feat(workflows): provision a managed sandbox email sender by Silthus · Pull Request #601 · Silthus/posthog

Silthus · 2026-10-27T06:30:59Z

Problem

Teams new to Workflows cannot send a first email until they verify a domain.
The planned sandbox sender lets them try a workflow first, but it needs a managed sender row and safe handling before any UI shows it.
This PR sits on feat(workflows): cap sandbox sends per project and recipient each day #604. The worker's member gate, sandbox route and daily caps land below it. Together they replace feat(workflows): provision a managed sandbox email sender #426 and the tenant-name part of feat(workflows): honor shared sandbox tenant pauses #453. Ticket: Silthus/personal#200.

Stack

Slice V1 of the sandbox sender rollout: a team sends a test email from the sandbox sender to verified members of its organization. Slice order: feat(workflows): restrict sandbox email to verified org members #594 → feat(workflows): route sandbox email through its fixed ses identity #599 → feat(workflows): cap sandbox sends per project and recipient each day #604 → feat(workflows): provision a managed sandbox email sender #601 → feat(workflows): show the managed sandbox sender in channels #602 → feat(workflows): test templates with the sandbox sender #628.
Base: workflows-sandbox-delivery/daily-caps (feat(workflows): cap sandbox sends per project and recipient each day #604). Lands after feat(workflows): cap sandbox sends per project and recipient each day #604 and every PR below it.
Production lines: 216 (tests, stories, generated types, migrations and docs excluded).
Rebuilt on 2026-10-28 on the current master, in the new slice order. The worker skip it used to sit on is gone: the worker route, member gate and caps now land below this PR. Docs updated to match.
Merged on 2026-10-31 with master's integrations SDK. The sender reads go through IntegrationManager.email.credentials and drop the sandbox provider in Python, because the SDK matches config keys only by equality. sandbox_sender.py uses the SDK's find and upsert, so it adds no direct model access.
V1 opens as 5 PRs, feat(workflows): restrict sandbox email to verified org members #594 to feat(workflows): show the managed sandbox sender in channels #602, to stay inside the stack-depth limit. feat(workflows): test templates with the sandbox sender #628 opens after feat(workflows): restrict sandbox email to verified org members #594 lands.
Lane gate on e4cecea49bd: ruff clean, Workflows, integrations and CDP sandbox suites 594 passed on a clean scratch database. Frontend typecheck has no errors in the stack's files (the remaining errors also occur on master), touched Jest suites 45 passed at the slice tip. Repo-wide mypy at the slice tip found no issues. Pre-push hogli ci:preflight --strict passed. Review: GPT-6.1 Sol (high) read the conflict resolutions of the master merge, no findings.
Proof on e4cecea49bd:
- Live run on 2026-10-31 at the slice tip 237a3ab1ce1: a real cdp-api and email worker, with SES, DNS and personhog stubbed. Member sends went out through the sandbox tenant and recorded sent. A non-member recorded recipient_unreachable, a send over the recipient cap frequency_capped, and a send with the switch off sending_suspended. ensure_sandbox_email_sender created the sender row once, reused it unchanged, and reloaded workers only after the organization name changed.
- Shadow diff: the setup step, verified domains and verified senders match the old ORM queries in 9 cases. The one difference is master's domain order, oldest row first.
- Proof gate: fails only on the ci gap (exit 3). Fork CI cannot run Semgrep or the Depot jobs, and the lane check counts the Node layers below, because it diffs against master. This PR's own diff has no Node file.

Impact

Pays into Workflows activation (first billed action after a team creates its first workflow), through the sandbox funnel step. This PR alone moves nothing a user sees. It makes the sandbox row safe to exist.

Merge Danger

Caution

🔴 Merge risk: high · two-way door (merge-risk rubric)

The email sender API, the default-sender setting and the sender pickers now special-case the sandbox row. A bug there could block own senders for every project, on the path to workflow email delivery.
Limited by: each check matches only provider: sandbox, which exists only after a flagged API call; the worker's member gate, route and caps land first (feat(workflows): restrict sandbox email to verified org members #594 to feat(workflows): cap sandbox sends per project and recipient each day #604); API tests cover each blocked action and the own-sender paths.

Changes

With workflows-sandbox-sender on and three settings present, POST /api/projects/:id/integrations/email_sandbox_sender/ creates or refreshes one managed email sender for the project.
The sender sends from a PostHog address, under the organization name ("Acme via PostHog"), and is saved as verified.
Users cannot verify, edit or delete it, read its domain status, make it the project default, or add their own sender on the sandbox domain. Each returns 400 "The sandbox sender is managed by PostHog."
The workflow email step picker and the template test-send picker leave it out. A project with only the sandbox sender sees "No email senders configured yet".
Sends through it take the worker's sandbox route, which lands below this PR in its own Node PRs.
Setup status, data suggestions, the default sender and the Channels email summary ignore it.
SES_SANDBOX_TENANT_NAME joins the required settings, so the endpoint stays unavailable until the shared tenant is configured.
Mechanical: generated API client, facade exports, and the internal sending doc.

Production lines (tests, generated types, docs excluded): 220, from git diff --numstat against #604.

How did you test this code?

Live run on the slice tip

Live run of the V1 tip 1c08de0b9b4 on a PostHog preview. Stubs: a local SES endpoint that records each call, and example.com seeded as a valid MX domain.
Channels created the sandbox sender. A test send to a verified member was accepted and reached SES with the sandbox tenant, its configuration set, the fixed From address and the footer.
A test send to an address outside the organization was skipped before SES.
Shadow diff reused from 9b5065fbbfa: this rebuild changed only the PR's docs lines and its base.

Lane gate on the head, run on a Fleet box:

Typecheck: frontend (pnpm --filter=@posthog/frontend typescript:check) reports no errors on the stack head.
Python types (uv run mypy --cache-fine-grained .): no issues.
Pre-push hogli ci:preflight --strict: 0 failures (ruff, oxfmt, size, complexity, semgrep devex).
Backend: posthog/api/test/test_integration.py, posthog/models/test/integration/, and the Workflows sandbox, setup, config and suggestion suites: 1214 passed. The sender suites passed again after the review fixes: 483 passed on a fresh scratch test database.
Frontend: EmailTemplater, lib/integrations and the Workflows Channels suites: 316 passed.
CI: not run. Fork CI cannot run because the fork lacks the GitHub App secret. The mix-lanes check on the fork compares each layer with master, so it flags this layer until the Node PRs below it land.

Test rationale:

test_sandbox_sender.py: provisioning, the 404 for each missing setting (now including the tenant name), API-key scope, and that users cannot change the managed row. Carried from feat(workflows): provision a managed sandbox email sender #426 with the tenant-name case added. Its status case returned 500 before the review fix.
messageTemplateTestSendLogic.test.ts: the default test-send sender skips a sandbox row listed first. It failed before the review fix.
EmailTemplater.test.tsx: the sandbox row is absent from both pickers, and a sandbox-only project reads as having no sender. Extends the existing picker test.
channelSummary.test.ts, defaultEmailSender.test.ts: the sandbox row neither counts as a set-up email channel nor becomes the default sender.

Proof (fleet proof, on a preview of the stack head, which carries this head's files unchanged):

Live run: POST email_sandbox_sender creates the row "Hogflix via PostHog"; email/status on it returns 400 "The sandbox sender is managed by PostHog.".
Shadow diff, master against the stack head, with the same stored rows: email/status on the sandbox row goes from a 500 error page to that 400, and making it the project default goes from 200 to 400. The integration list and detail, own-sender status, setup status, reputation and every own-sender save are unchanged. The worker change belongs to fix(cdp): skip email sends through the sandbox sender in the worker #611, the save changes to feat(workflows): validate sandbox sender use at save time #603.
Prod shape: gap, accepted under a standing rule until read-only production access is available.
Review: round 1 by GPT-6.1 Sol, three findings. The test-send picker and the email/status 500 are fixed here. The setup guide count is fixed in feat(workflows): show the managed sandbox sender in channels #602, where the row first appears. The final read found nothing.

Release status

This change is behind a feature flag and is not available to users

Docs update

docs/internal/workflows-email-sending-tiers.md names the tenant setting and the worker skip.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code, Claude Opus 5.5 (carving and new code); review by GPT-6.1 Sol

Carved from feat(workflows): provision a managed sandbox email sender #426 (cherry-picked, conflicts resolved against master's new email/status endpoint), plus the tenant-name check from feat(workflows): honor shared sandbox tenant pauses #453.
New in this PR: the picker filters and the email/status guard. The worker skip it once sat on (fix(cdp): skip email sends through the sandbox sender in the worker #611) is closed: the delivery stack's sandbox case lands below this PR instead.
Skills: tdd, writing-tests, writing-user-facing-copy, writing-pr-descriptions, pr-description, merge-risk, qa-swarm design pass.

Decisions

Question	Answer	Who	Where
Slice order of the sandbox sender stack	Option B: the Channels row moves into V1 so a team has a sender to test from; V1's worker PRs land first	👍 Accepted default	map
Sends through the sandbox row before its delivery route exists	The worker skips them with a logged reason and `success: false`, instead of falling through the provider switch as a success	🤖 Agent	Silthus/personal#200 (resolution)
Where the worker skip lands	Nowhere: #611 is closed, and the worker's sandbox route lands below this PR	👍 Accepted default	map
Setup guide count of the sandbox row (review round 1)	Fixed in #602, where Channels first provisions the row	🤖 Agent	Silthus/personal#200 (resolution)
Tenant setting for the endpoint	`SES_SANDBOX_TENANT_NAME` is required, taken from #453 into the first PR	🤖 Agent	Silthus/personal#200 (resolution)
PR size of the Channels slice	Split into this PR and the Channels row PR to stay under about 400 production lines	🤖 Agent	Silthus/personal#200 (resolution)

Involvement: no grilling rounds; one design pass (GPT-6.1 Sol); one review round and one final read (GPT-6.1 Sol); proof captured.

🤖 Generated with Claude Code

github-actions · 2026-10-27T06:35:00Z

🤖 CI report

⚠️

Complexity (TypeScript) — 3 functions above the limit (max 26)

Cyclomatic complexity above the limit in changed typescript files (10 for production files, 15 for test files). Warn only: worth simplifying when you next touch these functions.

Function	Location	Complexity	Limit
`getIntegrationNameFromKind`	`frontend/src/lib/integrations/utils.ts:147`	26	10
`NativeEmailTemplaterForm`	`frontend/src/scenes/hog-functions/email-templater/EmailTemplater.tsx:582`	15	10
`NativeEmailIntegrationChoice`	`frontend/src/scenes/hog-functions/email-templater/EmailTemplater.tsx:276`	13	10

⚠️

Bundle size — 🔺 +119 B (+0.0%)

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 75.13 MiB · 🔺 +119 B (+0.0%)

No file changed by more than 1000 B.

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.02 MiB · 25 files	no change	`█████████░` 88.8% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	2.99 MiB · 622 files	no change	`██████████` 98.5% of 3.03 MiB
authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	6.46 MiB · 2,235 files	🔺 +80 B (+0.0%)	`██████████` 95.5% of 6.77 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	9.97 MiB · 3,728 files	🔺 +80 B (+0.0%)	`██████████` 99.5% of 10.01 MiB
today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	6.71 MiB · 2,337 files	🔺 +80 B (+0.0%)	`██████████` 96.4% of 6.96 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	7.28 MiB · 2,426 files	🔺 +80 B (+0.0%)	`██████████` 96.7% of 7.53 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	9.40 MiB · 3,500 files	🔺 +80 B (+0.0%)	`██████████` 98.0% of 9.59 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	10.36 MiB · 3,767 files	🔺 +80 B (+0.0%)	`██████████` 95.6% of 10.83 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	7.99 MiB · 2,968 files	🔺 +80 B (+0.0%)	`████████░░` 84.4% of 9.47 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayShell.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayContextPanelFloating.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodaySidePanel.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayTopBar.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/todayRailItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/charts/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.7 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
4.0 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.7 KiB	`src/index.tsx`
1.7 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.7 KiB	`src/lib/utils/bootTiming.ts`
1.2 KiB	`src/RootErrorBoundary.tsx`
949 B	`src/scenes/ChunkLoadErrorBoundary.tsx`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
86.6 KiB	`src/lib/api.ts`
67.9 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
27.0 KiB	`../node_modules/.pnpm/tailwind-merge@2.2.2/node_modules/tailwind-merge/dist/bundle-mjs.mjs`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
86.6 KiB	`src/lib/api.ts`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
144.1 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`
86.6 KiB	`src/lib/api.ts`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
144.1 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
144.1 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
187.9 KiB	`src/queries/validators.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
144.1 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
325.0 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
316.5 KiB	`../node_modules/.pnpm/posthog-js@1.443.0_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
286.4 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
239.9 KiB	`../packages/quill/packages/quill/dist/index.js`
217.5 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.8 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
102.9 KiB	`src/products.tsx`
94.5 KiB	`../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js`
92.5 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of PostHog#32479}

✅ Toolbar bundle — eager 2.33 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.33 MiB · 19 files	no change	`████░░░░░░` 40.8% of 5.72 MiB
Deferred (lazy)	2.11 MiB · 42 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
941.7 KiB	`dist/toolbar/toolbar-app-UY2NCWYC.css`
695.8 KiB	`dist/toolbar/chunk-chunk-OU5JIGRB.js`
261.2 KiB	`dist/toolbar/chunk-chunk-T5DKNJQU.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FDH2IBXT.js`
130.4 KiB	`dist/toolbar/chunk-chunk-H2B6C5E4.js`
75.7 KiB	`dist/toolbar/toolbar-app-SI4MRMOT.js`
69.0 KiB	`dist/toolbar/chunk-chunk-TSAL54PB.js`
33.8 KiB	`dist/toolbar/chunk-chunk-FR2SFTP5.js`
21.7 KiB	`dist/toolbar/chunk-chunk-SFGY4JKG.js`
6.8 KiB	`dist/toolbar/chunk-chunk-DV7IWQNF.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +5.4 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 966.34 MiB · 🔺 +5.4 KiB (+0.0%)

ℹ️ MCP UI apps size — 35 app(s), 29120.8 KB JS

Built size of each MCP UI app (main.js + styles.css).

App	JS	CSS
debug	844.3 KB	211.6 KB
explain-chart	1117.7 KB	211.6 KB
action	767.7 KB	211.6 KB
action-list	835.3 KB	211.6 KB
cohort	766.7 KB	211.6 KB
cohort-list	834.3 KB	211.6 KB
email-template	766.6 KB	211.6 KB
error-details	771.6 KB	211.6 KB
error-issue	768.9 KB	211.6 KB
error-issue-list	836.8 KB	211.6 KB
experiment	832.4 KB	211.6 KB
experiment-list	836.1 KB	211.6 KB
experiment-results	834.3 KB	211.6 KB
feature-flag	834.7 KB	211.6 KB
feature-flag-list	838.4 KB	211.6 KB
feature-flag-testing	770.0 KB	211.6 KB
inline-scan	767.2 KB	211.6 KB
insight-actors	833.8 KB	211.6 KB
llm-costs	831.1 KB	211.6 KB
session-recording	769.0 KB	211.6 KB
survey	768.3 KB	211.6 KB
survey-global-stats	831.1 KB	211.6 KB
survey-list	836.0 KB	211.6 KB
survey-stats	831.1 KB	211.6 KB
trace-span	767.1 KB	211.6 KB
trace-span-list	835.2 KB	211.6 KB
vision-observation-list	834.4 KB	211.6 KB
workflow	767.1 KB	211.6 KB
workflow-list	834.7 KB	211.6 KB
workflow-setup-status	766.7 KB	211.6 KB
query-results	1089.6 KB	211.6 KB
render-ui	1193.5 KB	211.6 KB
visual-review-snapshots	771.6 KB	211.6 KB
workflow-data-suggestions	769.4 KB	211.6 KB
workflow-sending-rules	768.1 KB	211.6 KB

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit e7d8226)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 5da89ec)

…faults Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 525bfee)

…status Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 53c404e)

…oduct/sender-row # Conflicts: # posthog/api/team/team_config.py # products/workflows/backend/services/data_suggestions/team_context.py # products/workflows/backend/services/email_health.py # products/workflows/backend/services/setup_status.py # products/workflows/backend/services/transactional_email_workflows.py

Silthus · 2026-11-02T07:31:35Z

Moved to PostHog#127152.

Silthus self-assigned this Oct 27, 2026

Silthus mentioned this pull request Oct 27, 2026

fix(cdp): skip email sends through the sandbox sender in the worker #611

Closed

Silthus changed the base branch from master to workflows-sandbox-product/worker-skip October 27, 2026 08:46

Silthus and others added 5 commits October 28, 2026 09:28

feat(workflows): provision a managed sandbox email sender

356ab57

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit e7d8226)

feat(workflows): offer the sandbox sender only with its ses tenant set

d852f11

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 5da89ec)

feat(workflows): keep the sandbox sender out of the email step and de…

4507903

…faults Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

chore(workflows): check only the sandbox team in the tenant sweep test

5fcc03f

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 525bfee)

fix(workflows): keep the sandbox sender out of test sends and domain …

a403ef8

…status Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 53c404e)

Silthus force-pushed the workflows-sandbox-product/sender-row branch from 9b5065f to a403ef8 Compare October 28, 2026 10:00

Silthus changed the base branch from workflows-sandbox-product/worker-skip to workflows-sandbox-delivery/daily-caps October 28, 2026 10:00

Silthus closed this Nov 2, 2026

Silthus mentioned this pull request Nov 2, 2026

feat(workflows): provision a managed sandbox email sender PostHog/posthog#127152

Closed

Navigation Menu

Repository navigation

feat(workflows): provision a managed sandbox email sender - #601

feat(workflows): provision a managed sandbox email sender#601
Silthus wants to merge 6 commits into
workflows-sandbox-delivery/daily-capsfrom
workflows-sandbox-product/sender-row

Silthus commented Oct 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 27, 2026 •

edited

Loading

Uh oh!

Silthus commented Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Silthus commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Stack

Impact

Merge Danger

Changes

How did you test this code?

Live run on the slice tip

Release status

Docs update

🤖 Agent context

Decisions

Uh oh!

github-actions Bot commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

Uh oh!

Silthus commented Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Silthus commented Oct 27, 2026 •

edited

Loading

github-actions Bot commented Oct 27, 2026 •

edited

Loading