not a valid container metadata service hostname`, {
             tryNextLink: false,
-            logger: logger26
+            logger: logger27
           });
         }
         if (!parsed.protocol || !(parsed.protocol in GREENGRASS_PROTOCOLS)) {
           throw new propertyProvider.CredentialsProviderError(`${parsed.protocol} is not a valid container metadata service protocol`, {
             tryNextLink: false,
-            logger: logger26
+            logger: logger27
           });
         }
         return {
@@ -19689,7 +19689,7 @@ var require_dist_cjs40 = __commonJS({
       }
       throw new propertyProvider.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${ENV_CMDS_RELATIVE_URI} or ${ENV_CMDS_FULL_URI} environment variable is set`, {
         tryNextLink: false,
-        logger: logger26
+        logger: logger27
       });
     }, "getCmdsUri");
     var InstanceMetadataV1FallbackError = class _InstanceMetadataV1FallbackError extends propertyProvider.CredentialsProviderError {
@@ -19744,10 +19744,10 @@ var require_dist_cjs40 = __commonJS({
     var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS = 5 * 60;
     var STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
     var STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html";
-    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger26) => {
+    var getExtendedInstanceMetadataCredentials = /* @__PURE__ */ __name((credentials, logger27) => {
       const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
       const newExpiration = new Date(Date.now() + refreshInterval * 1e3);
-      logger26.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
+      logger27.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(newExpiration)}.
 For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       const originalExpiration = credentials.originalExpiration ?? credentials.expiration;
       return {
@@ -19757,19 +19757,19 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       };
     }, "getExtendedInstanceMetadataCredentials");
     var staticStabilityProvider = /* @__PURE__ */ __name((provider, options = {}) => {
-      const logger26 = options?.logger || console;
+      const logger27 = options?.logger || console;
       let pastCredentials;
       return async () => {
         let credentials;
         try {
           credentials = await provider();
           if (credentials.expiration && credentials.expiration.getTime() < Date.now()) {
-            credentials = getExtendedInstanceMetadataCredentials(credentials, logger26);
+            credentials = getExtendedInstanceMetadataCredentials(credentials, logger27);
           }
         } catch (e4) {
           if (pastCredentials) {
-            logger26.warn("Credential renew failed: ", e4);
-            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger26);
+            logger27.warn("Credential renew failed: ", e4);
+            credentials = getExtendedInstanceMetadataCredentials(pastCredentials, logger27);
           } else {
             throw e4;
           }
@@ -19786,7 +19786,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
     var fromInstanceMetadata = /* @__PURE__ */ __name((init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), "fromInstanceMetadata");
     var getInstanceMetadataProvider = /* @__PURE__ */ __name((init = {}) => {
       let disableFetchToken = false;
-      const { logger: logger26, profile } = init;
+      const { logger: logger27, profile } = init;
       const { timeout, maxRetries } = providerConfigFromInit(init);
       const getCredentials = /* @__PURE__ */ __name(async (maxRetries2, options) => {
         const isImdsV1Fallback = disableFetchToken || options.headers?.[X_AWS_EC2_METADATA_TOKEN] == null;
@@ -19850,7 +19850,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
       return async () => {
         const endpoint = await getInstanceMetadataEndpoint();
         if (disableFetchToken) {
-          logger26?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
+          logger27?.debug("AWS SDK Instance Metadata", "using v1 fallback (no token fetch)");
           return getCredentials(maxRetries, { ...endpoint, timeout });
         } else {
           let token;
@@ -19864,7 +19864,7 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
             } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
               disableFetchToken = true;
             }
-            logger26?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
+            logger27?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
             return getCredentials(maxRetries, { ...endpoint, timeout });
           }
           return getCredentials(maxRetries, {
@@ -20168,7 +20168,7 @@ var require_dist_cjs43 = __commonJS({
       }
       return timing.setTimeout(registerTimeout.bind(null, DEFER_EVENT_LISTENER_TIME$2), DEFER_EVENT_LISTENER_TIME$2);
     }, "setConnectionTimeout");
-    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger26) => {
+    var setRequestTimeout = /* @__PURE__ */ __name((req, reject, timeoutInMs = 0, throwOnRequestTimeout, logger27) => {
       if (timeoutInMs) {
         return timing.setTimeout(() => {
           let msg = `@smithy/node-http-handler - [${throwOnRequestTimeout ? "ERROR" : "WARN"}] a request has exceeded the configured ${timeoutInMs} ms requestTimeout.`;
@@ -20181,7 +20181,7 @@ var require_dist_cjs43 = __commonJS({
             reject(error2);
           } else {
             msg += ` Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.`;
-            logger26?.warn?.(msg);
+            logger27?.warn?.(msg);
           }
         }, timeoutInMs);
       }
@@ -20297,7 +20297,7 @@ var require_dist_cjs43 = __commonJS({
         }
         return new _NodeHttpHandler(instanceOrOptions);
       }
-      static checkSocketUsage(agent, socketWarningTimestamp, logger26 = console) {
+      static checkSocketUsage(agent, socketWarningTimestamp, logger27 = console) {
         const { sockets, requests, maxSockets } = agent;
         if (typeof maxSockets !== "number" || maxSockets === Infinity) {
           return socketWarningTimestamp;
@@ -20311,7 +20311,7 @@ var require_dist_cjs43 = __commonJS({
             const socketsInUse = sockets[origin]?.length ?? 0;
             const requestsEnqueued = requests[origin]?.length ?? 0;
             if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
-              logger26?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
+              logger27?.warn?.(`@smithy/node-http-handler:WARN - socket usage at capacity=${socketsInUse} and ${requestsEnqueued} additional requests are enqueued.
 See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html
 or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config.`);
               return Date.now();
@@ -20841,7 +20841,7 @@ var require_checkUrl = __commonJS({
     var ECS_CONTAINER_HOST = "169.254.170.2";
     var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
     var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-    var checkUrl = /* @__PURE__ */ __name((url, logger26) => {
+    var checkUrl = /* @__PURE__ */ __name((url, logger27) => {
       if (url.protocol === "https:") {
         return;
       }
@@ -20868,7 +20868,7 @@ var require_checkUrl = __commonJS({
       throw new property_provider_1.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
   - loopback CIDR 127.0.0.0/8 or [::1/128]
   - ECS container host 169.254.170.2
-  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger26 });
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger: logger27 });
     }, "checkUrl");
     exports2.checkUrl = checkUrl;
   }
@@ -21085,7 +21085,7 @@ var require_createBufferedReadableStream = __commonJS({
     exports2.sizeOf = sizeOf2;
     exports2.modeOf = modeOf2;
     var ByteArrayCollector_1 = require_ByteArrayCollector();
-    function createBufferedReadableStream2(upstream, size, logger26) {
+    function createBufferedReadableStream2(upstream, size, logger27) {
       const reader = upstream.getReader();
       let streamBufferingLoggedWarning = false;
       let bytesSeen = 0;
@@ -21123,7 +21123,7 @@ var require_createBufferedReadableStream = __commonJS({
             const newSize = merge2(buffers, mode, chunk);
             if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
               streamBufferingLoggedWarning = true;
-              logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+              logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
             }
             if (newSize >= size) {
               controller.enqueue(flush2(buffers, mode));
@@ -21194,9 +21194,9 @@ var require_createBufferedReadable = __commonJS({
     var ByteArrayCollector_1 = require_ByteArrayCollector();
     var createBufferedReadableStream_1 = require_createBufferedReadableStream();
     var stream_type_check_1 = require_stream_type_check();
-    function createBufferedReadable2(upstream, size, logger26) {
+    function createBufferedReadable2(upstream, size, logger27) {
       if ((0, stream_type_check_1.isReadableStream)(upstream)) {
-        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger26);
+        return (0, createBufferedReadableStream_1.createBufferedReadableStream)(upstream, size, logger27);
       }
       const downstream = new node_stream_1.Readable({ read() {
       } });
@@ -21229,7 +21229,7 @@ var require_createBufferedReadable = __commonJS({
           const newSize = (0, createBufferedReadableStream_1.merge)(buffers, mode, chunk);
           if (!streamBufferingLoggedWarning && bytesSeen > size * 2) {
             streamBufferingLoggedWarning = true;
-            logger26?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
+            logger27?.warn(`@smithy/util-stream - stream chunk size ${chunkSize} is below threshold of ${size}, automatically buffering.`);
           }
           if (newSize >= size) {
             downstream.push((0, createBufferedReadableStream_1.flush)(buffers, mode));
@@ -22071,13 +22071,13 @@ var require_requestHelpers = __commonJS({
       });
     }
     __name(createGetRequest, "createGetRequest");
-    async function getCredentials(response, logger26) {
+    async function getCredentials(response, logger27) {
       const stream = (0, util_stream_1.sdkStreamMixin)(response.body);
       const str = await stream.transformToString();
       if (response.statusCode === 200) {
         const parsed = JSON.parse(str);
         if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger26 });
+          throw new property_provider_1.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger: logger27 });
         }
         return {
           accessKeyId: parsed.AccessKeyId,
@@ -22092,12 +22092,12 @@ var require_requestHelpers = __commonJS({
           parsedBody = JSON.parse(str);
         } catch (e4) {
         }
-        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger26 }), {
+        throw Object.assign(new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger27 }), {
           Code: parsedBody.Code,
           Message: parsedBody.Message
         });
       }
-      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger26 });
+      throw new property_provider_1.CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger: logger27 });
     }
     __name(getCredentials, "getCredentials");
   }
@@ -23461,14 +23461,14 @@ var require_dist_cjs53 = __commonJS({
     var propertyProvider = require_dist_cjs13();
     var sharedIniFileLoader = require_dist_cjs29();
     var fs = require("fs");
-    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger26, signingName } = {}) => async () => {
-      logger26?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
+    var fromEnvSigningName = /* @__PURE__ */ __name(({ logger: logger27, signingName } = {}) => async () => {
+      logger27?.debug?.("@aws-sdk/token-providers - fromEnvSigningName");
       if (!signingName) {
-        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger26 });
+        throw new propertyProvider.TokenProviderError("Please pass 'signingName' to compute environment variable key", { logger: logger27 });
       }
       const bearerTokenKey = httpAuthSchemes.getBearerTokenEnvKey(signingName);
       if (!(bearerTokenKey in process.env)) {
-        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger26 });
+        throw new propertyProvider.TokenProviderError(`Token not present in '${bearerTokenKey}' environment variable`, { logger: logger27 });
       }
       const token = { token: process.env[bearerTokenKey] };
       client.setTokenFeature(token, "BEARER_SERVICE_ENV_VARS", "3");
@@ -23589,8 +23589,8 @@ var require_dist_cjs53 = __commonJS({
         return existingToken;
       }
     }, "fromSso");
-    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger26 }) => async () => {
-      logger26?.debug("@aws-sdk/token-providers - fromStatic");
+    var fromStatic2 = /* @__PURE__ */ __name(({ token, logger: logger27 }) => async () => {
+      logger27?.debug("@aws-sdk/token-providers - fromStatic");
       if (!token || !token.token) {
         throw new propertyProvider.TokenProviderError(`Please pass a valid token to fromStatic`, false);
       }
@@ -24379,7 +24379,7 @@ var require_dist_cjs55 = __commonJS({
     var tokenProviders = require_dist_cjs53();
     var isSsoProfile = /* @__PURE__ */ __name((arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string"), "isSsoProfile");
     var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
-    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger26 }) => {
+    var resolveSSOCredentials = /* @__PURE__ */ __name(async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, profile, filepath, configFilepath, ignoreCache, logger: logger27 }) => {
       let token;
       const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
       if (ssoSession) {
@@ -24397,7 +24397,7 @@ var require_dist_cjs55 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(e4.message, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger26
+            logger: logger27
           });
         }
       } else {
@@ -24406,14 +24406,14 @@ var require_dist_cjs55 = __commonJS({
         } catch (e4) {
           throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {
             tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-            logger: logger26
+            logger: logger27
           });
         }
       }
       if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
         throw new propertyProvider.CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger26
+          logger: logger27
         });
       }
       const { accessToken } = token;
@@ -24435,14 +24435,14 @@ var require_dist_cjs55 = __commonJS({
       } catch (e4) {
         throw new propertyProvider.CredentialsProviderError(e4, {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger26
+          logger: logger27
         });
       }
       const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {} } = ssoResp;
       if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
         throw new propertyProvider.CredentialsProviderError("SSO returns an invalid temporary credential.", {
           tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
-          logger: logger26
+          logger: logger27
         });
       }
       const credentials = {
@@ -24460,11 +24460,11 @@ var require_dist_cjs55 = __commonJS({
       }
       return credentials;
     }, "resolveSSOCredentials");
-    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger26) => {
+    var validateSsoProfile = /* @__PURE__ */ __name((profile, logger27) => {
       const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
       if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
         throw new propertyProvider.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger26 });
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger: logger27 });
       }
       return profile;
     }, "validateSsoProfile");
@@ -25247,7 +25247,7 @@ var require_dist_cjs56 = __commonJS({
       }
       async refresh(token) {
         const { SigninClient: SigninClient2, CreateOAuth2TokenCommand: CreateOAuth2TokenCommand2 } = await Promise.resolve().then(() => (init_signin(), signin_exports));
-        const { logger: logger26, userAgentAppId } = this.callerClientConfig ?? {};
+        const { logger: logger27, userAgentAppId } = this.callerClientConfig ?? {};
         const isH22 = /* @__PURE__ */ __name((requestHandler2) => {
           return requestHandler2?.metadata?.handlerProtocol === "h2";
         }, "isH2");
@@ -25260,7 +25260,7 @@ var require_dist_cjs56 = __commonJS({
           },
           region,
           requestHandler,
-          logger: logger26,
+          logger: logger27,
           userAgentAppId,
           ...this.init?.clientConfig
         });
@@ -26278,9 +26278,9 @@ var init_defaultStsRoleAssumers = __esm({
       return async (sourceCreds, params) => {
         closureSourceCreds = sourceCreds;
         if (!stsClient) {
-          const { logger: logger26 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger27 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger26,
+            logger: logger27,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -26291,7 +26291,7 @@ var init_defaultStsRoleAssumers = __esm({
             credentialDefaultProvider: /* @__PURE__ */ __name(() => async () => closureSourceCreds, "credentialDefaultProvider"),
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger26
+            logger: logger27
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleCommand(params));
@@ -26315,9 +26315,9 @@ var init_defaultStsRoleAssumers = __esm({
       let stsClient;
       return async (params) => {
         if (!stsClient) {
-          const { logger: logger26 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+          const { logger: logger27 = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
           const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-            logger: logger26,
+            logger: logger27,
             profile
           });
           const isCompatibleRequestHandler = !isH2(requestHandler);
@@ -26327,7 +26327,7 @@ var init_defaultStsRoleAssumers = __esm({
             profile,
             region: resolvedRegion,
             requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-            logger: logger26
+            logger: logger27
           });
         }
         const { Credentials: Credentials2, AssumedRoleUser: AssumedRoleUser2 } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
@@ -26457,7 +26457,7 @@ var require_dist_cjs57 = __commonJS({
       client.setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
       return credentials;
     }, "getValidatedProcessCredentials");
-    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger26) => {
+    var resolveProcessCredentials = /* @__PURE__ */ __name(async (profileName, profiles, logger27) => {
       const profile = profiles[profileName];
       if (profiles[profileName]) {
         const credentialProcess = profile["credential_process"];
@@ -26473,14 +26473,14 @@ var require_dist_cjs57 = __commonJS({
             }
             return getValidatedProcessCredentials(profileName, data, profiles);
           } catch (error2) {
-            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger26 });
+            throw new propertyProvider.CredentialsProviderError(error2.message, { logger: logger27 });
           }
         } else {
-          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger26 });
+          throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger: logger27 });
         }
       } else {
         throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {
-          logger: logger26
+          logger: logger27
         });
       }
     }, "resolveProcessCredentials");
@@ -26639,21 +26639,21 @@ var require_dist_cjs59 = __commonJS({
     var propertyProvider = require_dist_cjs13();
     var client = (init_client(), __toCommonJS(client_exports));
     var credentialProviderLogin = require_dist_cjs56();
-    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger26) => {
+    var resolveCredentialSource = /* @__PURE__ */ __name((credentialSource, profileName, logger27) => {
       const sourceProvidersMap = {
         EcsContainer: /* @__PURE__ */ __name(async (options) => {
           const { fromHttp } = await Promise.resolve().then(() => __toESM(require_dist_cjs47()));
           const { fromContainerMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs40()));
-          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
           return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         }, "EcsContainer"),
         Ec2InstanceMetadata: /* @__PURE__ */ __name(async (options) => {
-          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
           const { fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require_dist_cjs40()));
           return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         }, "Ec2InstanceMetadata"),
         Environment: /* @__PURE__ */ __name(async (options) => {
-          logger26?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+          logger27?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
           const { fromEnv: fromEnv2 } = await Promise.resolve().then(() => __toESM(require_dist_cjs39()));
           return async () => fromEnv2(options)().then(setNamedProvider);
         }, "Environment")
@@ -26661,24 +26661,24 @@ var require_dist_cjs59 = __commonJS({
       if (credentialSource in sourceProvidersMap) {
         return sourceProvidersMap[credentialSource];
       } else {
-        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger26 });
+        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger: logger27 });
       }
     }, "resolveCredentialSource");
     var setNamedProvider = /* @__PURE__ */ __name((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p"), "setNamedProvider");
-    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger26 } = {}) => {
-      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger26 }) || isCredentialSourceProfile(arg, { profile, logger: logger26 }));
+    var isAssumeRoleProfile = /* @__PURE__ */ __name((arg, { profile = "default", logger: logger27 } = {}) => {
+      return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger: logger27 }) || isCredentialSourceProfile(arg, { profile, logger: logger27 }));
     }, "isAssumeRoleProfile");
-    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger26 }) => {
+    var isAssumeRoleWithSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger27 }) => {
       const withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
       if (withSourceProfile) {
-        logger26?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
+        logger27?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
       }
       return withSourceProfile;
     }, "isAssumeRoleWithSourceProfile");
-    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger26 }) => {
+    var isCredentialSourceProfile = /* @__PURE__ */ __name((arg, { profile, logger: logger27 }) => {
       const withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
       if (withProviderProfile) {
-        logger26?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
+        logger27?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
       }
       return withProviderProfile;
     }, "isCredentialSourceProfile");
@@ -34375,6 +34375,59 @@ var init_pagination = __esm({
   }
 });
 
+// src/server/utils/scanWarning.ts
+function getScanWarnThreshold() {
+  const raw = process.env.SCAN_WARN_THRESHOLD;
+  if (raw === void 0 || raw === "") {
+    return DEFAULT_SCAN_WARN_THRESHOLD;
+  }
+  const value = Number(raw);
+  return Number.isInteger(value) && value >= 1 ? value : DEFAULT_SCAN_WARN_THRESHOLD;
+}
+var logger5, SPARSE_SCAN_EVENT, DEFAULT_SCAN_WARN_THRESHOLD, ScanWatcher;
+var init_scanWarning = __esm({
+  "src/server/utils/scanWarning.ts"() {
+    "use strict";
+    init_shared();
+    logger5 = createLogger({ service: "scan-warning", level: "warn" });
+    SPARSE_SCAN_EVENT = "SPARSE_SCAN";
+    DEFAULT_SCAN_WARN_THRESHOLD = 5e3;
+    __name(getScanWarnThreshold, "getScanWarnThreshold");
+    ScanWatcher = class {
+      constructor(context) {
+        this.context = context;
+      }
+      static {
+        __name(this, "ScanWatcher");
+      }
+      scanned = 0;
+      warned = false;
+      threshold = getScanWarnThreshold();
+      /** 読んだ件数を加える */
+      add(count) {
+        this.scanned += count;
+        if (!this.warned && this.scanned >= this.threshold) {
+          this.warned = true;
+          logger5.warn(
+            `${SPARSE_SCAN_EVENT}: 1\u30EA\u30AF\u30A8\u30B9\u30C8\u3067 ${this.scanned} \u4EF6\u4EE5\u4E0A\u3092\u8AAD\u307F\u307E\u3057\u305F\u3002\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u30FB\u30B9\u30AD\u30FC\u30DE\u30FB\u30ED\u30B8\u30C3\u30AF\u306E\u898B\u76F4\u3057\u3092\u691C\u8A0E\u3057\u3066\u304F\u3060\u3055\u3044\uFF08docs/SCAN_WARNING.md\uFF09`,
+            {
+              event: SPARSE_SCAN_EVENT,
+              ...this.context,
+              scanned: this.scanned,
+              threshold: this.threshold,
+              actions: [
+                "\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9: \u7D5E\u308A\u8FBC\u307F\u306B\u4F7F\u3046\u30D5\u30A3\u30FC\u30EB\u30C9\u3092\u30B7\u30E3\u30C9\u30FC\u8A2D\u5B9A\u306B\u8FFD\u52A0\u3057\u3001$eq \u306A\u3069\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u3067\u89E3\u6C7A\u3067\u304D\u308B\u6761\u4EF6\u306B\u3059\u308B",
+                "\u30B9\u30AD\u30FC\u30DE: \u7D5E\u308A\u8FBC\u307F\u6761\u4EF6\u3092\u30AD\u30FC\u306B\u3067\u304D\u308B\u3088\u3046\u3001\u30B3\u30EC\u30AF\u30B7\u30E7\u30F3\u306E\u5206\u5272\u30FB\u975E\u6B63\u898F\u5316\u3092\u691C\u8A0E\u3059\u308B",
+                "\u30ED\u30B8\u30C3\u30AF: \u7D5E\u308A\u8FBC\u307F\u3092\u6BCE\u56DE\u884C\u3046\u5FC5\u8981\u304C\u3042\u308B\u304B\u3001\u6761\u4EF6\u3092\u5909\u3048\u3089\u308C\u306A\u3044\u304B\u3001\u7D50\u679C\u3092\u30AD\u30E3\u30C3\u30B7\u30E5\u3067\u304D\u306A\u3044\u304B\u3092\u898B\u76F4\u3059"
+              ]
+            }
+          );
+        }
+      }
+    };
+  }
+});
+
 // src/server/utils/filter.ts
 function parseFilterField(fieldKey) {
   const parts = fieldKey.split(":");
@@ -34463,7 +34516,7 @@ function parseFilters(filter) {
         parsedFilters.push({ parsed, value });
       }
     } catch (error2) {
-      logger5.error("Invalid filter field syntax", {
+      logger6.error("Invalid filter field syntax", {
         fieldKey,
         error: error2 instanceof Error ? error2.message : String(error2)
       });
@@ -34532,7 +34585,7 @@ function detectNearQuery(filter) {
   }
   return null;
 }
-var logger5;
+var logger6;
 var init_utils5 = __esm({
   "src/server/operations/find/utils.ts"() {
     "use strict";
@@ -34541,7 +34594,7 @@ var init_utils5 = __esm({
     init_shadow();
     init_filter();
     init_validation2();
-    logger5 = createLogger({
+    logger6 = createLogger({
       service: "find-utils",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -34558,7 +34611,7 @@ var init_utils5 = __esm({
 async function executeIdQuery(resource, normalizedParams, requestId) {
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
-  logger6.debug("Executing ID optimized query", {
+  logger7.debug("Executing ID optimized query", {
     requestId,
     resource,
     sort,
@@ -34595,7 +34648,7 @@ async function executeSpecificIdQuery(resource, targetId, requestId) {
   costTracker.add(queryResult.ConsumedCapacity);
   const mainRecords = queryResult.Items || [];
   const items = mainRecords.map((item) => extractCleanRecord(item));
-  logger6.info("ID specific query succeeded", {
+  logger7.info("ID specific query succeeded", {
     requestId,
     resource,
     targetId,
@@ -34642,7 +34695,7 @@ async function executeInQuery(resource, targetIds, sort, requestId) {
     const bVal = String(b4.id ?? "");
     return sort.order === "ASC" ? aVal.localeCompare(bVal) : bVal.localeCompare(aVal);
   });
-  logger6.info("ID $in query succeeded", {
+  logger7.info("ID $in query succeeded", {
     requestId,
     resource,
     requestedCount: targetIds.length,
@@ -34659,7 +34712,14 @@ async function executeInQuery(resource, targetIds, sort, requestId) {
 }
 async function executeAllRecordsQuery(resource, sort, perPage, nextToken, parsedFilters, requestId) {
   if (parsedFilters.length > 0) {
-    return executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken, parsedFilters, requestId);
+    return executeAllRecordsQueryFullScan(
+      resource,
+      sort,
+      perPage,
+      nextToken,
+      parsedFilters,
+      requestId
+    );
   }
   const dbClient2 = getDBClient();
   const tableName = getTableName();
@@ -34711,7 +34771,7 @@ async function executeAllRecordsQuery(resource, sort, perPage, nextToken, parsed
     queryResult.LastEvaluatedKey.PK,
     queryResult.LastEvaluatedKey.SK
   ) : void 0;
-  logger6.info("ID all records query succeeded", {
+  logger7.info("ID all records query succeeded", {
     requestId,
     resource,
     count: items.length,
@@ -34731,25 +34791,36 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
   const dbClient2 = getDBClient();
   const tableName = getTableName();
   const costTracker = new CostTracker();
-  const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
-  logger6.debug("Executing full scan query (ID sort)", {
+  let exclusiveStartKey;
+  if (nextToken) {
+    const decoded = decodeNextToken(nextToken);
+    exclusiveStartKey = { PK: decoded.PK, SK: decoded.SK };
+  }
+  const page = [];
+  let lastReturned;
+  let hasNextPage = false;
+  let scanned = 0;
+  let iterations = 0;
+  let previousKeySignature;
+  let chunkSize = SCAN_CHUNK_INITIAL;
+  const watcher = new ScanWatcher({
     requestId,
     resource,
-    offset
+    path: "id-filtered-scan",
+    sortField: sort.field,
+    filters: parsedFilters.map((f4) => `${f4.parsed.field}:${f4.parsed.operator}`)
   });
-  const allRecords = [];
-  let exclusiveStartKey;
-  let previousKeySignature;
-  const MAX_ITERATIONS = 1e4;
-  let iterations = 0;
-  do {
-    if (++iterations > MAX_ITERATIONS) {
-      logger6.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
+  scan: while (true) {
+    if (++iterations > SCAN_MAX_ITERATIONS) {
+      logger7.error("executeAllRecordsQueryFullScan: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
         requestId,
         resource,
         iterations
       });
-      break;
+      throw new AppError("INTERNAL_ERROR" /* INTERNAL_ERROR */, "ID scan exceeded the iteration limit", 500, {
+        resource,
+        iterations
+      });
     }
     const queryResult = await executeDynamoDBOperation(
       () => dbClient2.send(
@@ -34761,8 +34832,7 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
             ":skPrefix": "id#"
           },
           ScanIndexForward: sort.order === "ASC",
-          Limit: 1e3,
-          // 大きめの Limit でループ回数を最小化
+          Limit: chunkSize,
           ExclusiveStartKey: exclusiveStartKey,
           ConsistentRead: true,
           ReturnConsumedCapacity: "TOTAL"
@@ -34771,41 +34841,57 @@ async function executeAllRecordsQueryFullScan(resource, sort, perPage, nextToken
       "Query"
     );
     costTracker.add(queryResult.ConsumedCapacity);
-    allRecords.push(...queryResult.Items || []);
+    watcher.add((queryResult.Items || []).length);
+    for (const row of queryResult.Items || []) {
+      scanned++;
+      if (!matchesAllFilters(extractCleanRecord(row), parsedFilters)) {
+        continue;
+      }
+      if (page.length >= perPage) {
+        hasNextPage = true;
+        break scan;
+      }
+      page.push(extractCleanRecord(row));
+      lastReturned = { PK: row.PK, SK: row.SK };
+    }
     const nextKey = queryResult.LastEvaluatedKey;
-    const nextKeySignature = nextKey ? `${nextKey.PK}#${nextKey.SK}` : void 0;
-    if (nextKeySignature && nextKeySignature === previousKeySignature) {
-      logger6.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
+    if (!nextKey) {
+      break;
+    }
+    const nextKeySignature = `${nextKey.PK}#${nextKey.SK}`;
+    if (nextKeySignature === previousKeySignature) {
+      logger7.error("executeAllRecordsQueryFullScan: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
         requestId,
         resource,
         iterations
       });
-      break;
+      throw new AppError(
+        "INTERNAL_ERROR" /* INTERNAL_ERROR */,
+        "ID scan received the same LastEvaluatedKey repeatedly",
+        500,
+        { resource, iterations }
+      );
     }
     previousKeySignature = nextKeySignature;
     exclusiveStartKey = nextKey;
-  } while (exclusiveStartKey);
-  let items = allRecords.map((item) => extractCleanRecord(item));
-  items = items.filter((record) => matchesAllFilters(record, parsedFilters));
-  const page = items.slice(offset, offset + perPage);
-  const hasNextPage = offset + perPage < items.length;
-  const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger6.info("ID full scan query succeeded", {
+    chunkSize = Math.min(chunkSize * 2, SCAN_CHUNK_MAX);
+  }
+  const nextTokenValue = hasNextPage && lastReturned ? encodeNextToken(lastReturned.PK, lastReturned.SK) : void 0;
+  logger7.info("ID filtered scan query succeeded", {
     requestId,
     resource,
-    totalMatched: items.length,
-    offset,
+    scanned,
     returned: page.length,
     hasNextPage
   });
   return {
     items: page,
-    pageInfo: { hasNextPage, hasPreviousPage: offset > 0 },
+    pageInfo: { hasNextPage, hasPreviousPage: !!nextToken },
     ...nextTokenValue && { nextToken: nextTokenValue },
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb2, logger6;
+var import_lib_dynamodb2, logger7, SCAN_CHUNK_INITIAL, SCAN_CHUNK_MAX, SCAN_MAX_ITERATIONS;
 var init_idQuery = __esm({
   "src/server/operations/find/idQuery.ts"() {
     "use strict";
@@ -34814,8 +34900,9 @@ var init_idQuery = __esm({
     init_cost_tracker();
     init_dynamodb3();
     init_pagination();
+    init_scanWarning();
     init_utils5();
-    logger6 = createLogger({
+    logger7 = createLogger({
       service: "id-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -34823,13 +34910,16 @@ var init_idQuery = __esm({
     __name(executeSpecificIdQuery, "executeSpecificIdQuery");
     __name(executeInQuery, "executeInQuery");
     __name(executeAllRecordsQuery, "executeAllRecordsQuery");
+    SCAN_CHUNK_INITIAL = 100;
+    SCAN_CHUNK_MAX = 1e3;
+    SCAN_MAX_ITERATIONS = 1e4;
     __name(executeAllRecordsQueryFullScan, "executeAllRecordsQueryFullScan");
   }
 });
 
 // src/server/operations/find/nearQuery.ts
 async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId) {
-  logger7.debug("Executing $near query", {
+  logger8.debug("Executing $near query", {
     requestId,
     resource,
     fieldName,
@@ -34840,7 +34930,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
   const searchFunction = /* @__PURE__ */ __name(async (geohashPrefix) => {
     const dbClient2 = getDBClient();
     const tableName = getTableName();
-    logger7.debug("Searching shadow records", {
+    logger8.debug("Searching shadow records", {
       requestId,
       resource,
       fieldName,
@@ -34865,7 +34955,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     );
     costTracker.add(queryResult.ConsumedCapacity);
     const shadowRecords = queryResult.Items || [];
-    logger7.debug("Shadow records found", {
+    logger8.debug("Shadow records found", {
       requestId,
       resource,
       geohashPrefix,
@@ -34876,7 +34966,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       const parts = sk.split("#id#");
       return parts.length === 2 ? parts[1] : null;
     }).filter((id) => id !== null);
-    logger7.debug("Main record IDs extracted", {
+    logger8.debug("Main record IDs extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -34910,14 +35000,14 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
       }
       validRecords.push(...batchGetResult.Responses?.[tableName] || []);
     }
-    logger7.debug("Main records retrieved", {
+    logger8.debug("Main records retrieved", {
       requestId,
       resource,
       geohashPrefix,
       count: validRecords.length
     });
     const cleanRecords = validRecords.map((record) => extractCleanRecord(record));
-    logger7.debug("Clean records extracted", {
+    logger8.debug("Clean records extracted", {
       requestId,
       resource,
       geohashPrefix,
@@ -34936,7 +35026,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     config
   );
   const items = result.documents;
-  logger7.info("$near query succeeded", {
+  logger8.info("$near query succeeded", {
     requestId,
     resource,
     fieldName,
@@ -34954,7 +35044,7 @@ async function executeNearQuery(resource, fieldName, nearQuery, limit, requestId
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb3, logger7;
+var import_lib_dynamodb3, logger8;
 var init_nearQuery = __esm({
   "src/server/operations/find/nearQuery.ts"() {
     "use strict";
@@ -34964,7 +35054,7 @@ var init_nearQuery = __esm({
     init_nearSearch();
     init_cost_tracker();
     init_dynamodb3();
-    logger7 = createLogger({
+    logger8 = createLogger({
       service: "near-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -34994,7 +35084,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     (f4) => !(isKeyConditionOptimized && f4 === optimizableFilter)
   );
   if (residualFilters.length > 0) {
-    logger8.debug("Residual filters detected, falling back to full scan", {
+    logger9.debug("Residual filters detected, falling back to full scan", {
       requestId,
       resource,
       sortField: sort.field,
@@ -35002,7 +35092,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     });
     return executeFullScanQuery(resource, normalizedParams, costTracker, requestId);
   }
-  logger8.debug("Executing shadow query", {
+  logger9.debug("Executing shadow query", {
     requestId,
     resource,
     sortField: sort.field,
@@ -35050,7 +35140,7 @@ async function executeShadowQuery(resource, normalizedParams, requestId) {
     shadowRecords.LastEvaluatedKey.PK,
     shadowRecords.LastEvaluatedKey.SK
   ) : void 0;
-  logger8.info("Shadow query succeeded", {
+  logger9.info("Shadow query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -35075,7 +35165,7 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
   const filterSort = { field: filterCandidate.parsed.field, order: "ASC" };
   const remainingFilters = parsedFilters.filter((f4) => f4 !== filterCandidate);
-  logger8.debug("Executing filter-first query", {
+  logger9.debug("Executing filter-first query", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -35087,7 +35177,9 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
     filterSort,
     filterCandidate,
     costTracker,
-    requestId
+    requestId,
+    "shadow-filter-first",
+    parsedFilters
   );
   if (remainingFilters.length > 0) {
     items = items.filter((r4) => matchesAllFilters(r4, remainingFilters));
@@ -35096,7 +35188,7 @@ async function executeFilterFirstQuery(resource, normalizedParams, filterCandida
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger8.info("Filter-first query succeeded", {
+  logger9.info("Filter-first query succeeded", {
     requestId,
     resource,
     filterField: filterCandidate.parsed.field,
@@ -35117,20 +35209,28 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
   const { sort, pagination, parsedFilters } = normalizedParams;
   const { perPage, nextToken } = pagination;
   const offset = nextToken ? decodeOffsetToken(nextToken) ?? 0 : 0;
-  logger8.debug("Executing full scan query", {
+  logger9.debug("Executing full scan query", {
     requestId,
     resource,
     sortField: sort.field,
     offset
   });
-  let items = await fetchAllRecordsViaShadowIndex(resource, sort, void 0, costTracker, requestId);
+  let items = await fetchAllRecordsViaShadowIndex(
+    resource,
+    sort,
+    void 0,
+    costTracker,
+    requestId,
+    "shadow-full-scan",
+    parsedFilters
+  );
   if (parsedFilters.length > 0) {
     items = items.filter((r4) => matchesAllFilters(r4, parsedFilters));
   }
   const page = items.slice(offset, offset + perPage);
   const hasNextPage = offset + perPage < items.length;
   const nextTokenValue = hasNextPage ? encodeOffsetToken(offset + perPage) : void 0;
-  logger8.info("Full scan query succeeded", {
+  logger9.info("Full scan query succeeded", {
     requestId,
     resource,
     sortField: sort.field,
@@ -35146,20 +35246,35 @@ async function executeFullScanQuery(resource, normalizedParams, costTracker, req
     consumedCapacity: costTracker.getAggregated()
   };
 }
-async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, costTracker, requestId) {
+async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, costTracker, requestId, scanPath, parsedFilters) {
   const allShadowItems = [];
+  const watcher = new ScanWatcher({
+    requestId,
+    resource,
+    path: scanPath,
+    sortField: indexSort.field,
+    filters: parsedFilters.map((f4) => `${f4.parsed.field}:${f4.parsed.operator}`)
+  });
   let lastKey;
   let previousKeySignature;
   const MAX_ITERATIONS = 1e4;
   let iterations = 0;
   do {
     if (++iterations > MAX_ITERATIONS) {
-      logger8.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E\u3057\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger9.error("fetchAllRecordsViaShadowIndex: \u6700\u5927\u53CD\u5FA9\u56DE\u6570\u3092\u8D85\u904E", {
         requestId,
         resource,
         iterations
       });
-      break;
+      throw new AppError(
+        "INTERNAL_ERROR" /* INTERNAL_ERROR */,
+        "Shadow index scan exceeded the iteration limit",
+        500,
+        {
+          resource,
+          iterations
+        }
+      );
     }
     const result = await executeShadowRecordQuery(
       resource,
@@ -35172,15 +35287,21 @@ async function fetchAllRecordsViaShadowIndex(resource, indexSort, indexFilter, c
       requestId
     );
     allShadowItems.push(...result.Items || []);
+    watcher.add((result.Items || []).length);
     const nextKey = result.LastEvaluatedKey;
     const nextKeySignature = nextKey ? `${nextKey.PK}#${nextKey.SK}` : void 0;
     if (nextKeySignature && nextKeySignature === previousKeySignature) {
-      logger8.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F\u305F\u3081\u4E2D\u65AD", {
+      logger9.error("fetchAllRecordsViaShadowIndex: \u540C\u4E00\u306ELastEvaluatedKey\u304C\u8FD4\u5374\u3055\u308C\u305F", {
         requestId,
         resource,
         iterations
       });
-      break;
+      throw new AppError(
+        "INTERNAL_ERROR" /* INTERNAL_ERROR */,
+        "Shadow index scan received the same LastEvaluatedKey repeatedly",
+        500,
+        { resource, iterations }
+      );
     }
     previousKeySignature = nextKeySignature;
     lastKey = nextKey;
@@ -35386,7 +35507,7 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
     }
     allRecords.push(...batchGetResult.Responses?.[tableName] || []);
   }
-  logger8.debug("Main records fetched", {
+  logger9.debug("Main records fetched", {
     requestId,
     resource,
     requestedCount: uniqueRecordIds.length,
@@ -35394,7 +35515,7 @@ async function fetchMainRecords(resource, recordIds, costTracker, requestId) {
   });
   return allRecords;
 }
-var import_lib_dynamodb4, logger8, KEY_CONDITION_OPERATORS;
+var import_lib_dynamodb4, logger9, KEY_CONDITION_OPERATORS;
 var init_shadowQuery = __esm({
   "src/server/operations/find/shadowQuery.ts"() {
     "use strict";
@@ -35404,8 +35525,9 @@ var init_shadowQuery = __esm({
     init_cost_tracker();
     init_dynamodb3();
     init_pagination();
+    init_scanWarning();
     init_utils5();
-    logger8 = createLogger({
+    logger9 = createLogger({
       service: "shadow-query",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -35426,14 +35548,14 @@ var init_shadowQuery = __esm({
 
 // src/server/operations/find/handler.ts
 async function handleFind(resource, params, requestId) {
-  logger9.debug("Executing find", {
+  logger10.debug("Executing find", {
     requestId,
     resource,
     params
   });
   const nearDetection = detectNearQuery(params.filter);
   if (nearDetection) {
-    logger9.debug("$near operator detected, executing near search", {
+    logger10.debug("$near operator detected, executing near search", {
       requestId,
       resource,
       fieldName: nearDetection.fieldName
@@ -35450,7 +35572,7 @@ async function handleFind(resource, params, requestId) {
   const config = initializeFindConfig();
   const normalizedParams = normalizeFindParams(config, resource, params);
   validateSortField(config, resource, normalizedParams.sort);
-  logger9.debug("Find parameters normalized", {
+  logger10.debug("Find parameters normalized", {
     requestId,
     resource,
     sort: normalizedParams.sort,
@@ -35465,7 +35587,7 @@ async function handleFind(resource, params, requestId) {
   }
   return executeShadowQuery(resource, normalizedParams, requestId);
 }
-var logger9;
+var logger10;
 var init_handler = __esm({
   "src/server/operations/find/handler.ts"() {
     "use strict";
@@ -35475,7 +35597,7 @@ var init_handler = __esm({
     init_nearQuery();
     init_shadowQuery();
     init_utils5();
-    logger9 = createLogger({
+    logger10 = createLogger({
       service: "find-handler",
       level: process.env.LOG_LEVEL || "info"
     });
@@ -35506,13 +35628,13 @@ async function handleDeleteMany(resource, params, requestId) {
   let ids;
   if ("ids" in params) {
     ids = params.ids;
-    logger10.debug("Executing deleteMany with ids", {
+    logger11.debug("Executing deleteMany with ids", {
       requestId,
       resource,
       count: ids.length
     });
   } else {
-    logger10.debug("Executing deleteMany with filter", {
+    logger11.debug("Executing deleteMany with filter", {
       requestId,
       resource,
       filter: params.filter
@@ -35520,7 +35642,7 @@ async function handleDeleteMany(resource, params, requestId) {
     const { handleFind: handleFind2 } = await Promise.resolve().then(() => (init_find(), find_exports));
     const findResult = await handleFind2(resource, { filter: params.filter }, requestId);
     ids = findResult.items.map((item) => item.id);
-    logger10.debug("Found records with filter", {
+    logger11.debug("Found records with filter", {
       requestId,
       resource,
       count: ids.length
@@ -35584,7 +35706,7 @@ async function handleDeleteMany(resource, params, requestId) {
     message: `Record not found: ${id}`
   }));
   if (preparedRecords.length === 0) {
-    logger10.info("deleteMany completed - no records found", {
+    logger11.info("deleteMany completed - no records found", {
       requestId,
       resource,
       requested: ids.length,
@@ -35743,7 +35865,7 @@ async function handleDeleteMany(resource, params, requestId) {
     consumedCapacity: costTracker.getAggregated()
   };
 }
-var import_lib_dynamodb5, logger10;
+var import_lib_dynamodb5, logger11;
 var init_deleteMany = __esm({
   "src/server/operations/deleteMany.ts"() {
     "use strict";
@@ -35754,7 +35876,7 @@ var init_deleteMany = __esm({
     init_chunking();
     init_cost_tracker();
     init_dynamodb3();
-    logger10 = createLogger({ service: "records-lambda" });
+    logger11 = createLogger({ service: "records-lambda" });
     __name(handleDeleteMany, "handleDeleteMany");
   }
 });
@@ -35763,7 +35885,7 @@ var init_deleteMany = __esm({
 async function handleFindMany(resource, params, requestId) {
   if ("ids" in params) {
     const { ids } = params;
-    logger12.debug("Executing findMany by ids", {
+    logger13.debug("Executing findMany by ids", {
       requestId,
       resource,
       count: ids.length
@@ -35792,7 +35914,7 @@ async function handleFindMany(resource, params, requestId) {
     );
     const items = result.Responses?.[tableName] || [];
     const records = items.map((item) => extractCleanRecord(item));
-    logger12.info("findMany by ids succeeded", {
+    logger13.info("findMany by ids succeeded", {
       requestId,
       resource,
       requested: ids.length,
@@ -35802,7 +35924,7 @@ async function handleFindMany(resource, params, requestId) {
   }
   if ("filter" in params) {
     const { filter } = params;
-    logger12.debug("Executing findMany by filter", {
+    logger13.debug("Executing findMany by filter", {
       requestId,
       resource,
       filter
@@ -35814,7 +35936,7 @@ async function handleFindMany(resource, params, requestId) {
       },
       requestId
     );
-    logger12.info("findMany by filter succeeded", {
+    logger13.info("findMany by filter succeeded", {
       requestId,
       resource,
       filter,
@@ -35824,7 +35946,7 @@ async function handleFindMany(resource, params, requestId) {
   }
   throw new Error("findMany requires either ids or filter");
 }
-var import_lib_dynamodb6, logger12;
+var import_lib_dynamodb6, logger13;
 var init_findMany = __esm({
   "src/server/operations/findMany.ts"() {
     "use strict";
@@ -35833,7 +35955,7 @@ var init_findMany = __esm({
     init_shadow();
     init_dynamodb3();
     init_find();
-    logger12 = createLogger({ service: "records-lambda" });
+    logger13 = createLogger({ service: "records-lambda" });
     __name(handleFindMany, "handleFindMany");
   }
 });
@@ -35846,7 +35968,7 @@ __export(findOne_exports, {
 async function handleFindOne(resource, params, requestId) {
   if ("id" in params) {
     const { id } = params;
-    logger14.debug("Executing findOne by id (using findMany)", {
+    logger15.debug("Executing findOne by id (using findMany)", {
       requestId,
       resource,
       id
@@ -35855,7 +35977,7 @@ async function handleFindOne(resource, params, requestId) {
     if (results.length === 0) {
       throw new ItemNotFoundError(`Record not found: ${id}`, { resource, id });
     }
-    logger14.info("findOne by id succeeded", {
+    logger15.info("findOne by id succeeded", {
       requestId,
       resource,
       id
@@ -35864,7 +35986,7 @@ async function handleFindOne(resource, params, requestId) {
   }
   if ("filter" in params) {
     const { filter } = params;
-    logger14.debug("Executing findOne by filter (using findMany)", {
+    logger15.debug("Executing findOne by filter (using findMany)", {
       requestId,
       resource,
       filter
@@ -35873,7 +35995,7 @@ async function handleFindOne(resource, params, requestId) {
     if (results.length === 0) {
       throw new ItemNotFoundError(`Record not found with filter`, { resource, filter });
     }
-    logger14.info("findOne by filter succeeded", {
+    logger15.info("findOne by filter succeeded", {
       requestId,
       resource,
       filter
@@ -35882,13 +36004,13 @@ async function handleFindOne(resource, params, requestId) {
   }
   throw new Error("findOne requires either id or filter");
 }
-var logger14;
+var logger15;
 var init_findOne = __esm({
   "src/server/operations/findOne.ts"() {
     "use strict";
     init_shared();
     init_findMany();
-    logger14 = createLogger({ service: "records-lambda" });
+    logger15 = createLogger({ service: "records-lambda" });
     __name(handleFindOne, "handleFindOne");
   }
 });
@@ -35949,13 +36071,13 @@ function calculateTTL(resource, createdAt) {
   }
   const ttlDays = parseInt(ttlDaysStr, 10);
   if (isNaN(ttlDays) || ttlDays <= 0) {
-    logger15.warn("Invalid TTL_DAYS value", { resource, envKey, value: ttlDaysStr });
+    logger16.warn("Invalid TTL_DAYS value", { resource, envKey, value: ttlDaysStr });
     return void 0;
   }
   const createdAtMs = new Date(createdAt).getTime();
   const ttlMs = createdAtMs + ttlDays * 24 * 60 * 60 * 1e3;
   const ttl = Math.floor(ttlMs / 1e3);
-  logger15.debug("TTL calculated", {
+  logger16.debug("TTL calculated", {
     resource,
     ttlDays,
     createdAt,
@@ -35967,7 +36089,7 @@ function calculateTTL(resource, createdAt) {
 function addTTL(resource, recordData) {
   const createdAt = recordData.createdAt;
   if (!createdAt) {
-    logger15.warn("createdAt not found, skipping TTL calculation", { resource });
+    logger16.warn("createdAt not found, skipping TTL calculation", { resource });
     return recordData;
   }
   const ttl = calculateTTL(resource, createdAt);
@@ -35979,12 +36101,12 @@ function addTTL(resource, recordData) {
     ttl
   };
 }
-var logger15;
+var logger16;
 var init_ttl = __esm({
   "src/server/utils/ttl.ts"() {
     "use strict";
     init_index2();
-    logger15 = createLogger({ service: "records-lambda" });
+    logger16 = createLogger({ service: "records-lambda" });
     __name(calculateTTL, "calculateTTL");
     __name(addTTL, "addTTL");
   }
@@ -35999,7 +36121,7 @@ async function handleInsertMany(resource, params, requestId) {
   const { data: recordsData } = params;
   const startTime = Date.now();
   const costTracker = new CostTracker();
-  logger16.debug("Executing insertMany", {
+  logger17.debug("Executing insertMany", {
     requestId,
     resource,
     count: recordsData.length
@@ -36042,7 +36164,7 @@ async function handleInsertMany(resource, params, requestId) {
       const failedId = recordData.id || `temp-id-${i4}`;
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode(error2);
-      logger16.error("Failed to prepare record for creation", {
+      logger17.error("Failed to prepare record for creation", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -36207,7 +36329,7 @@ function getPreparationErrorCode(error2) {
   }
   return "VALIDATION_ERROR" /* VALIDATION_ERROR */;
 }
-var import_lib_dynamodb8, logger16;
+var import_lib_dynamodb8, logger17;
 var init_insertMany = __esm({
   "src/server/operations/insertMany.ts"() {
     "use strict";
@@ -36221,7 +36343,7 @@ var init_insertMany = __esm({
     init_dynamodb3();
     init_timestamps();
     init_ttl();
-    logger16 = createLogger({ service: "records-lambda" });
+    logger17 = createLogger({ service: "records-lambda" });
     __name(handleInsertMany, "handleInsertMany");
     __name(getPreparationErrorCode, "getPreparationErrorCode");
   }
@@ -36344,7 +36466,7 @@ async function handleUpdateMany(resource, params, requestId) {
   const upsert = options?.upsert ?? false;
   const startTime = Date.now();
   const costTracker = new CostTracker();
-  logger18.debug("Executing updateMany", {
+  logger19.debug("Executing updateMany", {
     requestId,
     resource,
     upsert
@@ -36352,13 +36474,13 @@ async function handleUpdateMany(resource, params, requestId) {
   let ids;
   if ("ids" in params) {
     ids = params.ids;
-    logger18.debug("Executing updateMany with ids", {
+    logger19.debug("Executing updateMany with ids", {
       requestId,
       resource,
       count: ids.length
     });
   } else {
-    logger18.debug("Executing updateMany with filter", {
+    logger19.debug("Executing updateMany with filter", {
       requestId,
       resource,
       filter: params.filter
@@ -36366,7 +36488,7 @@ async function handleUpdateMany(resource, params, requestId) {
     const { handleFind: handleFind2 } = await Promise.resolve().then(() => (init_find(), find_exports));
     const findResult = await handleFind2(resource, { filter: params.filter }, requestId);
     ids = findResult.items.map((item) => item.id);
-    logger18.debug("Found records with filter", {
+    logger19.debug("Found records with filter", {
       requestId,
       resource,
       count: ids.length
@@ -36375,7 +36497,7 @@ async function handleUpdateMany(resource, params, requestId) {
       if (upsert) {
         const newId = ulid2();
         ids = [newId];
-        logger18.info("Creating new record with filter (upsert: true)", {
+        logger19.info("Creating new record with filter (upsert: true)", {
           requestId,
           resource,
           newId,
@@ -36439,7 +36561,7 @@ async function handleUpdateMany(resource, params, requestId) {
   );
   const notFoundIds = ids.filter((id) => !existingIds.has(id));
   if (!upsert && notFoundIds.length > 0) {
-    logger18.warn("Records not found (upsert: false)", {
+    logger19.warn("Records not found (upsert: false)", {
       requestId,
       resource,
       notFoundCount: notFoundIds.length,
@@ -36448,7 +36570,7 @@ async function handleUpdateMany(resource, params, requestId) {
     });
   }
   if (upsert && notFoundIds.length > 0) {
-    logger18.info("Creating new records (upsert: true)", {
+    logger19.info("Creating new records (upsert: true)", {
       requestId,
       resource,
       notFoundCount: notFoundIds.length,
@@ -36484,7 +36606,7 @@ async function handleUpdateMany(resource, params, requestId) {
       const failedId = existingData.id || "unknown-id";
       const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
       const errorCode = getPreparationErrorCode2(error2);
-      logger18.error("Failed to prepare record for update", {
+      logger19.error("Failed to prepare record for update", {
         requestId,
         recordId: failedId,
         error: errorMessage,
@@ -36524,7 +36646,7 @@ async function handleUpdateMany(resource, params, requestId) {
       } catch (error2) {
         const errorMessage = error2 instanceof Error ? error2.message : "Unknown preparation error";
         const errorCode = getPreparationErrorCode2(error2);
-        logger18.error("Failed to prepare new record for upsert", {
+        logger19.error("Failed to prepare new record for upsert", {
           requestId,
           recordId: id,
           error: errorMessage,
@@ -36737,7 +36859,7 @@ function getPreparationErrorCode2(error2) {
   }
   return "VALIDATION_ERROR" /* VALIDATION_ERROR */;
 }
-var import_lib_dynamodb9, logger18;
+var import_lib_dynamodb9, logger19;
 var init_updateMany = __esm({
   "src/server/operations/updateMany.ts"() {
     "use strict";
@@ -36751,7 +36873,7 @@ var init_updateMany = __esm({
     init_dynamodb3();
     init_mergePatch();
     init_timestamps();
-    logger18 = createLogger({ service: "records-lambda" });
+    logger19 = createLogger({ service: "records-lambda" });
     __name(handleUpdateMany, "handleUpdateMany");
     __name(getPreparationErrorCode2, "getPreparationErrorCode");
   }
@@ -36772,13 +36894,13 @@ init_deleteMany();
 
 // src/server/operations/deleteOne.ts
 init_shared();
-var logger11 = createLogger({ service: "records-lambda" });
+var logger12 = createLogger({ service: "records-lambda" });
 async function handleDeleteOne(resource, params, requestId) {
   const { handleDeleteMany: handleDeleteMany2 } = await Promise.resolve().then(() => (init_deleteMany(), deleteMany_exports));
   let targetId;
   if ("id" in params) {
     targetId = params.id;
-    logger11.debug("Executing deleteOne with id", {
+    logger12.debug("Executing deleteOne with id", {
       requestId,
       resource,
       id: targetId
@@ -36805,7 +36927,7 @@ async function handleDeleteOne(resource, params, requestId) {
       consumedCapacity: deleteManyResult.consumedCapacity
     };
   } else {
-    logger11.debug("Executing deleteOne with filter", {
+    logger12.debug("Executing deleteOne with filter", {
       requestId,
       resource,
       filter: params.filter
@@ -36829,7 +36951,7 @@ async function handleDeleteOne(resource, params, requestId) {
     if (!deletedId) {
       throw new Error("Failed to get deleted record ID");
     }
-    logger11.info("deleteOne succeeded", {
+    logger12.info("deleteOne succeeded", {
       requestId,
       resource,
       id: deletedId
@@ -36855,10 +36977,10 @@ init_shadow();
 init_dynamodb3();
 init_pagination();
 init_validation2();
-var logger13 = createLogger({ service: "records-lambda" });
+var logger14 = createLogger({ service: "records-lambda" });
 async function handleFindManyReference(resource, params, requestId) {
   const { target, id, filter, sort: sortParam, pagination } = params;
-  logger13.debug("Executing findManyReference", {
+  logger14.debug("Executing findManyReference", {
     requestId,
     resource,
     target,
@@ -36948,7 +37070,7 @@ async function handleFindManyReference(resource, params, requestId) {
     queryResult.LastEvaluatedKey.PK,
     queryResult.LastEvaluatedKey.SK
   ) : void 0;
-  logger13.info("findManyReference succeeded", {
+  logger14.info("findManyReference succeeded", {
     requestId,
     resource,
     target,
@@ -36973,9 +37095,9 @@ init_insertMany();
 
 // src/server/operations/insertOne.ts
 init_shared();
-var logger17 = createLogger({ service: "records-lambda" });
+var logger18 = createLogger({ service: "records-lambda" });
 async function handleInsertOne(resource, params, requestId) {
-  logger17.debug("Executing insertOne", {
+  logger18.debug("Executing insertOne", {
     requestId,
     resource
   });
@@ -37001,7 +37123,7 @@ async function handleInsertOne(resource, params, requestId) {
   }
   const { handleFindOne: handleFindOne2 } = await Promise.resolve().then(() => (init_findOne(), findOne_exports));
   const createdRecord = await handleFindOne2(resource, { id: createdId }, requestId);
-  logger17.info("insertOne succeeded", {
+  logger18.info("insertOne succeeded", {
     requestId,
     resource,
     id: createdId
@@ -37163,13 +37285,13 @@ init_updateMany();
 
 // src/server/operations/updateOne.ts
 init_shared();
-var logger19 = createLogger({ service: "records-lambda" });
+var logger20 = createLogger({ service: "records-lambda" });
 async function handleUpdateOne(resource, params, requestId) {
   const { data: patchData, options } = params;
   const { handleUpdateMany: handleUpdateMany2 } = await Promise.resolve().then(() => (init_updateMany(), updateMany_exports));
   if ("id" in params) {
     const targetId = params.id;
-    logger19.debug("Executing updateOne with id", {
+    logger20.debug("Executing updateOne with id", {
       requestId,
       resource,
       id: targetId,
@@ -37211,7 +37333,7 @@ async function handleUpdateOne(resource, params, requestId) {
       consumedCapacity: updateManyResult.consumedCapacity
     };
   } else {
-    logger19.debug("Executing updateOne with filter", {
+    logger20.debug("Executing updateOne with filter", {
       requestId,
       resource,
       filter: params.filter,
@@ -37261,13 +37383,13 @@ async function handleUpdateOne(resource, params, requestId) {
 __name(handleUpdateOne, "handleUpdateOne");
 
 // src/server/operations/operationDispatcher.ts
-var logger20 = createLogger({
+var logger21 = createLogger({
   service: "operation-dispatcher",
   level: process.env.LOG_LEVEL || "info"
 });
 async function executeOperation(request2, requestId) {
   const { op: op2, resource } = request2;
-  logger20.debug("Executing operation", {
+  logger21.debug("Executing operation", {
     requestId,
     operation: op2,
     resource
@@ -38490,13 +38612,13 @@ CognitoJwtVerifier.USER_POOL_ID_REGEX = /^(?<region>[a-z]{2}-(gov-)?[a-z]+-\d)_[
 
 // src/server/utils/auth.ts
 init_index2();
-var logger21 = createLogger({ service: "records-lambda" });
+var logger22 = createLogger({ service: "records-lambda" });
 var verifierInstance = null;
 function getVerifier(userPoolId, clientId) {
   if (!verifierInstance) {
-    logger21.debug("Creating JWT verifier instance", { userPoolId, clientId });
+    logger22.debug("Creating JWT verifier instance", { userPoolId, clientId });
     if (!clientId) {
-      logger21.warn(
+      logger22.warn(
         "COGNITO_CLIENT_ID is not set: JWT audience (aud) verification is DISABLED. Tokens issued to ANY app client of this user pool are accepted. Set cognito_client_id (Terraform) / COGNITO_CLIENT_ID in production. See docs/AUTHORIZATION.md",
         { userPoolId }
       );
@@ -38513,18 +38635,18 @@ function getVerifier(userPoolId, clientId) {
 }
 __name(getVerifier, "getVerifier");
 async function verifyJwt(token, userPoolId, clientId) {
-  logger21.debug("Verifying JWT token with signature validation");
+  logger22.debug("Verifying JWT token with signature validation");
   try {
     const verifier = getVerifier(userPoolId, clientId);
     const payload2 = await verifier.verify(token);
-    logger21.debug("JWT token verified successfully", {
+    logger22.debug("JWT token verified successfully", {
       sub: payload2.sub,
       email: payload2.email,
       tokenUse: payload2.token_use
     });
     return payload2;
   } catch (error2) {
-    logger21.error("JWT verification failed", {
+    logger22.error("JWT verification failed", {
       error: error2 instanceof Error ? error2.message : String(error2)
     });
     let message = "JWT verification failed";
@@ -38565,7 +38687,7 @@ async function verifyAuthHeader(authHeader, userPoolId, clientId) {
 __name(verifyAuthHeader, "verifyAuthHeader");
 
 // src/server/utils/authHandler.ts
-var logger22 = createLogger({
+var logger23 = createLogger({
   service: "auth-handler",
   level: process.env.LOG_LEVEL || "info"
 });
@@ -38580,7 +38702,7 @@ async function handleAuthentication(event, requestId) {
 }
 __name(handleAuthentication, "handleAuthentication");
 function handleIAMAuthentication(iam, requestId) {
-  logger22.info("IAM authenticated request", {
+  logger23.info("IAM authenticated request", {
     requestId,
     userArn: iam.userArn,
     accountId: iam.accountId,
@@ -38595,7 +38717,7 @@ async function handleCognitoAuthentication(authHeader, requestId) {
     throw new Error("COGNITO_USER_POOL_ID environment variable is required");
   }
   const jwtPayload = await verifyAuthHeader(authHeader, userPoolId, clientId);
-  logger22.debug("Cognito JWT verified", {
+  logger23.debug("Cognito JWT verified", {
     requestId,
     sub: jwtPayload.sub
   });
@@ -38610,7 +38732,7 @@ init_shared();
 // src/server/utils/responseBuilder.ts
 init_http();
 init_shared();
-var logger23 = createLogger({
+var logger24 = createLogger({
   service: "response-builder",
   level: process.env.LOG_LEVEL || "info"
 });
@@ -38620,7 +38742,7 @@ function createSuccessResponse(data, requestId) {
     success: true,
     data
   };
-  logger23.info("Request succeeded", { requestId });
+  logger24.info("Request succeeded", { requestId });
   return {
     statusCode: HTTP_STATUS.OK,
     headers: {
@@ -38641,7 +38763,7 @@ function createErrorResponse(code, message, statusCode, requestId, details) {
       details
     }
   };
-  logger23.error("Request failed", {
+  logger24.error("Request failed", {
     requestId,
     code,
     message,
@@ -38667,7 +38789,7 @@ function createCorsResponse(statusCode) {
 __name(createCorsResponse, "createCorsResponse");
 
 // src/server/utils/errorHandler.ts
-var logger24 = createLogger({
+var logger25 = createLogger({
   service: "error-handler",
   level: process.env.LOG_LEVEL || "info"
 });
@@ -38682,7 +38804,7 @@ function handleError(error2, requestId) {
     );
   }
   if (error2 instanceof Error) {
-    logger24.error("Error stack trace", {
+    logger25.error("Error stack trace", {
       requestId,
       stack: error2.stack,
       message: error2.message
@@ -38767,14 +38889,14 @@ function parseRequestBody(body) {
 __name(parseRequestBody, "parseRequestBody");
 
 // src/server/handler.ts
-var logger25 = createLogger({
+var logger26 = createLogger({
   service: "records-lambda",
   level: process.env.LOG_LEVEL || "info"
 });
-logger25.info("Records Lambda started with automatic shadow field detection");
+logger26.info("Records Lambda started with automatic shadow field detection");
 async function handler(event) {
   const requestId = event.requestContext.requestId;
-  logger25.info("Received request", {
+  logger26.info("Received request", {
     requestId,
     method: event.requestContext.http.method,
     path: event.requestContext.http.path
@@ -38784,7 +38906,7 @@ async function handler(event) {
       return createCorsResponse(HTTP_STATUS.OK);
     }
     if (event.requestContext.http.method === "GET" && event.requestContext.http.path === "/version") {
-      const version = "1.7.0";
+      const version = "1.9.0";
       return createSuccessResponse({ version, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, requestId);
     }
     if (event.requestContext.http.method !== "POST") {
@@ -38792,7 +38914,7 @@ async function handler(event) {
     }
     await handleAuthentication(event, requestId);
     const request2 = parseRequestBody(event.body);
-    logger25.info("Parsed request", {
+    logger26.info("Parsed request", {
       requestId,
       operation: request2.op,
       resource: request2.resource