Repository navigation

feat(cdp): send transactional email from code on the sandbox sender - #132813

Merged

trunk-io[bot] merged 159 commits into

masterfrom

workflows-sandbox/n5-code-send-sandbox

Nov 13, 2026

Merged

feat(cdp): send transactional email from code on the sandbox sender#132813
trunk-io[bot] merged 159 commits into
masterfrom
workflows-sandbox/n5-code-send-sandbox

Commits on Nov 9, 2026
- feat(cdp): add sandbox email delivery policy
  
  Silthus
  and
  claude
  committed
  1013dbb
- fix(cdp): bound sandbox authorization connections and block unread opt-outs
  
  Silthus
  and
  claude
  committed
  d17f6fb
- fix(cdp): retry sandbox sends when the suppression read fails
  
  Silthus
  and
  claude
  committed
  5e40619
- chore(cdp): test that a strict suppression retry rereads the global list
  
  Silthus
  and
  claude
  committed
  2c9dcb5
- feat(cdp): route sandbox email steps to their own queue
  
  Silthus
  and
  claude
  committed
  c3364fb
- fix(cdp): run only the sandbox email step on the sandbox queue
  
  Silthus
  and
  claude
  committed
  98fbfe7
- fix(cdp): keep a sandbox job alive when on_error continues past a throw
  
  Silthus
  and
  claude
  committed
  51cb399
- Merge remote-tracking branch 'origin/workflows-sandbox/n2-delivery-policy' into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  b4a236c
- feat(cdp): send sandbox email from the sandbox worker
  
  Silthus
  and
  claude
  committed
  778458d
- fix(cdp): harden sandbox test sends and sandbox SES calls
  
  Silthus
  and
  claude
  committed
  359a51c
- fix(cdp): keep sandbox caps across retries and tag parent runs
  
  Silthus
  and
  claude
  committed
  8033197
- fix(cdp): hold sandbox caps only after a throttle, per recipient
  
  Silthus
  and
  claude
  committed
  a29be1a
- fix(cdp): keep a held sandbox cap claim through refusals before ses
  
  Silthus
  and
  claude
  committed
  e1588a4
- fix(cdp): outlast sandbox worker deadlines in tests and keep caps pool alive
  
  Silthus
  and
  claude
  committed
  5435c1f
- fix(cdp): refuse sandbox sends whose action id ses tags cannot carry
  
  Silthus
  and
  claude
  committed
  7e0252b
Commits on Nov 10, 2026
- fix(cdp): claim both sandbox cap buckets in one atomic step
  
  Silthus
  and
  claude
  committed
  2440fcc
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  999b4ac
- fix(cdp): reject an invalid ttl before charging any sandbox cap bucket
  
  Silthus
  and
  claude
  committed
  c82d290
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  4a4bd93
- Merge master into workflows-sandbox/n1-route-sandbox-steps
  Silthus
  committed
  26686ad
- Merge master into workflows-sandbox/n2-delivery-policy
  
  Silthus
  and
  claude
  committed
  88f9fd4
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  
  Silthus
  and
  claude
  committed
  ef8285e
- Merge workflows-sandbox/n1-route-sandbox-steps into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  3822f4a
- fix(cdp): reject a ttl past the expiry range before charging any bucket
  
  Silthus
  and
  claude
  committed
  ac1ec8b
- chore(cdp): test sandbox routing through a real queue and drop added comments
  
  Silthus
  and
  claude
  committed
  5b2c31b
- chore(cdp): assert sandbox step outcomes from job state, not calls
  
  Silthus
  and
  claude
  committed
  34be9df
- fix(cdp): cap sandbox authorization reads waiting for a connection
  
  Silthus
  and
  claude
  committed
  8d0e981
- chore(cdp): assert sandbox deliveries through a fake mailbox
  
  Silthus
  and
  claude
  committed
  0c5db6f
- Merge workflows-sandbox/n1-route-sandbox-steps into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  4f9420c
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  85a4b57
- chore(cdp): check that timed-out sandbox reads keep holding the queue cap
  
  Silthus
  and
  claude
  committed
  6aaef42
- chore(cdp): run the sandbox recipient checks against real suppression and preferences
  
  Silthus
  and
  claude
  committed
  ff076f2
- chore(cdp): fail sandbox recipient reads through an unreachable database
  
  Silthus
  and
  claude
  committed
  3b70954
- chore(cdp): drain the refill test's buckets with refill off
  
  Silthus
  and
  claude
  committed
  97ee783
- chore(cdp): fail the sandbox cap claim against a real unreachable valkey
  
  Silthus
  and
  claude
  committed
  8e23454
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  5eb231a
- fix(cdp): check sandbox opt-outs under the stored member spelling
  
  Silthus
  and
  claude
  committed
  85bfdde
- chore(cdp): assert sandbox opt-out and frequency cap hand-off by send outcome
  
  Silthus
  and
  claude
  committed
  190446e
- chore(cdp): type the sandbox recipient-check test helpers
  
  Silthus
  and
  claude
  committed
  1d0a683
- chore(cdp): assert sandbox opt-out sends by the delivered mailbox
  
  Silthus
  and
  claude
  committed
  0610ac8
- chore(cdp): prove an opted-out sandbox send leaves the daily allowance
  
  Silthus
  and
  claude
  committed
  8489b53
- fix(cdp): spend the sandbox frequency cap only after every opt-out check
  
  Silthus
  and
  claude
  committed
  869f7d0
- chore(cdp): drop comments from the sandbox sender code
  
  Silthus
  and
  claude
  committed
  6f52ec5
- fix(cdp): honour sandbox opt-outs across address spellings
  
  Silthus
  and
  claude
  committed
  3cd5253
- fix(cdp): hold sandbox test sends to the shared SES send rate
  
  Silthus
  and
  claude
  committed
  3f1826f
- chore(cdp): type the sandbox test world fixtures
  
  Silthus
  and
  claude
  committed
  c090a07
- fix(cdp): derive the sandbox test-send wait from the worker deadlines
  
  Silthus
  and
  claude
  committed
  abdb459
- chore(cdp): read workflow billing from the real usage reporter in tests
  
  Silthus
  and
  claude
  committed
  0ab36fc
- chore(cdp): read workflow billing from a local usage-ingestion endpoint in tests
  
  Silthus
  and
  claude
  committed
  5bfc5ad
- fix(cdp): charge a retried sandbox cap claim once
  
  Silthus
  and
  claude
  committed
  d62307a
- fix(cdp): give sandbox recipient reads a deadline
  
  Silthus
  and
  claude
  committed
  01e85d4
- fix(cdp): bound sandbox recipient reads at the query
  
  Silthus
  and
  claude
  committed
  eb37634
- fix(cdp): scope a sandbox cap claim id to its member
  
  Silthus
  and
  claude
  committed
  a27f5ef
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  
  Silthus
  and
  claude
  committed
  7fbe90e
- chore(cdp): cover a sandbox claim id reused across projects
  
  Silthus
  and
  claude
  committed
  6942ce2
- fix(cdp): claim sandbox caps once per send and bound recipient reads
  
  Silthus
  and
  claude
  committed
  d7df77b
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  
  Silthus
  and
  claude
  committed
  21f8883
- fix(cdp): charge a sandbox cap claim again after its send
  
  Silthus
  and
  claude
  committed
  8472677
- Merge branch 'workflows-sandbox/n2-delivery-policy' into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  db1bdc9
- chore(cdp): format the sandbox authorization merge
  
  Silthus
  and
  claude
  committed
  b12d9de
- fix(cdp): charge a sandbox send replayed after ses accepted it
  
  Silthus
  and
  claude
  committed
  995550b
- fix(cdp): scope a sandbox cap sent mark to its claim attempt
  
  Silthus
  and
  claude
  committed
  7307976
- Merge branch 'workflows-sandbox/n2-delivery-policy' into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  4d87be9
- fix(cdp): give each sandbox send its own cap claim attempt
  
  Silthus
  and
  claude
  committed
  be3df59
- fix(cdp): keep a sandbox cap sent mark with every attempt of its charge
  
  Silthus
  and
  claude
  committed
  1d81a62
- Merge branch 'workflows-sandbox/n2-delivery-policy' into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  7b41fa0
- fix(cdp): mark a sandbox send through its cap claim
  
  Silthus
  and
  claude
  committed
  f80c464
- chore(cdp): rerun checks on the sandbox sender
  
  Silthus
  and
  claude
  committed
  f1dc894
- feat(cdp): send transactional email from code on the sandbox sender
  
  Silthus
  and
  claude
  committed
  383b3e6
- chore(cdp): sign the code send test token with the configured secret
  
  Silthus
  and
  claude
  committed
  b89d7e0
- fix(cdp): give the sandbox frequency cap check a deadline
  
  Silthus
  and
  claude
  committed
  09dbca2
- fix(cdp): release a sandbox frequency cap slot for every finished check
  
  Silthus
  and
  claude
  committed
  c937291
- test(cdp): cover a sandbox frequency cap check that throws at once
  
  Silthus
  and
  claude
  committed
  ef42356
- test(cdp): check sandbox recipients against the real frequency cap
  
  Silthus
  and
  claude
  committed
  98d4390
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  21bc277
- test(cdp): check the sandbox test route's auth over real requests
  
  Silthus
  and
  claude
  committed
  3254f59
- fix(cdp): skip the sandbox frequency cap only behind late checks
  
  Silthus
  and
  claude
  committed
  5016cda
- fix(cdp): run at most eight sandbox frequency cap checks at once
  
  Silthus
  and
  claude
  committed
  bc0b245
- test(cdp): show the sandbox cap bound through the next send's reads
  
  Silthus
  and
  claude
  committed
  2ae3156
- test(cdp): read an uncached recipient after the stalled cap batch
  
  Silthus
  and
  claude
  committed
  a180df8
- test(cdp): show the timed-out read frees its pooled connection
  
  Silthus
  and
  claude
  committed
  d86b461
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  ebeb51b
- test(cdp): show a late authorization read frees the one pooled connection
  
  Silthus
  and
  claude
  committed
  15e67f1
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  387715c
- fix(cdp): bound the sandbox test route's SES bucket and test the sandbox frequency cap
  
  Silthus
  and
  claude
  committed
  fcf3ffb
- fix(cdp): give sandbox cap claims and sent marks a real deadline
  
  Silthus
  and
  claude
  committed
  133d0a1
- fix(cdp): refuse cap claims at once while abandoned ones wait for a client
  
  Silthus
  and
  claude
  committed
  971ec93
- chore(workflows): merge n3-sandbox-sender into n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  8318d9a
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  57c65df
- chore(cdp): share one stalling Valkey proxy between the sandbox tests
  
  Silthus
  and
  claude
  committed
  5e24bc1
- fix(cdp): charge a sandbox cap claim before its send, release it only when unsent
  
  Silthus
  and
  claude
  committed
  b4e96cd
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  8c90889
- fix(cdp): charge the sandbox cap claim before calling SES
  
  Silthus
  and
  claude
  committed
  f0e85f9
- fix(cdp): replay keyed code sends across versions and read a new sandbox sender from the primary
  
  Silthus
  and
  claude
  committed
  e9f065a
- chore(cdp): settle the stalled release acquisition in the caps test
  
  Silthus
  and
  claude
  committed
  81a7fc6
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  4aec545
- chore(cdp): pin the overlapping-attempt caps test to caps of one
  
  Silthus
  and
  claude
  committed
  cb1bea5
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  e6f61e2
- chore(cdp): prove overlapping sandbox sends on one claim send one email
  
  Silthus
  and
  claude
  committed
  bdb88ed
- fix(cdp): refuse sandbox reads and cap claims only after waiters gave up
  
  Silthus
  and
  claude
  committed
  1c815bd
- chore(cdp): name the fingerprint shape old pods compare instead of commenting it
  
  Silthus
  and
  claude
  committed
  bbab7cb
- fix(cdp): hold at most 8 pending acquisitions per pool for deadline calls
  
  Silthus
  and
  claude
  committed
  c117265
- chore(cdp): drain the stalled burst's acquisitions before the proxy stops
  
  Silthus
  and
  claude
  committed
  e2aba6d
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  d6e3b40
- fix(cdp): give the sandbox queue's SES bucket claim a real deadline
  
  Silthus
  and
  claude
  committed
  9c090dd
- fix(cdp): end sandbox read connections that stall in the startup handshake
  
  Silthus
  and
  claude
  committed
  f2fa7e6
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  3aa1057
- fix(cdp): keep an ended router's sandbox reads refused
  
  Silthus
  and
  claude
  committed
  d4a7817
- fix(cdp): keep the sandbox email worker off the fatal MX validation pool
  
  Silthus
  and
  claude
  committed
  cadfd7e
- fix(cdp): drop a stalled connection from the test send SES bucket pool
  
  Silthus
  and
  claude
  committed
  d16bc6c
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  d34dcbf
- chore(cdp): type the reference Valkey client in the sandbox worker test
  
  Silthus
  and
  claude
  committed
  487e656
Commits on Nov 11, 2026
- fix(cdp): recheck suspension and email pause when a sandbox code send runs
  
  Silthus
  and
  claude
  committed
  3045d26
- chore(devex): give team-growth the toolbar-launch scene
  
  Silthus
  and
  claude
  committed
  1fc7de0
- chore(cdp): assert the persisted job for a keyed retry, not the queue mock
  
  Silthus
  and
  claude
  committed
  2cd92ca
- fix(cdp): record sent and failed status rows for sandbox code sends
  
  Silthus
  and
  claude
  committed
  5829dd4
- fix(cdp): record the status of every terminal sandbox code send
  
  Silthus
  and
  claude
  committed
  436c200
- fix(cdp): record a sandbox code send's status before the handoff
  
  Silthus
  and
  claude
  committed
  c7f6807
- Merge master into workflows-sandbox/n1-route-sandbox-steps
  Silthus
  committed
  2ea53e8
- Merge master into workflows-sandbox/n2-delivery-policy
  Silthus
  committed
  771aeb0
- Merge workflows-sandbox/n1-route-sandbox-steps into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  e6f5433
- Merge workflows-sandbox/n2-delivery-policy into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  5032247
- fix(cdp): keep the sandbox email worker off a fatal frequency cap pool
  
  Silthus
  and
  claude
  committed
  bf612ec
- Merge workflows-sandbox/n3-sandbox-sender into workflows-sandbox/n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  77d3607
- Merge workflows-sandbox/n3-sandbox-sender into workflows-sandbox/n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  2153c3a
- test(cdp): prove the sandbox email worker process survives refused valkeys
  
  Silthus
  and
  claude
  committed
  ef3ac75
- Merge workflows-sandbox/n3-sandbox-sender into workflows-sandbox/n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  745d8df
- fix(cdp): resend a rerun of a sandbox code send on the sandbox sender
  
  Silthus
  and
  claude
  committed
  98187c5
- fix(cdp): keep an accepted sandbox send when a run is rerun
  
  Silthus
  and
  claude
  committed
  c022bce
- test(cdp): rerun sandbox code sends from stored lifecycle rows in clickhouse
  
  Silthus
  and
  claude
  committed
  1f7ef8c
- test(cdp): cover reruns of workflow sandbox email steps
  
  Silthus
  and
  claude
  committed
  12ac749
- Merge master into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  b1c4b98
- chore(cdp): observe sandbox email events at the analytics sdk
  
  Silthus
  and
  claude
  committed
  6e6a5cb
- Merge workflows-sandbox/n3-sandbox-sender into workflows-sandbox/n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  29d53f1
- chore(cdp): prove a redelivered sandbox job cannot resend after a lost SES reply
  
  Silthus
  and
  claude
  committed
  33d0f16
- Merge master into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  68029af
- fix(cdp): settle stalled sandbox sends and key unsubscribes to the delivered address
  
  Silthus
  and
  claude
  committed
  07d3d54
- chore(cdp): assert the stalled sandbox read by behavior, not duration
  
  Silthus
  and
  claude
  committed
  d2944c4
- chore(cdp): drop job-state assertions from the stalled sandbox read test
  
  Silthus
  and
  claude
  committed
  e120fc0
- fix(cdp): claim the shared ses slot only for admitted sandbox sends
  
  Silthus
  and
  claude
  committed
  32748e9
- fix(cdp): refund the daily caps of a sandbox send the ses bucket refuses
  
  Silthus
  and
  claude
  committed
  d68188c
- chore(cdp): hold the refund test to both daily caps
  
  Silthus
  and
  claude
  committed
  ce8fa95
- fix(cdp): honour the team email suspension and workflow pause in sandbox sends
  
  Silthus
  and
  claude
  committed
  94cd5d9
- fix(cdp): bound the sandbox suspension read and retry when it times out
  
  Silthus
  and
  claude
  committed
  4495d7c
Commits on Nov 12, 2026
- fix(cdp): refund both daily caps when SES confirms an editor test unsent
  
  Silthus
  and
  claude
  committed
  8cba180
- Merge workflows-sandbox/n3-sandbox-sender into workflows-sandbox/n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  10d1dd3
- fix(cdp): refuse a sandbox code send that carries file attachments
  
  Silthus
  and
  claude
  committed
  0738aaa
- Merge master into workflows-sandbox/n3-sandbox-sender
  Silthus
  committed
  2c15289
- chore(workflows): merge n3-sandbox-sender into n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  8e4c0b6
- chore(workflows): merge master into n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  ad02cf4
- fix(workflows): replay a keyed code send before refusing sandbox fields
  
  Silthus
  and
  claude
  committed
  976aa32
- test(workflows): deliver a scheduled code send on the sandbox sender
  
  Silthus
  and
  claude
  committed
  394a392
- test(workflows): run sandbox code sends through a fake cyclotron queue
  
  Silthus
  and
  claude
  committed
  b4daae4
- test(workflows): hold the fake cyclotron queue to its overwrite rules
  
  Silthus
  and
  claude
  committed
  378a61c
- chore(workflows): merge master into n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  9733479
Commits on Nov 13, 2026
- chore(cdp): merge master into n5-code-send-sandbox
  
  Silthus
  and
  claude
  committed
  64114f7
- fix(cdp): keep a sandbox send's sender and fingerprint shapes when a reschedule extends its key
  
  Silthus
  and
  claude
  committed
  6adb9f2
- fix(cdp): keep the queued key's fingerprint a string that older pods can read
  
  Silthus
  and
  claude
  committed
  b794f26
- chore(cdp): test a retry of a moved code send whose sender resolved differently
  
  Silthus
  and
  claude
  committed
  af5172f

Commits

Commits on Nov 9, 2026

Commits on Nov 10, 2026

Commits on Nov 11, 2026