feat(workflows): store the sandbox sender kind and state by Silthus · Pull Request #131749 · PostHog/posthog

Silthus · 2026-11-09T11:42:55Z

Problem

Teams that cannot verify a sending domain stall at a workflow's email sender step.
The email owner asked for a sandbox sender isolated from ordinary email.
Replaces the model halves of feat(workflows): mirror the sandbox SES tenant pause state in Django #129058 and feat(workflows): let staff block the sandbox sender for an organization #129059.

Changes

Nothing user-visible: nothing reads the new kind or tables yet.
Adds the email_sandbox integration kind to the API and MCP enums.
Adds two tables: the SES tenant's sending status and a staff organization block.

The whole sandbox sender stack. Blue tags name the PR that builds each part.

P1's part highlighted

This PR builds the part outlined in blue: the Postgres tables for the tenant's sending status and the organization block.

Caution

🔴 Merge risk: high · one-way door: two tables and a public enum value.

Worst case: a failed migration blocks the Django deploy.
Switch-off: none.

Rollout

Stages: readers merge after this migration is live in both regions.

How did you test this code?

Test rationale: test_catalogue fails without the new kind's frozen default.

A live server filtered by the kind and refused creating it. The base-to-HEAD API schema diff is only the enum.
The Python duplication warning pairs two enums that already mirror the catalogue on master.
The MCP snapshot and migration SQL report sections show the new enum value and migration 0043; the risk analysis rates 0043 safe. The Trunk lane note only names the lane. The flaky Playwright test is "Delete a person property", which this PR does not touch.
The +13.4 KiB bundle warning is in DefinitionView and TransactionalScene, which this PR does not change.

Release status

No feature flag controls this change

Docs update

None.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code, Claude Opus 5.5

Skills: /django-migrations, /writing-tests, /writing-code-comments, /writing-pr-descriptions

More context for AI agents

Session: T3 Code thread, P1 of the isolated Workflows sandbox sender stack.
Decisions: no posthog migration, because the kind field reads its choices from a callable.
Decisions: the tenant state is instance-global (legitimately unscoped); the organization block joins the org-scoped IDOR rule.
Decisions: both tables skip foreign key constraints, so the migration takes no lock on posthog_organization or posthog_user.
Follow-ups: backend CI regenerates the desktop API client.
Head: d0b94f4 removes the comments on the tenant state model and its IDOR list entry.
Read closely: products/workflows/backend/migrations/0043_sandbox_sender_state.py.

🤖 Generated with Claude Code

Add the email_sandbox integration kind with credentials as its only auth type, and the two tables the sandbox sender reads: a mirror of the shared SES tenant's sending status and a staff-set organization block. Nothing reads them yet. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

trunk-io · 2026-11-09T11:43:00Z

😎 Stack merged successfully - details.

github-actions · 2026-11-09T11:44:34Z

🤖 CI report

⚠️

Trunk lane — backend Python lane

This PR is assigned to the backend Python lane. It runs backend Python tests and may merge in parallel with PRs in other lanes.

✅ Complexity (TypeScript) — clean

Cyclomatic complexity above the limit in changed typescript files (10 for production files, 15 for test files). Warn only: worth simplifying when you next touch these functions.

⚠️

Duplication (Python) — 1 new duplicated block (worst 105 tokens)

New Python code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

First copy	Second copy	Lines	Tokens
`posthog/integrations/kinds_generated.py:23`	`posthog/models/integration/model.py:264`	35	105

✅ Duplication (TypeScript) — clean

New TypeScript code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Bundle size — 🟢 -840 B (-0.0%)

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 78.20 MiB · 🟢 -840 B (-0.0%)

File	Size	Δ vs base
`posthog-app/src/scenes/AuthenticatedShell.js`	149.2 KiB	🟢 -3.0 KiB (-2.0%)
`posthog-app/src/scenes/project-homepage/today/TodayHome.js`	48.3 KiB	🔺 +2.0 KiB (+4.4%)

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.04 MiB · 25 files	no change	`█████████░` 90.7% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	3.03 MiB · 628 files	no change	`██████████` 99.8% of 3.03 MiB
authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	3.86 MiB · 1,236 files	🔺 +1.6 KiB (+0.0%)	`██████████` 96.3% of 4.01 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	7.75 MiB · 2,990 files	no change	`████████░░` 78.8% of 9.84 MiB
today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	4.83 MiB · 1,857 files	🔺 +6.3 KiB (+0.1%)	`██████████` 98.0% of 4.93 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	6.06 MiB · 2,289 files	🔺 +4.3 KiB (+0.1%)	`██████████` 96.6% of 6.27 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	6.77 MiB · 2,550 files	no change	`███████░░░` 71.9% of 9.41 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	7.83 MiB · 2,929 files	no change	`███████░░░` 74.6% of 10.49 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	6.95 MiB · 2,612 files	no change	`█████████░` 85.5% of 8.13 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/logic/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/kea-test-utils/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/panel-layout/ProjectTree/menus/SessionReplayMenuItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/projectNoticeLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/ImpersonationNotice/ImpersonationNotice.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/cohortSavedToast.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayShell.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayContextPanelFloating.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodaySidePanel.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayTopBar.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/todayRailItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/subscriptions/frontend/components/Subscriptions/exportNudge/exportNudgeLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/billing/paymentEntryLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/conversations/frontend/components/SidePanel/sidepanelTicketsLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/zod/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/auth/loginLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/shared/passkeyLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/CohortFilters/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/persons/frontend/logics/personsLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/surveys/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/re2js/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/react-markdown/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/Command/Command.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/marked/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/re2js/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/charts/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/InsightViz/InsightViz.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/DataVisualization/DataVisualization.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/WebOverview/WebOverview.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/marked/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/re2js/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/d3/src/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.7 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
4.0 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.9 KiB	`src/lib/utils/bootTiming.ts`
1.7 KiB	`src/index.tsx`
1.7 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.2 KiB	`src/RootErrorBoundary.tsx`
1.1 KiB	`src/lib/utils/deferredAppContext.ts`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.0 KiB	`src/products.tsx`
87.8 KiB	`src/lib/api.ts`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
42.7 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.3.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
29.0 KiB	`src/lib/constants.tsx`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.0 KiB	`src/products.tsx`
87.8 KiB	`src/lib/api.ts`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
42.7 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.3.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
32.6 KiB	`src/lib/utils/eventUsageLogic.ts`
29.0 KiB	`src/lib/constants.tsx`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
113.4 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
96.7 KiB	`../packages/quill/packages/components/dist/index.js`
87.8 KiB	`src/lib/api.ts`
78.8 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
87.8 KiB	`src/lib/api.ts`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.5 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
42.7 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.3.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
87.8 KiB	`src/lib/api.ts`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.5 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
42.7 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.3.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
41.7 KiB	`src/scenes/hog-functions/sub-templates/sub-templates.ts`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
96.7 KiB	`../packages/quill/packages/components/dist/index.js`
87.8 KiB	`src/lib/api.ts`
78.8 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.5 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
113.4 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
96.7 KiB	`../packages/quill/packages/components/dist/index.js`
87.8 KiB	`src/lib/api.ts`
78.8 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
361.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
322.0 KiB	`../node_modules/.pnpm/posthog-js@1.447.7_@types+react@18.3.31_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
112.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
106.0 KiB	`src/products.tsx`
96.7 KiB	`../packages/quill/packages/components/dist/index.js`
87.8 KiB	`src/lib/api.ts`
69.0 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.5 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of #32479}

✅ Frontend layers — no new upward imports, 0 removed

Static imports from a lower frontend layer into a higher one (layers, lowest first: kernel, shell, query, features). Compared with the base branch, so an import that a PR also adds to layer-baseline.txt still shows here. Sizes are the source bytes on the eager path of every logged-in page.

Layer	Eager source bytes	Δ vs base
kernel	3.00 MiB	no change
shell	2.41 MiB	🔺 +555 B (+0.0%)
query	56.9 KiB	no change
features	274.1 KiB	no change

Download the interactive layer graph for this PR.

_{Posted automatically by check-layers}

✅ Toolbar bundle — eager 2.44 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.44 MiB · 19 files	no change	`████░░░░░░` 42.6% of 5.72 MiB
Deferred (lazy)	2.64 MiB · 44 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
974.8 KiB	`dist/toolbar/toolbar-app-W7RYTFLH.css`
737.5 KiB	`dist/toolbar/chunk-chunk-2GUA5KB7.js`
290.5 KiB	`dist/toolbar/chunk-chunk-QRQPQULA.js`
137.6 KiB	`dist/toolbar/chunk-chunk-KUOTCAG7.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FQJO25M6.js`
75.7 KiB	`dist/toolbar/toolbar-app-PXH7UCE5.js`
69.0 KiB	`dist/toolbar/chunk-chunk-BFAXZMC5.js`
33.8 KiB	`dist/toolbar/chunk-chunk-RDAX246Y.js`
21.9 KiB	`dist/toolbar/chunk-chunk-GDK4T7BX.js`
6.8 KiB	`dist/toolbar/chunk-chunk-RVLGRPCH.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +40.4 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 1003.02 MiB · 🔺 +40.4 KiB (+0.0%)

ℹ️ MCP UI apps size — 35 app(s), 36958.2 KB JS

Built size of each MCP UI app (main.js + styles.css).

App	JS	CSS
debug	1065.3 KB	221.5 KB
explain-chart	1347.6 KB	221.5 KB
action	994.0 KB	221.5 KB
action-list	1056.3 KB	221.5 KB
cohort	993.0 KB	221.5 KB
cohort-list	1055.3 KB	221.5 KB
email-template	992.8 KB	221.5 KB
error-details	997.9 KB	221.5 KB
error-issue	994.9 KB	221.5 KB
error-issue-list	1057.5 KB	221.5 KB
experiment	1053.4 KB	221.5 KB
experiment-list	1057.0 KB	221.5 KB
experiment-results	1055.5 KB	221.5 KB
feature-flag	1055.7 KB	221.5 KB
feature-flag-list	1059.4 KB	221.5 KB
feature-flag-testing	996.2 KB	221.5 KB
inline-scan	993.4 KB	221.5 KB
insight-actors	1054.8 KB	221.5 KB
llm-costs	1052.1 KB	221.5 KB
session-recording	995.2 KB	221.5 KB
survey	994.6 KB	221.5 KB
survey-global-stats	1052.1 KB	221.5 KB
survey-list	1057.0 KB	221.5 KB
survey-stats	1052.1 KB	221.5 KB
trace-span	993.3 KB	221.5 KB
trace-span-list	1056.2 KB	221.5 KB
vision-observation-list	1055.4 KB	221.5 KB
workflow	993.3 KB	221.5 KB
workflow-list	1055.6 KB	221.5 KB
workflow-setup-status	993.0 KB	221.5 KB
query-results	1317.0 KB	221.5 KB
render-ui	1423.5 KB	221.5 KB
visual-review-snapshots	997.9 KB	221.5 KB
workflow-data-suggestions	995.7 KB	221.5 KB
workflow-sending-rules	994.3 KB	221.5 KB

ℹ️ MCP agent API — agent-facing tool changes

What this PR changes for agents, from the tool schema snapshots and tool definitions.

Tools changed (1):

Tool	Params	Scopes	Annotations	Schema chars
`integrations-list`				2,416 -> 2,467

⚠️

Playwright — 1 flaky

🎭 Playwright report · View test results →

⚠️ 1 flaky test:

Delete a person property (chromium)

These issues are not necessarily caused by your changes.
Annoyed by this section? Help fix flakies and failures and it will go green!

⚠️

MCP snapshots — 1 updated (1 modified, 0 added, 0 deleted)

Snapshots: MCP unit test snapshots updated

Changes: 1 snapshots (1 modified, 0 added, 0 deleted)

What this means:

Snapshots have been automatically updated to match current output

Next steps:

Review the changes to ensure they're intentional
If unexpected, investigate what caused the output to change

Review snapshot changes →

⚠️

Django migration SQL — 1 new migration to review

We've detected new migrations on this PR. Review the SQL output for each migration:

`products/workflows/backend/migrations/0043_sandbox_sender_state.py`

-- sqlmigrate failed for this migration (see the Validate migrations job log)

Last updated: 2026-11-11 05:16 UTC (395c5f8)

✅ Django migration risk — migration analysis complete

We've analyzed your migrations for potential risks.

Summary: 1 Safe | 0 Needs Review | 0 Blocked

✅ Safe

Brief or no lock, backwards compatible

workflows.0043_sandbox_sender_state
  └─ #1 ✅ CreateModel
     Creating new table is safe
     model: SandboxSenderTenantState
  └─ #2 ✅ CreateModel
     Creating new table is safe
     model: SandboxSenderOrganizationBlock
  │
  └──> ℹ️  INFO:
       ℹ️  Skipped operations on newly created tables (empty tables
       don't cause lock contention).

Last updated: 2026-11-11 05:16 UTC (395c5f8)

❌ Hogbox preview — build failed

The preview didn't come up for commit 395c5f8. See the build log for the failing step. It'll retry on the next push.

_{Previews are optional and never block merging. A failure here is often a hogland or tailnet hiccup rather than anything in your PR, so the check stays green and this section is the status.}

posthog

PostHog Review · Standard · reviewed 444c177: no findings.

…1-sender-kind-state

parameterai · 2026-11-10T11:29:28Z

Risk: No findings

The only change since the last review is a merge of master into the branch; the PR-specific diff versus the master parent is still just the additive email_sandbox integration kind, the two new sandbox-sender models, and migration 0043. I verified the merge resolution kept every master change (creator_can_manage, IntegrationReference, the new IDOR-rule entries) and that the new kind cannot be used to create a row: the create chain has no email_sandbox branch and falls through to "Kind not supported" at posthog/api/integration.py:1438. No new security issues.

_{Sentinel reviewed 395c5f8 · Review settings}

veria-ai · 2026-11-10T11:29:50Z

PR overview

No security issues were found in this pull request.

Reviews

395c5f8 — No new issues
d0b94f4 — No new issues
cb7ba76 — No new issues

…1-sender-kind-state

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stamphog

Approved.

The author owns the workflow models, but the cross-team API and security-check changes have no qualifying current-head review; no substantive concerns were found in the supplied discussions. Request current-head review covering those changes from @PostHog/team-warehouse-sources and @PostHog/team-context-and-mcp before re-requesting; Tom Owers and Daniel Marchuk are suggested reviewers.

Author wrote 0% of the modified lines and has 7 merged PRs in these paths (familiarity MODERATE).

Gate mechanics and policy version

Gate		Result
prerequisites	✓	all clear
deny-list	✓	no deny categories matched
size	✓	108L, 9F substantive, 139L/16F incl. docs/generated/snapshots — within ceiling
tier	✓	T1-agent / T1d-complex (139L, 16F, cross-cutting, feat)
stamphog 2.7.0		`.stamphog/policy.yml` @ `395c5f8` · reviewed head `395c5f8`

Silthus · 2026-11-11T10:51:53Z

/trunk merge

deployment-status-posthog · 2026-11-11T11:55:32Z

Deploy status

Environment	Status	Deployed At	Workflow
dev	✅ Deployed	2026-11-11 11:55 UTC	Run
prod-us	✅ Deployed	2026-11-11 12:17 UTC	Run
prod-eu	✅ Deployed	2026-11-11 12:21 UTC	Run

_{This table shows the posthog release only. Hogstation shows every service that this PR reaches, Kargo services included.}

Silthus added run-ci-backend Force ci-backend's full test matrices to run even on a draft PR hogbox-preview Spin up a per-PR PostHog preview on a hogland hogbox run-ci-frontend Force ci-storybook's full visual-regression matrix to run even on a draft PR labels Nov 9, 2026

Silthus self-assigned this Nov 9, 2026

github-actions Bot requested a deployment to hogbox-preview November 9, 2026 11:44 In progress

test(mcp): update unit test snapshots

57a259c

posthog Bot reviewed Nov 9, 2026

View reviewed changes

github-actions Bot had a problem deploying to hogbox-preview November 9, 2026 11:48 Failure

This was referenced Nov 9, 2026

feat(cdp): add sandbox email delivery policy #131731

Merged

feat(cdp): send sandbox email from the sandbox worker #131834

Merged

feat(workflows): validate and provision sandbox email steps #131840

Merged

Silthus added this pull request to stack #131841 November 9, 2026 13:41

This was referenced Nov 9, 2026

feat(workflows): mirror the sandbox SES tenant pause state in Django #129058

Closed

feat(workflows): let staff block the sandbox sender for an organization #129059

Closed

Merge remote-tracking branch 'origin/master' into workflows-sandbox/p…

e0fca31

…1-sender-kind-state

github-actions Bot deployed to hogbox-preview November 10, 2026 10:09

View deployment

Silthus marked this pull request as ready for review November 10, 2026 11:29

stamphog Bot requested review from a team November 10, 2026 11:29

Merge remote-tracking branch 'origin/master' into workflows-sandbox/p…

cb7ba76

…1-sender-kind-state

github-actions Bot requested a deployment to hogbox-preview November 10, 2026 12:30 In progress

chore(workflows): drop the comments the sandbox sender models add

d0b94f4

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

github-actions Bot requested a deployment to hogbox-preview November 10, 2026 13:34 In progress

Merge master into workflows-sandbox/p1-sender-kind-state

395c5f8

github-actions Bot had a problem deploying to hogbox-preview November 11, 2026 05:13 Failure

This was referenced Nov 11, 2026

feat(cdp): send transactional email from code on the sandbox sender #132813

Merged

feat(cdp): route sandbox email steps to their own queue #131766

Merged

feat(workflows): choose the sandbox sender in email steps #131916

Merged

stamphog Bot approved these changes Nov 11, 2026

View reviewed changes

trunk-io Bot merged commit c25b630 into master Nov 11, 2026
360 of 362 checks passed

trunk-io Bot deleted the workflows-sandbox/p1-sender-kind-state branch November 11, 2026 11:25

Navigation Menu

Repository navigation

feat(workflows): store the sandbox sender kind and state - #131749

feat(workflows): store the sandbox sender kind and state#131749
trunk-io[bot] merged 6 commits into
masterfrom
workflows-sandbox/p1-sender-kind-state

Silthus commented Nov 9, 2026 •

edited

Loading

Uh oh!

trunk-io Bot commented Nov 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 9, 2026 •

edited

Loading

Snapshots: MCP unit test snapshots updated

`products/workflows/backend/migrations/0043_sandbox_sender_state.py`

✅ Safe

Uh oh!

posthog Bot left a comment

Uh oh!

parameterai Bot commented Nov 10, 2026 •

edited

Loading

Uh oh!

veria-ai Bot commented Nov 10, 2026 •

edited

Loading

Uh oh!

stamphog Bot left a comment

Uh oh!

Silthus commented Nov 11, 2026

Uh oh!

Uh oh!

deployment-status-posthog Bot commented Nov 11, 2026 •

edited

Loading

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Silthus commented Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

Rollout

How did you test this code?

Release status

Docs update

🤖 Agent context

Uh oh!

trunk-io Bot commented Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

Snapshots: MCP unit test snapshots updated

products/workflows/backend/migrations/0043_sandbox_sender_state.py

✅ Safe

Uh oh!

posthog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

parameterai Bot commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

veria-ai Bot commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR overview

Reviews

Uh oh!

stamphog Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Silthus commented Nov 11, 2026

Uh oh!

Uh oh!

deployment-status-posthog Bot commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploy status

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Silthus commented Nov 9, 2026 •

edited

Loading

trunk-io Bot commented Nov 9, 2026 •

edited

Loading

github-actions Bot commented Nov 9, 2026 •

edited

Loading

`products/workflows/backend/migrations/0043_sandbox_sender_state.py`

parameterai Bot commented Nov 10, 2026 •

edited

Loading

veria-ai Bot commented Nov 10, 2026 •

edited

Loading

deployment-status-posthog Bot commented Nov 11, 2026 •

edited

Loading