[fctl-sh]

Summary

Cloudflare's D1 query result size limit took effect on 4 November 2026: D1 now fails any query whose result is over 50 MB (Durable Object SQLite isn't affected, and wrangler's imports and exports are exempt). I went through the control plane's D1 reads (about 280 .all()/.first() calls, all through db::q). D1 stores no BLOBs, and every read is bounded by a key, a LIMIT, or a small per-person or per-project table. The exception was the data export (GET /me/export, fctl account export). It read all of a person's sessions twice in one query each. Prompts can be up to 100,000 characters (up to ~400 KB), so a heavy user could pass 50 MB in a few hundred sessions. It also read a year of their audit log in one query. Those four reads now go through a new db::all_paged, which reads 100 sessions or 2,000 audit entries at a time, with LIMIT/OFFSET over a total order.

I checked it against cargo xtask dev. I copied a session with a 5,000-character prompt 250 times and added 2,500 audit entries to the dev account, then ran fctl account export. The export had all 251 sessions and 2,512 audit entries, each once and in order. cargo xtask check lint passes.

Worth confirming

• Assumption: The session list (GET /sessions, at most 201 rows with prompts) stays well under 50 MB with real prompts, so I left it as it is. It could only pass 50 MB if nearly every session in a page had a prompt of 100,000 four-byte characters.
• Decision: Pages of an export are separate queries, not one snapshot. A session started while an export runs may be left out or, rarely, read twice. Before this change, the export's different queries were already separate.

fctl session

---

Note

Low risk. It changes only how the account data export reads from D1, in pages instead of single queries; nothing is written, and other endpoints are untouched.

What it does. D1 now fails any query whose result is over 50 MB, and the account export (GET /me/export, fctl account export) read all of a person's sessions, with prompts, and a year of audit log in single queries. This adds db::all_paged, which reads rows with LIMIT/OFFSET over a total order, and uses it for the four unbounded export reads, 100 sessions or 2,000 audit entries per page.

Pages are not a snapshot. Each page is a separate query, so a session created while an export runs may be missed or read twice.

_{fctl review's first look at 166bace · 2 files, +70 −24 · Review agent settings}