feat(devex): add organization pages and tool actions to the admin console by webjunkie · Pull Request #130715 · PostHog/posthog

webjunkie · 2026-11-06T08:21:33Z

Problem

Staff still use custom Django admin views for organization billing limits, cohort re-saves and usage reports, because the console had no organization page, no tool actions and no group gates.

Changes

Organizations get a page with overview, teams and a Billing panel: limit (with a reason) or unlimit a product, sync members.
Tools can run actions. Re-save cohorts shows its dry-run output on the page, not only in server logs.
An action can require a Django group: a disabled button for others, 403 on the server. Send usage report keeps its Billing Team gate.
Old views and templates go; old URLs redirect with their query string. Freeze findings 184 → 173.

How did you test this code?

Test rationale: console tests cover the organization page, limits, redirects and the group gate. The re-save cohorts test moves to the cohorts product.

Not run on a live stack: pages checked as test renders, light and dark.

Release status

No feature flag controls this change

Docs update

None.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code, claude-opus-5-5

Skills: /extending-the-admin-console, /writing-tests, /writing-pr-descriptions, /shipping-pr-programs

More context for AI agents

Decisions: Codex reviewed the plan and the diff locally. Gates use groups only; tool actions are a separate type from record actions.
Decisions: three local layers folded into one PR, because the size already needs a human review.
Decisions: CodeRabbit pass skipped by owner preference.
Follow-ups: gates and previews on record actions, user and project pages.
Read closely: posthog/admin/console/records.py, posthog/admin/console/views.py (gate checks on GET and POST).

The console only had team pages, so every organization action (quota limits, billing sync) still lived in custom Django admin views that the freeze rule counts. About 45 of the 70 remaining admin views are about a record that is not a team. - RecordType in records.py describes a record kind (URL segment, pk converter, title, breadcrumb parents, header links). Routes are generated per type with typed converters, so a malformed pk is a 404 before any query, and the team URL names stay. - record.html and operation.html render any record type; panel lookup stays scoped to the resolved type. - Organization page: Overview, Teams (linked facts) and Billing (limit, remove a limit, sync members). Limiting drops customer data, so it is a danger operation with a reason. - Fact.href links a fact to a same-site path; off-site links are refused. - Old limit/unlimit/sync URLs redirect to the Billing panel, query kept. - Only team and organization are registered: a type joins when it has panels.

Tools were read-only, so cross-record staff actions (re-save cohorts, health check triggers, usage report sends, notebook migration) still needed custom Django admin views. About 15 of the remaining admin views are this shape. - ToolOperation is a record Operation without the record: handler(request, form). Kept as its own type so record handlers keep a non-null record. - A handler returns None (back to the tool with its messages) or a Page shown as the result. Result pages are for runs that are harmless to repeat, such as a dry run, since a reload submits the form again. - Tool pages answer GET and HEAD only; operations keep the tool's query string so tools with sub-pages can use them. - Operations are audited on both paths, and a crash is logged before it propagates. - Output block shows command output as plain text. - Re-save cohorts moves to a tool owned by feature flags. A dry run shows what the command printed (it used to go to server logs only). The old admin URL redirects with its query string.

About ten remaining admin views check more than is_staff (Billing Team, ClickHouse Team, deletion rights, not impersonated). The console only had the staff check, so those views could not move. - Gate holds a label and a check on the request; Gate.group(name) covers the common case. Django model permissions are not offered as a gate, since User.is_superuser mirrors is_staff and every staff member would pass. - Operation and ToolOperation take an optional gate. The page shows a gated operation disabled with who may run it; the runner refuses GET and POST with 403 and logs the denial. - Sending usage reports moves to a Usage reports tool behind the Billing Team group. The old admin URL redirects to it.

trunk-io · 2026-11-06T08:21:38Z

😎 This pull request was merged.

github-actions · 2026-11-06T08:22:58Z

🤖 CI report

⚠️

Trunk lane — backend Python lane

This PR is assigned to the backend Python lane. It runs backend Python tests and may merge in parallel with PRs in other lanes.

⚠️

Duplication (Python) — 1 new duplicated block (worst 74 tokens)

New Python code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

First copy	Second copy	Lines	Tokens
`posthog/admin/console/panels.py:99`	`posthog/admin/console/tools.py:103`	13	74

✅ Duplication (TypeScript) — clean

New TypeScript code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Bundle size — no change

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 77.12 MiB · no change

No file changed by more than 1000 B.

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.03 MiB · 25 files	no change	`█████████░` 89.6% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	3.00 MiB · 623 files	no change	`██████████` 99.0% of 3.03 MiB
authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	3.82 MiB · 1,222 files	no change	`██████████` 95.4% of 4.01 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	7.58 MiB · 2,930 files	no change	`████████░░` 77.1% of 9.84 MiB
today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	4.69 MiB · 1,749 files	no change	`██████████` 95.0% of 4.93 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	5.98 MiB · 2,256 files	no change	`██████████` 95.3% of 6.27 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	6.66 MiB · 2,508 files	no change	`███████░░░` 70.8% of 9.41 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	7.68 MiB · 2,870 files	no change	`███████░░░` 73.2% of 10.49 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	6.89 MiB · 2,599 files	no change	`████████░░` 84.8% of 8.13 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/logic/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/kea-test-utils/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/panel-layout/ProjectTree/menus/SessionReplayMenuItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/projectNoticeLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/ImpersonationNotice/ImpersonationNotice.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/cohortSavedToast.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayShell.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayContextPanelFloating.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodaySidePanel.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayTopBar.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/todayRailItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/subscriptions/frontend/components/Subscriptions/exportNudge/exportNudgeLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/billing/paymentEntryLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/conversations/frontend/components/SidePanel/sidepanelTicketsLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/zod/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/auth/loginLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/shared/passkeyLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/CohortFilters/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/persons/frontend/logics/personsLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/surveys/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/re2js/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/react-markdown/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/Command/Command.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/marked/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/re2js/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/charts/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/InsightViz/InsightViz.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/DataVisualization/DataVisualization.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/WebOverview/WebOverview.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/marked/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/re2js/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/d3/src/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.7 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
4.0 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.9 KiB	`src/lib/utils/bootTiming.ts`
1.7 KiB	`src/index.tsx`
1.7 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.2 KiB	`src/RootErrorBoundary.tsx`
1.1 KiB	`src/lib/utils/deferredAppContext.ts`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
28.3 KiB	`src/lib/constants.tsx`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
32.3 KiB	`src/lib/utils/eventUsageLogic.ts`
28.3 KiB	`src/lib/constants.tsx`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
115.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
41.7 KiB	`src/scenes/hog-functions/sub-templates/sub-templates.ts`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
115.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
321.1 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of #32479}

✅ Frontend layers — no new upward imports, 0 removed

Static imports from a lower frontend layer into a higher one (layers, lowest first: kernel, shell, query, features). Compared with the base branch, so an import that a PR also adds to layer-baseline.txt still shows here. Sizes are the source bytes on the eager path of every logged-in page.

Layer	Eager source bytes	Δ vs base
kernel	2.97 MiB	no change
shell	2.35 MiB	no change
query	56.2 KiB	no change
features	273.6 KiB	no change

Download the interactive layer graph for this PR.

_{Posted automatically by check-layers}

✅ Toolbar bundle — eager 2.42 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.42 MiB · 19 files	no change	`████░░░░░░` 42.3% of 5.72 MiB
Deferred (lazy)	2.61 MiB · 42 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
961.3 KiB	`dist/toolbar/toolbar-app-F4WAIZ6W.css`
731.7 KiB	`dist/toolbar/chunk-chunk-N27OD2N3.js`
290.5 KiB	`dist/toolbar/chunk-chunk-B4EIGQIG.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FQJO25M6.js`
130.4 KiB	`dist/toolbar/chunk-chunk-3F26PAMR.js`
75.7 KiB	`dist/toolbar/toolbar-app-KS35NDNZ.js`
69.0 KiB	`dist/toolbar/chunk-chunk-BFAXZMC5.js`
33.8 KiB	`dist/toolbar/chunk-chunk-43ZVAZS7.js`
21.7 KiB	`dist/toolbar/chunk-chunk-F6URCRZB.js`
6.8 KiB	`dist/toolbar/chunk-chunk-RVLGRPCH.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +5.7 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 985.20 MiB · 🔺 +5.7 KiB (+0.0%)

✅ Playwright — all passed

All tests passed.

View test results →

webjunkie · 2026-11-06T08:54:05Z

@codex review

parameterai · 2026-11-06T08:54:12Z

Risk: No findings

This increment hardens the console migration: old admin URLs now pass through the staff check via admin.site.admin_view inside page_redirect, the Fact.href guard closes the "/" scheme-relative bypass, and re-save cohort output is kept memory-bounded with an accurate truncation count. No new security issues; the previously reported unwrapped redirect finding is fixed.

_{Sentinel reviewed aef98c9 · Review settings}

chatgpt-codex-connector · 2026-11-06T08:54:24Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-06T09:10:59.295204Z	`aef98c9`	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

posthog

PostHog Review · Standard · reviewed b5da83d: 2 Should fix.

See this review and its findings in PostHog Review. Comment @posthog review --deep for a Deep review. A Deep review takes longer and looks deeper than a Standard review.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b5da83d363

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

veria-ai · 2026-11-06T08:58:19Z

PR overview

All previously flagged issues have been addressed. No open security concerns remain on this pull request.

Security review

No open security issues remain on this pull request.

Fixed/addressed: 1 · PR risk: 0/10

Review findings on the console records and tools layer: - old admin URLs that now redirect to a console page ran without admin_view, so signed-out visitors reached them; page_redirect now wraps its view like every console route - the Billing panel cut limited products at the fact limit without saying so; the last fact now counts the rest - re-saving every team kept the whole command output in memory; the tool keeps only the lines it shows and counts the rest - a fact link starting with "/\" passed the same-site check, and browsers read it like "//"

webjunkie · 2026-11-06T09:08:29Z

@codex review

chatgpt-codex-connector · 2026-11-06T09:10:57Z

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: aef98c9cd2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

posthog · 2026-11-06T09:17:59Z

👋 Visual changes detected for this PR.

Review and approve in PostHog Visual Review

If these changes are unexpected, they may be caused by a flaky test or a broken snapshot on master. Don't approve — rerun the job or wait for a fix.

_{Install the Visual Review Chrome extension to see visual review results at the top of your pull requests.}

stamphog

Not approved yet — waiting on the conditions below.

Re-add the stamphog label to request another review once you have addressed this.

Gates denied this change because it touches billing-sensitive behavior and exceeds the automated-review scope and size limits, despite current-head independent assurance and no verified outstanding substantive concerns. Request human review from @PostHog/team-devex and @PostHog/team-feature-flags.

PostHog Review (Standard) reviewed the current head: no findings.
Trusted gate denial: billing-sensitive changes matched the deny-list; request human review through @PostHog/team-devex, with @PostHog/team-feature-flags reviewing the cohort changes.
Trusted gate denial: the cross-cutting change exceeds the automated-review size ceiling and is classified as ineligible for automated approval; use the human review route rather than re-requesting automated approval unchanged.

Gate mechanics and policy version

Gate		Result
prerequisites	✓	all clear
deny-list	✗	matches: billing
size	✗	too large for auto-review (1475L substantive in global — ceiling is 1200L; 1475L, 29F total, 1765L/36F incl. docs/generated/snapshots)
tier	✗	classified as T2-never: T2-never (1765L, 36F, cross-cutting, feat)
stamphog 2.7.0		`.stamphog/policy.yml` @ `aef98c9` · reviewed head `aef98c9`

trunk-io · 2026-11-06T14:58:15Z

This pull request was merged into master as part of stacked PR 130716.

deployment-status-posthog · 2026-11-06T15:25:40Z

Deploy status

Environment	Status	Deployed At	Workflow
dev	✅ Deployed	2026-11-06 15:25 UTC	Run
prod-us	✅ Deployed	2026-11-06 15:42 UTC	Run
prod-eu	✅ Deployed	2026-11-06 15:37 UTC	Run

Master landed its own tool operations (#130715, #130716) while this branch built an inline version of the same thing. Master's design wins where both built it: - ToolOperation, its handler protocol, the operation page at /tools/<tool>/<op>/, gate, preview via ConfirmStep and the signed token, and result pages all come from master. The inline OperationForm block, _fill_operation_forms and the POST path in tool_page are dropped, so tool pages stay read-only (@require_safe). - check_danger replaces check_danger_contract. - Live replaces Page.refresh_seconds and the meta refresh in base.html. - posthog/settings/logs.py takes master's version; the audit log level fix lands in #131086. Kept from this branch, adapted to master's block rendering (_block.html): - Filters (GET form, field groups and their contract check), Stats/Stat, Links/Link, Notice.tone (callout, now also shows the notice link), Table.title/numeric_columns/scrolls, Cell.detail - data-pending-label loading labels in console.js - the "Incidents" tool group - Live can hold a Stats block too, so a status row can follow running work Tests: the inline-operation cases now hit master's operation URL, which keeps coverage master lacks for tool operations (offered lookup, query kept on redirect, refusal re-renders the form, CSRF). The ToolOperation danger and Filters contract cases stay. AGENTS.md and the extending-the-admin-console skill describe master's operation model plus the new blocks. console.css rebuilt.

webjunkie added 3 commits November 6, 2026 09:20

pr-assigner-resolver-posthog Bot assigned webjunkie Nov 6, 2026

webjunkie added this pull request to stack #130717 November 6, 2026 08:21

webjunkie changed the title ~~feat/devex console records and tools~~ feat(devex): add organization pages and tool actions to the admin console Nov 6, 2026

webjunkie requested a review from a team November 6, 2026 08:23

webjunkie marked this pull request as ready for review November 6, 2026 08:54

pr-assigner-resolver-posthog Bot requested a review from a team November 6, 2026 08:55

posthog-project-board-bot Bot added this to Feature Flags Nov 6, 2026

posthog-project-board-bot Bot moved this to In Review in Feature Flags Nov 6, 2026

posthog Bot reviewed Nov 6, 2026

View reviewed changes

Comment thread posthog/admin/console/organization_panels.py Resolved

Comment thread products/cohorts/backend/console.py Resolved

parameterai Bot reviewed Nov 6, 2026

View reviewed changes

Comment thread posthog/admin/console/urls.py Resolved

chatgpt-codex-connector Bot reviewed Nov 6, 2026

View reviewed changes

Comment thread posthog/admin/console/urls.py Resolved

Comment thread posthog/admin/console/urls.py Resolved

veria-ai Bot reviewed Nov 6, 2026

View reviewed changes

Comment thread posthog/admin/console/panels.py Resolved

webjunkie requested review from a team and amays-phog and removed request for a team November 6, 2026 09:11

stamphog Bot reviewed Nov 6, 2026

View reviewed changes

rnegron approved these changes Nov 6, 2026

View reviewed changes

github-project-automation Bot moved this from In Review to Approved in Feature Flags Nov 6, 2026

trunk-io Bot merged commit bb8ab19 into master Nov 6, 2026
374 of 377 checks passed

github-project-automation Bot moved this from Approved to Done in Feature Flags Nov 6, 2026

trunk-io Bot deleted the feat/devex-console-records-and-tools branch November 6, 2026 14:58

This was referenced Nov 6, 2026

feat(devex): add filter, stats and link blocks to console tools #130856

Merged

feat(cdp): add a reviewed replay of failed destination invocations to django admin #122314

Merged

Conversation

webjunkie commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

How did you test this code?

Release status

Docs update

🤖 Agent context

Uh oh!

trunk-io Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

Uh oh!

webjunkie commented Nov 6, 2026

Uh oh!

parameterai Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

posthog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

veria-ai Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR overview

Security review

Uh oh!

webjunkie commented Nov 6, 2026

Uh oh!

chatgpt-codex-connector Bot commented Nov 6, 2026

Uh oh!

posthog Bot commented Nov 6, 2026

Uh oh!

stamphog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

trunk-io Bot commented Nov 6, 2026

Uh oh!

deployment-status-posthog Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploy status

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

webjunkie commented Nov 6, 2026 •

edited

Loading

trunk-io Bot commented Nov 6, 2026 •

edited

Loading

github-actions Bot commented Nov 6, 2026 •

edited

Loading

parameterai Bot commented Nov 6, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Nov 6, 2026 •

edited

Loading

veria-ai Bot commented Nov 6, 2026 •

edited

Loading

deployment-status-posthog Bot commented Nov 6, 2026 •

edited

Loading