feat(workflows): sandbox test sends, save checks and switch confirm by Silthus · Pull Request #128413 · PostHog/posthog

Silthus · 2026-11-03T16:51:10Z

Problem

A project on the sandbox sender cannot preview a template with a test send through it.
The API accepts the sandbox sender where the worker can never deliver it: broadcasts, rotation, and custom From or Reply-To values.
Layer 4 of 5 in stack #128415, on feat(cdp): pause, block, and track sandbox sends on the worker #128412. Replaces feat(workflows): test templates with the sandbox sender Silthus/posthog#628, feat(workflows): validate sandbox sender use at save time Silthus/posthog#603, feat(workflows): confirm before the sandbox sender replaces senders Silthus/posthog#616 and the rest of feat(workflows): offer the sandbox sender in workflow email steps Silthus/posthog#629.
Landing order: the skeleton first, then the safety layers before any team beyond team 2, then the polish layers.

Changes

With workflows-sandbox-sender on:

Template test sends offer the sandbox sender with a "Sandbox" tag and suggest verified organization members as recipients. A sender the user chose stays chosen.
Saves reject the sandbox sender outside workflow email steps and test sends, with rotation, or with custom sender values. Stored values stay editable.
A workflow on the sandbox sender is not offered for conversion to a broadcast.
Picking the sandbox sender over custom sender details asks first. The audience check warns when it is the only sender.

With the flag off, the new save checks run no query, and every surface renders as on the skeleton. The audience check counts a sandbox sender kept from earlier as a sender, as master does, so it shows no sandbox warning.

A save grandfathers a stored sandbox value only when the same input key held an email input before. A dictionary input changed to an email input gets the full checks.

	Before (skeleton)	After, flag on
Test send
Recipient check	None
Switch confirm	None
Audience warning	None

How did you test this code?

Test rationale: parameterized save tests assert no integration query and no flag call while the settings are empty, and no integration query while the flag is off. A test-send logic test fails if a chosen sender drops out of the list. New cases reject a dictionary input retyped as email and an email value moved to another input. An audience case checks a kept sandbox sender with the flag off.

Flag-off Storybook renders of the test send and audience check are byte-identical to the skeleton's (scratch stories, not committed).
Not run: the full backend suite.

CI report

The bundle grows by about 10 KiB, which pays for the test-send sender options, the recipient suggestions and warnings, the switch-to-sandbox confirmation dialog, and the audience sandbox warning.
The audience warnings import the sandbox check from its own module, so the cohort, survey and error tracking surfaces that load them no longer pull in the integration icon map.
The single complexity warning, the anonymous function in emailTemplaterLogic.tsx at 14, scores 14 on master too.

Release status

This change is behind a feature flag and is not available to users

Docs update

docs/internal/workflows-email-sending-tiers.md lists where the sandbox sender is allowed.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code, Claude Opus 5.5

Skills: /improving-drf-endpoints, /writing-tests, /writing-ui-components, /writing-user-facing-copy, /writing-code-comments, /writing-pr-descriptions

More context for AI agents

Decisions: master's sender parsing and its ten-sender cap stay unchanged; worker-style parsing runs only in the sandbox check, and its cap check runs after the flag check.
Decisions: CDP mirrors the sandbox settings check, because CDP cannot import from workflows.
Decisions: the empty test-send row keeps master's flex gap-2 items-center; Funnel prop filters #628's flex-wrap is dropped.
Follow-ups: a team whose flag is removed later can be offered broadcast conversion for a workflow that still uses the sandbox sender.
Decisions: the test-send recipient field is its own component, so SendTestEmailModal stays under the complexity limit.
Read closely: validate_sandbox_email_sender and _stored_email_values in products/cdp/backend/validation.py, _stored_email_values_by_key in hog_function.py, hog_flow.py input context, messageTemplateTestSendLogic.ts.

🤖 Generated with Claude Code

With the workflows-sandbox-sender flag on, template test sends offer the sandbox sender and suggest verified organization members as recipients. Saves reject the sandbox sender outside workflow email steps and test sends, with rotation, or with custom From and Reply-To values. A workflow that sends through it is not offered for conversion to a broadcast. Picking it over custom sender details or several senders asks first, and the audience check warns when the sandbox sender is the only sender. Every new check returns before any query or flag evaluation while the sandbox settings are empty, and before any integration lookup while the flag is off. Flag-off renders match the base. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

github-actions · 2026-11-03T16:54:18Z

🤖 CI report

⚠️

Trunk lane — backend Python lane, mixes lanes

This PR is assigned to the backend Python lane. It runs backend Python tests and may merge in parallel with PRs in other lanes.

This PR changes Python or frontend code (frontend/src/lib/components/CyclotronJob/CyclotronJobInputs.tsx, frontend/src/lib/constants.tsx, frontend/src/lib/integrations/IntegrationsList.tsx and 83 more) and Node or Rust code (nodejs/package.json, nodejs/src/cdp/cdp-api.ts, nodejs/src/cdp/cdp-services.ts and 20 more) together. In the merge queue, every Node or Rust PR behind it in the same lane then runs the Django and frontend suites too, so the cross-lane check fails. Split it, or add the cross-lane-change label if the halves must land together.

⚠️

Complexity (TypeScript) — 1 function above the limit (max 14)

Cyclomatic complexity above the limit in changed typescript files (10 for production files, 15 for test files). Warn only: worth simplifying when you next touch these functions.

Function	Location	Complexity	Limit
`<anonymous>`	`frontend/src/scenes/hog-functions/email-templater/emailTemplaterLogic.tsx:1089`	14	10

✅ Duplication (Python) — clean

New Python code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Duplication (TypeScript) — clean

New TypeScript code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

⚠️

Bundle size — 🔺 +9.7 KiB (+0.0%)

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 77.10 MiB · 🔺 +9.7 KiB (+0.0%)

File	Size	Δ vs base
`posthog-app/_parent/products/workflows/frontend/TemplateLibrary/MessageTemplate.js`	45.9 KiB	🔺 +2.6 KiB (+6.1%)

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.02 MiB · 25 files	no change	`█████████░` 89.0% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	3.00 MiB · 623 files	no change	`██████████` 98.9% of 3.03 MiB
authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	3.86 MiB · 1,233 files	no change	`██████████` 96.4% of 4.01 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	8.26 MiB · 3,028 files	🔺 +792 B (+0.0%)	`████████░░` 83.9% of 9.84 MiB
today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	4.71 MiB · 1,758 files	🔺 +262 B (+0.0%)	`██████████` 95.6% of 4.93 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	5.97 MiB · 2,256 files	🔺 +228 B (+0.0%)	`██████████` 95.2% of 6.27 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	7.29 MiB · 2,612 files	🔺 +792 B (+0.0%)	`████████░░` 77.5% of 9.41 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	8.21 MiB · 2,940 files	🔺 +792 B (+0.0%)	`████████░░` 78.2% of 10.49 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	7.42 MiB · 2,655 files	🔺 +676 B (+0.0%)	`█████████░` 91.4% of 8.13 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/logic/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/kea-test-utils/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/panel-layout/ProjectTree/menus/SessionReplayMenuItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/projectNoticeLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/ImpersonationNotice/ImpersonationNotice.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/cohortSavedToast.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayShell.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayContextPanelFloating.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodaySidePanel.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayTopBar.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/todayRailItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/subscriptions/frontend/components/Subscriptions/exportNudge/exportNudgeLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/billing/paymentEntryLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/conversations/frontend/components/SidePanel/sidepanelTicketsLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/zod/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/auth/loginLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/shared/passkeyLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/surveys/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/re2js/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/react-markdown/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/Command/Command.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/re2js/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/charts/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/InsightViz/InsightViz.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/DataVisualization/DataVisualization.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/WebOverview/WebOverview.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/re2js/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/d3/src/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.7 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
4.0 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.9 KiB	`src/lib/utils/bootTiming.ts`
1.7 KiB	`src/index.tsx`
1.7 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.2 KiB	`src/RootErrorBoundary.tsx`
1.1 KiB	`src/lib/utils/deferredAppContext.ts`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
104.6 KiB	`src/products.tsx`
88.6 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
28.4 KiB	`src/lib/constants.tsx`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
104.6 KiB	`src/products.tsx`
88.6 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
32.3 KiB	`src/lib/utils/eventUsageLogic.ts`
28.4 KiB	`src/lib/constants.tsx`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
114.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
94.6 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.6 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
92.5 KiB	`../packages/quill/packages/components/dist/index.js`
88.6 KiB	`src/lib/api.ts`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
88.6 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
88.6 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
41.7 KiB	`src/scenes/hog-functions/sub-templates/sub-templates.ts`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
94.6 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.6 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
92.5 KiB	`../packages/quill/packages/components/dist/index.js`
88.6 KiB	`src/lib/api.ts`
75.5 KiB	`src/scenes/dashboard/dashboardLogic.tsx`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
114.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
94.6 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.6 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
92.5 KiB	`../packages/quill/packages/components/dist/index.js`
88.6 KiB	`src/lib/api.ts`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
355.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
321.5 KiB	`../node_modules/.pnpm/posthog-js@1.444.4_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
104.6 KiB	`src/products.tsx`
94.6 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.6 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
92.5 KiB	`../packages/quill/packages/components/dist/index.js`
88.6 KiB	`src/lib/api.ts`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of #32479}

✅ Frontend layers — no new upward imports, 0 removed

Static imports from a lower frontend layer into a higher one (layers, lowest first: kernel, shell, query, features). Compared with the base branch, so an import that a PR also adds to layer-baseline.txt still shows here. Sizes are the source bytes on the eager path of every logged-in page.

Layer	Eager source bytes	Δ vs base
kernel	2.99 MiB	no change
shell	2.38 MiB	no change
query	56.4 KiB	no change
features	356.0 KiB	no change

Download the interactive layer graph for this PR.

_{Posted automatically by check-layers}

✅ Toolbar bundle — eager 2.38 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.38 MiB · 19 files	no change	`████░░░░░░` 41.5% of 5.72 MiB
Deferred (lazy)	2.11 MiB · 42 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
954.0 KiB	`dist/toolbar/toolbar-app-GD5Z75Y4.css`
727.1 KiB	`dist/toolbar/chunk-chunk-QV5HJ36S.js`
261.3 KiB	`dist/toolbar/chunk-chunk-UHL3KK24.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FDH2IBXT.js`
130.3 KiB	`dist/toolbar/chunk-chunk-CPMKJ3WO.js`
75.7 KiB	`dist/toolbar/toolbar-app-XQL7IUG4.js`
69.0 KiB	`dist/toolbar/chunk-chunk-TSAL54PB.js`
33.8 KiB	`dist/toolbar/chunk-chunk-2ZAR5II4.js`
21.7 KiB	`dist/toolbar/chunk-chunk-3IU3QL5G.js`
6.8 KiB	`dist/toolbar/chunk-chunk-DV7IWQNF.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +70.6 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 971.06 MiB · 🔺 +70.6 KiB (+0.0%)

✅ Django migration risk — migration analysis complete

We've analyzed your migrations for potential risks.

Summary: 2 Safe | 0 Needs Review | 0 Blocked

✅ Safe

Brief or no lock, backwards compatible

workflows.0041_sandbox_sender_tenant_state
  └─ #1 ✅ CreateModel
     Creating new table is safe
     model: SandboxSenderTenantState
  │
  └──> ℹ️  INFO:
       ℹ️  Skipped operations on newly created tables (empty tables
       don't cause lock contention).

workflows.0042_sandbox_sender_organization_block
  └─ #1 ✅ CreateModel
     Creating new table is safe
     model: SandboxSenderOrganizationBlock
  │
  └──> ℹ️  INFO:
       ℹ️  Skipped operations on newly created tables (empty tables
       don't cause lock contention).

Last updated: 2026-11-04 07:51 UTC (bb9550b)

posthog

PostHog Review · Standard · reviewed 5019fa2: 5 Should fix.

This is the only automatic review while this pull request is a draft. Comment @posthog review to review new changes sooner. Otherwise, a review of the new changes runs when you mark it ready for review.

See this review and its findings in PostHog Review. Comment @posthog review --deep for a Deep review. A Deep review takes longer and looks deeper than a Standard review.

posthog · 2026-11-03T16:54:24Z

+    return [
+        entry["value"]
+        for entry in stored_inputs.values()
+        if isinstance(entry, dict) and isinstance(entry.get("value"), dict)


P2 · Restrict grandfathering to stored email inputs

With the flag on, a destination can store sandbox sender details in a dictionary input, then change its schema to native_email. _stored_input_values treats that dictionary as an existing email, so validate_sandbox_email_sender returns before enforcing the destination restriction. Restrict grandfathering to matching inputs previously stored with an email schema.

posthog · 2026-11-03T16:54:24Z

+    const emailIntegrations = integrations.filter((integration) => integration.kind === 'email')
+    const senders = emailIntegrations.filter((integration) => !isSandboxEmailSender(integration))
    if (senders.length === 0) {
-        return NO_EMAIL_SENDER_MESSAGE
+        return emailIntegrations.length > 0 ? SANDBOX_ONLY_SENDER_MESSAGE : NO_EMAIL_SENDER_MESSAGE


P2 · Gate the sandbox audience warning on its feature flag

When a project retains a sandbox integration after workflows-sandbox-sender turns off, the integrations API still returns it. emailSenderWarning now excludes it unconditionally and opens a new warning dialog when users launch an audience, changing the promised flag-off behavior. Apply the sandbox-specific warning logic only while the project flag is enabled.

posthog · 2026-11-03T16:54:24Z

+        except Exception:
+            flag_cache[team.id] = False


P2 · Preserve sandbox validation when flag evaluation fails

When flag evaluation raises, _sandbox_sender_enabled caches False and silently bypasses all sandbox save checks. A destination using the sandbox sender then saves successfully, but the worker skips its deliveries, leaving a broken configuration after the outage ends. Log the failure and check sandbox integrations or return a retryable error.

posthog · 2026-11-03T16:54:25Z

+        page = [
+            flow
+            for flow in page
+            if _joins_in_order(flow, flow._trigger_id, flow._email_id, flow._exit_id)
+            and not (sandbox_sender_ids and _sender_ids(flow._email_sender) & sandbox_sender_ids)
+        ]


P2 · Exclude sandbox senders before paginating conversion candidates

For projects whose matching workflows mostly use the sandbox sender, this filter discards each fetched page while the loop keeps increasing OFFSET. Returning an empty candidate list scans every matching workflow through repeated JSON shape queries, with growing offset costs. Apply the sandbox exclusion in SQL before pagination.

posthog · 2026-11-03T16:54:25Z

+        membersNeeded: (membersNeeded: boolean, wereNeeded: boolean | undefined) => {
+            if (membersNeeded && !wereNeeded) {
+                actions.loadAllMembers()


P2 · Reuse the cached member loader when opening the modal

With the flag enabled, every modal reopening calls loadAllMembers, refetching every organization member in sequential 200-member pages even when cached or already loading. Large organizations incur repeated requests, and sendDisabledReason blocks sandbox sends until pagination finishes. Use ensureAllMembersLoaded to reuse cached data and guard in-flight loads.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…ox flag is off Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…andbox-polish/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Keeps the integration icon map off the eager path of scenes that load the audience warnings. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…andbox-polish/editor

…/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…andbox-polish/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Silthus · 2026-11-04T11:37:05Z

Split into smaller PRs in five stacks: Node caps #129048 to #129052, Node readers #129053 to #129057, product backend #129058 to #129062, editor #129063 to #129067, and the switch banner #129068 to #129069.

Silthus self-assigned this Nov 3, 2026

Silthus added this pull request to stack #128415 November 3, 2026 16:51

Silthus mentioned this pull request Nov 3, 2026

feat(workflows): sandbox first-run sender and switch banner #128414

Closed

posthog Bot reviewed Nov 3, 2026

View reviewed changes

Silthus and others added 9 commits November 3, 2026 17:13

fix(workflows): split the test email recipient field out of its modal

1f9a5c0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(workflows): keep master's audience sender warning while the sandb…

df0238c

…ox flag is off Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(cdp): grandfather only stored email inputs under the same key

7c747da

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

chore(workflows): merge safety/node-readers and master into this layer

9e35012

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'workflows-sandbox-safety/node-readers' into workflows-s…

36f98cf

…andbox-polish/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(workflows): import the sandbox sender helper from its own module

47000f4

Keeps the integration icon map off the eager path of scenes that load the audience warnings. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'workflows-sandbox-safety/node-readers' into workflows-s…

3399752

…andbox-polish/editor

chore(workflows): merge the layer below into workflows-sandbox-polish…

52c12cb

…/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'workflows-sandbox-safety/node-readers' into workflows-s…

bb9550b

…andbox-polish/editor Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Silthus closed this Nov 4, 2026

Navigation Menu

Repository navigation

feat(workflows): sandbox test sends, save checks and switch confirm - #128413

feat(workflows): sandbox test sends, save checks and switch confirm#128413
Silthus wants to merge 10 commits into
workflows-sandbox-safety/node-readersfrom
workflows-sandbox-polish/editor

Silthus commented Nov 3, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 3, 2026 •

edited

Loading

✅ Safe

Uh oh!

posthog Bot left a comment

Uh oh!

posthog Bot Nov 3, 2026

Uh oh!

posthog Bot Nov 3, 2026

Uh oh!

posthog Bot Nov 3, 2026

Uh oh!

posthog Bot Nov 3, 2026

Uh oh!

posthog Bot Nov 3, 2026

Uh oh!

Silthus commented Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Silthus commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

How did you test this code?

CI report

Release status

Docs update

🤖 Agent context

Uh oh!

github-actions Bot commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

✅ Safe

Uh oh!

posthog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

posthog Bot Nov 3, 2026

Choose a reason for hiding this comment

Uh oh!

posthog Bot Nov 3, 2026

Choose a reason for hiding this comment

Uh oh!

posthog Bot Nov 3, 2026

Choose a reason for hiding this comment

Uh oh!

posthog Bot Nov 3, 2026

Choose a reason for hiding this comment

Uh oh!

posthog Bot Nov 3, 2026

Choose a reason for hiding this comment

Uh oh!

Silthus commented Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Silthus commented Nov 3, 2026 •

edited

Loading

github-actions Bot commented Nov 3, 2026 •

edited

Loading