fix(billing): remove the export's arbitrary row cap, fix a cursor pagination bug it exposed

A personal credit ledger doesn't have the same unbounded-growth problem
a workspace table does — capping the export at 5,000 rows just meant
long-tenured or high-usage accounts (exactly the ones most likely to
need a full export to reconcile a billing question) got silently
truncated. Replaced the cap with a 50,000-row circuit breaker that
should never fire in normal use (logged as an error, not a warning,
if it ever does) and bumped the page size from 500 to 1,000 to cut
round trips.

Removing the cap surfaced a real, pre-existing bug in
getUserUsageLogs's cursor pagination: a raw `sql` template embedded a
JS Date object directly as a bound parameter, which the postgres
driver can't serialize (unlike drizzle's typed gte/lte operators,
which already handle Date correctly elsewhere in the same function).
It only ever manifested past the first page, which nothing before
this export route's tight multi-page loop reliably exercised.
Replaced the raw sql template with drizzle's typed lt/eq/or/and
operators, matching the pattern already proven correct in this file.

Verified live: seeded 6,000 rows (past the old cap) and confirmed the
export downloads all of them in one request with credits reconciling
exactly against the total.

Author: waleedlatif1

apps/sim/app/api/users/me/usage-logs/export/route.test.ts

@@ -55,16 +55,16 @@ describe('GET /api/users/me/usage-logs/export', () => {
     expect(row).toBe('2026-07-01T00:00:00.000Z,Chat,100')
   })
 
-  it('sets X-Export-Truncated when the row cap is hit with more data remaining', async () => {
+  it('sets X-Export-Truncated when the safety cap is hit with more data remaining', async () => {
     mockGetUserUsageLogs.mockResolvedValueOnce({
-      logs: Array.from({ length: 5000 }, (_, i) => ({
+      logs: Array.from({ length: 50000 }, (_, i) => ({
         id: `log-${i}`,
         createdAt: '2026-07-01T00:00:00.000Z',
         source: 'copilot',
         cost: 0.1,
       })),
       summary: { totalCost: 0, bySource: {} },
-      pagination: { hasMore: true, nextCursor: 'log-4999' },
+      pagination: { hasMore: true, nextCursor: 'log-49999' },
     })
 
     const response = await GET(createMockRequest('GET'))
@@ -178,16 +178,16 @@ describe('GET /api/users/me/usage-logs/export', () => {
     expect(csv.split('\n')).toHaveLength(3)
   })
 
-  it('stops at exactly the row cap without an extra wasted page fetch', async () => {
+  it('stops at exactly the safety cap without an extra wasted page fetch', async () => {
     mockGetUserUsageLogs.mockResolvedValueOnce({
-      logs: Array.from({ length: 5000 }, (_, i) => ({
+      logs: Array.from({ length: 50000 }, (_, i) => ({
         id: `log-${i}`,
         createdAt: '2026-07-01T00:00:00.000Z',
         source: 'copilot',
         cost: 0.1,
       })),
       summary: { totalCost: 0, bySource: {} },
-      pagination: { hasMore: true, nextCursor: 'log-4999' },
+      pagination: { hasMore: true, nextCursor: 'log-49999' },
     })
 
     await GET(createMockRequest('GET'))

apps/sim/app/api/users/me/usage-logs/export/route.ts

@@ -12,15 +12,20 @@ import { USAGE_LOG_SOURCE_LABELS } from '@/app/api/users/me/usage-logs/source-la
 
 const logger = createLogger('UsageLogsExportAPI')
 
-/** Safety cap on export size — a single user's credit ledger; not expected to approach this. */
-const MAX_EXPORT_ROWS = 5000
-const EXPORT_PAGE_SIZE = 500
+/**
+ * Circuit breaker, not a UX boundary — a personal credit ledger is bounded by
+ * the user's own usage history and should never realistically approach this.
+ * Exists only to keep a pathological account (or a bug upstream) from paging
+ * forever; hitting it is worth alerting on, not a normal truncation case.
+ */
+const EXPORT_SAFETY_CAP = 50000
+const EXPORT_PAGE_SIZE = 1000
 
 const CSV_HEADER = toCsvRow(['Date', 'Type', 'Credits'])
 
 /**
  * Downloads every usage log matching the current filter as CSV — unlike the
- * paginated list route, this fetches up to `MAX_EXPORT_ROWS` in one response
+ * paginated list route, this fetches every matching row in one response
  * rather than a single page, since a user's own credit ledger is bounded
  * (unlike, say, a workspace's full execution history).
  */
@@ -39,27 +44,27 @@ export const GET = withRouteHandler(async (request: NextRequest) => {
   const rows: Awaited<ReturnType<typeof getUserUsageLogs>>['logs'] = []
   let cursor: string | undefined
   let truncated = false
-  while (rows.length < MAX_EXPORT_ROWS) {
+  while (rows.length < EXPORT_SAFETY_CAP) {
     const page = await getUserUsageLogs(auth.userId, {
       source: source as UsageLogSource | undefined,
       workspaceId,
       startDate: dateRange.startDate,
       endDate: dateRange.endDate,
-      limit: Math.min(EXPORT_PAGE_SIZE, MAX_EXPORT_ROWS - rows.length),
+      limit: Math.min(EXPORT_PAGE_SIZE, EXPORT_SAFETY_CAP - rows.length),
       cursor,
       includeSummary: false,
     })
     rows.push(...page.logs)
     if (!page.pagination.hasMore) break
-    truncated = rows.length >= MAX_EXPORT_ROWS
+    truncated = rows.length >= EXPORT_SAFETY_CAP
     cursor = page.pagination.nextCursor
   }
 
   if (truncated) {
-    logger.warn('Usage log export truncated at safety cap', {
+    logger.error('Usage log export hit the safety cap — investigate this account', {
       userId: auth.userId,
       period,
-      cap: MAX_EXPORT_ROWS,
+      cap: EXPORT_SAFETY_CAP,
     })
   }
 

apps/sim/lib/billing/core/usage-log.ts

@@ -4,7 +4,7 @@ import { usageLog, workflow, workspace } from '@sim/db/schema'
 import { createLogger } from '@sim/logger'
 import { toError } from '@sim/utils/errors'
 import { generateId } from '@sim/utils/id'
-import { and, desc, eq, gte, inArray, lt, lte, sql } from 'drizzle-orm'
+import { and, desc, eq, gte, inArray, lt, lte, or, sql } from 'drizzle-orm'
 import { defaultBillingPeriod } from '@/lib/billing/core/billing-period'
 import { getHighestPrioritySubscription } from '@/lib/billing/core/plan'
 import { isOrgScopedSubscription } from '@/lib/billing/subscriptions/utils'
@@ -624,9 +624,12 @@ export async function getUserUsageLogs(
         .limit(1)
 
       if (cursorLog.length > 0) {
-        conditions.push(
-          sql`(${usageLog.createdAt} < ${cursorLog[0].createdAt} OR (${usageLog.createdAt} = ${cursorLog[0].createdAt} AND ${usageLog.id} < ${cursor}))`
+        const cursorCreatedAt = cursorLog[0].createdAt
+        const cursorCondition = or(
+          lt(usageLog.createdAt, cursorCreatedAt),
+          and(eq(usageLog.createdAt, cursorCreatedAt), lt(usageLog.id, cursor))
         )
+        if (cursorCondition) conditions.push(cursorCondition)
       }
     }