feat(workflows): provision a managed sandbox email sender by Silthus · Pull Request #426 · Silthus/posthog

Silthus · 2026-10-12T10:16:26Z

Problem

Workflow builders need a PostHog-managed sender to try email before verifying their own domain.

Supersedes PostHog#111368 (left open as the original draft)

Stack: layer 1 of 12, stacked on master. Next: #428.

This fork PR moves to an upstream PostHog/posthog PR after review.

Warning

🟡 Merge risk: medium · one-way door (merge-risk rubric)

The endpoint exposes a new API contract and creates an integration that persists after a code revert. Project membership, integration:write, and a default-off feature flag limit access.
Lifecycle guards keep users from changing the shared identity; endpoint and lifecycle tests cover those boundaries.
Deploy order: rows from this layer need workers with feat(workflows): route sandbox email through its fixed ses identity #428. A worker without it reports a sandbox send as sent and never delivers it. Turn the flag on only after feat(workflows): route sandbox email through its fixed ses identity #428 is deployed, and do not roll workers back below feat(workflows): route sandbox email through its fixed ses identity #428 while sandbox rows exist.

Changes

AI workflow suggestions do not pick the sandbox sender as a draft's sender, and do not count it as a ready sender.
The provisioning facade returns an immutable ID/created DTO; the core API loads the scoped integration for serialization.
Projects can provision one managed sandbox sender and refresh its organization display name through the integrations API.
Users cannot edit, verify, or remove the managed sender, or register their own sender on its domain.
Setup status and the project's default email sender ignore the managed sender. A new transactional email cannot use it as its sender.
The reputation breakdown excludes the shared sender. Existing SES-only lifecycle filters already protect its shared identity.
The regenerated API client is mechanical. Sender selection and delivery follow in later layers.

Before:

flowchart LR
    Project[Project] --> Domain[Own sending domain] --> SES[SES verification] --> Integration[Email integration]
    classDef phYellow fill:#f9bd2b,stroke:#f9bd2b,color:#000;
    classDef phGray fill:#e5e7eb,stroke:#c7ccd1,color:#000;
    classDef phRed fill:#f54e00,stroke:#f54e00,color:#fff;
    class Project phYellow;
    class Domain,Integration phGray;
    class SES phRed;

After:

flowchart LR
    Project[Project] --> API[Ensure sender API] --> Gate[Flag and settings] --> Integration[Managed email integration]
    classDef phYellow fill:#f9bd2b,stroke:#f9bd2b,color:#000;
    classDef phGray fill:#e5e7eb,stroke:#c7ccd1,color:#000;
    classDef phRed fill:#f54e00,stroke:#f54e00,color:#fff;
    classDef phBlue fill:#1d4aff,stroke:#1d4aff,color:#fff;
    class Project phYellow;
    class API phRed;
    class Gate phBlue;
    class Integration phGray;

How did you test this code?

Current evidence, 2026-10-24, head 5a5be199b92.

Owed proofs:

Live run: rerun at the stack tip 8ac8853cc82, which contains this layer. The stack's cdp-api sent through the workflow test-run endpoint to a local SES fake that records each request. 9 of 9 cases pass. 12 of 13 recorded cases match the run at fa33d78fb36. Case 2c (an unverified member on To) now shows the verify-your-email guidance with reason recipient_unverified, and makes no SES request. For this layer: case 1 sends through the sandbox row this layer provisions, and case 5 shows that rows in master's shape and in this stack's shape route the same way.
Cross-version: carried from the stack tip fa33d78fb36, because round 4 does not touch the own-sender path or the base worker. Fork master 448d802 against that tip. A base worker that meets a sandbox row logs "sent" and makes no SES request. The deploy-order decision in feat(workflows): provision a managed sandbox email sender #426's merge risk covers it: workers with feat(workflows): route sandbox email through its fixed ses identity #428 deploy before the flag turns on, and no worker rolls back below feat(workflows): route sandbox email through its fixed ses identity #428 while sandbox rows exist.
Prod shape: gap, accepted by Michael on 2026-10-24 until production read access on 2026-11-02. Until then it is unknown how many email integration rows take each changed branch.

Changes in this layer since the 2026-10-19 heads (restacked onto fork master 448d802: facade and data-suggestion import lists only; no behavior change):

Round 1 fixed: setup status no longer counts the sandbox row as a connected email channel (test_a_new_project_starts_at_the_channel, sandbox case).
Round 1 fixed: the team config API rejects the sandbox row as the default email sender (test_patch_rejects_default_email_sender, sandbox case).
Round 2 fixed: a new transactional email treats the sandbox row as unavailable when it is passed as the explicit sender (test_a_new_transactional_email_needs_a_verified_sender_of_its_own_2_sandbox_sender, red then green).
Final read: GPT-6.1 Sol read the G1 layer range-diffs and found nothing.
Round 4 fixed (R2-11): Django reads SES_SANDBOX_FROM_ADDRESS, the setting the worker sends from, so the From the UI shows is the From the worker uses. The separate Django From setting is gone. The worker keeps its fixed From, so its SES identity check is unchanged (test_sandbox_sender.py settings key and "from address unset" cases, and test_sandbox_sender_lifecycle.py, red with 12 failed, then green).
Final read 2: GPT-6.1 Sol read the round 4 range-diffs per group and found nothing.

Local gate at the stack tip 8ac8853cc82, shared by every layer

Python suites for workflows, messaging, CDP validation and integrations: 3007 passed.
Node CDP messaging, managers, rate limiter, hogflows and cdp-api: 42 suites, 1157 passed.
Frontend Jest for the 17 changed suites: 292 passed.
mypy: clean. Node tsc and frontend tsgo: clean.
ruff, oxfmt, prettier, eslint and oxlint: clean on the 15 files changed in round 4.
Per-layer suites during the round 4 fold: feat(workflows): restrict sandbox email to verified org members #434 Node 201 passed, feat(workflows): cap sandbox sends and refund ses throttles #441 222, feat(workflows): test templates with the sandbox sender #451 frontend 27, feat(workflows): honor shared sandbox tenant pauses #453 Python 93 and Node 234, feat(workflows): offer a switch from the sandbox sender #456 banner 15.
Review: round 1, round 2, final read 1 and final read 2 per group. Every finding is fixed or recorded as a follow-up. Both final reads found nothing.

Test seams: integration provisioning HTTP responses, protected sender lifecycle, and the sender checks in setup status, the team config API and transactional email resolution.

Test rationale: Existing provisioning and lifecycle cases verify that the facade contract still produces a project-scoped integration. No new DTO getter tests are needed.

Gaps: real AWS SES delivery and the AWS-side tenant pause (every proof uses a local SES fake or an unreachable SES), clustered Valkey, the production data shape (prod-shape gap until production read access on 2026-11-02), and fork CI, which fails during setup: path selection fails without a GitHub App client ID, and the Security aggregate rejects its fork-skipped path-filter job. Application CI is a verification gap.

Earlier evidence (superseded heads)

Round 3 heads, 2026-10-23. This layer's head: e223673206b. Stack tip fa33d78fb36.

Live run: run at the stack tip fa33d78fb36, which contains this layer. The stack's cdp-api sent through the workflow test-run endpoint to a local SES fake that records each request. 9 of 9 cases pass, identical to the earlier run. For this layer: case 1 sends through the sandbox row this layer provisions, and case 5 shows that rows in master's shape and in this stack's shape route the same way.
Local gate at fa33d78fb36: Python 3007 passed; Node CDP 42 suites, 1157 passed; email service suites at the final heads of feat(workflows): restrict sandbox email to verified org members #434, feat(workflows): cap sandbox sends and refund ses throttles #441, feat(workflows): test templates with the sandbox sender #451 and feat(workflows): honor shared sandbox tenant pauses #453 passed; frontend Jest 17 changed suites, 290 passed; mypy, Node tsc and frontend tsgo clean; ruff, oxfmt, oxlint, prettier and eslint clean on the files changed since round 2. Final read 1 found nothing.

Whole-stack QA swarm, 2026-10-19. Reviewed tip cfee7e148ae. This layer's head: a9cc60d28cb.

Live run at b9bd346ed0e (this stack's cdp-api against a local SES fake, workflow test-run endpoint): a sandbox send to a verified member went out from the fixed identity through the sandbox tenant and configuration set. The step's From name, From address and Reply-To were ignored with a log line. A non-member on CC and an unverified member were blocked with the clear message. A paused tenant state skipped sandbox sends while own-sender sends continued.
Shadow diff: an own-sender send produced the same SES request and the same stored message on master and on this stack.
Cross-version: a worker on master reports a sandbox send as sent without calling SES. See the deploy order in feat(workflows): provision a managed sandbox email sender #426's merge risk.
Checks at the tip (Node suites at 1a0fe3663c2; later fixes touch no Node code): Node CDP messaging, members and rate limiter suites (including email-tracking.service.test.ts, which now runs), the cdp-api suite, the Python sandbox, tenant, tier, reputation and validation suites, the frontend Jest suites of this stack, ruff, and the strict pre-push preflight: pass.
Fixed in this layer: AI workflow suggestions skip the sandbox sender when they choose a draft's sender. The new "only the sandbox sender" case failed before the fix.
Gaps: real AWS SES delivery, clustered Valkey, and the production data shape (no production read access yet). Fork CI still fails during setup.

Rebased onto master 734468db6f9 (2026-10-19), head b7246bfa6b9.

Drift: Master added list_owned_workflow_health to the workflows facade imports.
Adapted: Kept both facade imports. No behavior change.
This layer: test_sandbox_sender.py, test_sandbox_sender_lifecycle.py, and test_email_reputation.py at this layer: 46 passed on a fresh test database. hogli build:openapi at the tip leaves products/integrations/frontend/generated/api.ts unchanged.
Gaps at modernize time: email-tracking.service.test.ts did not run then. It runs now; see the QA swarm block above. Fork CI still fails during setup, as noted below. Real AWS delivery and clustered Valkey remain unchecked.

Checks at the stack tip

Stack tip b9bd346ed0e (#456), shared by every layer:

Python, 354 passed: sandbox sender, sender validation, CDP validation, reputation, SES tenant state and events, sending tier.
Node CDP messaging, managers, and rate limiter: 17 suites, 599 passed.
Frontend Jest, 37 suites, 487 passed. Five suites timed out under host load in the batch run and passed when rerun alone.
Frontend tsgo: no errors. Node tsgo: no errors in CDP. The 23 errors it reports are all in session replay files that need the unbuilt Rust @posthog/replay-anonymizer module.
ruff, oxfmt, oxlint, prettier, eslint, product:lint (workflows, cdp), IDOR coverage, hogli build:openapi (no diff), and the strict pre-push preflight: pass.
Review: GPT-6.1 Sol read every conflict resolution in the stack and found no issues.

Observed targeted verification after QA fixes

test_sandbox_sender.py: 15 passed
test_sandbox_sender_lifecycle.py: 3 passed
product:lint workflows: All checks passed

Observed combined-stack gate

Node.js typecheck and build: exit 0
Frontend typecheck and build: exit 0
Success: no issues found in 23388 source files
product:lint workflows: All checks passed
ci:preflight --strict: failures 0

👉 Stay up-to-date with PostHog coding conventions for a smoother review.

Release status

This change is behind a feature flag and is not available to users

Docs update

Keep workflows-sandbox-sender off until the complete sending stack is deployed. Existing sender selectors can expose provisioned rows before routing support lands.

The existing workflow email sending tiers document now describes managed sender provisioning and its settings.

Important

Rollout: set SES_SANDBOX_FROM_ADDRESS once, with the same value on Django web, Celery and the worker. Django stores that address on the sandbox row and shows it in the UI, and the worker sends from it. The address must belong to the shared SES identity.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Decisions

Question	Answer	Who	Where
One sandbox From address in two settings (R2-11)	Django and the worker read one setting, `SES_SANDBOX_FROM_ADDRESS`, so the address the UI shows is the address the worker sends from. Replaces the earlier call to set two settings to one value at rollout	👤 Human	decision comment
Prod-shape proofs before production read access	Accepted as gaps until production read access on 2026-11-02	👤 Human	decision comment
Deploy order for sandbox rows	Workers with #428 before the flag turns on, and no worker rollback below #428 while rows exist. Alternative: a default branch in the worker's provider switch, which cannot cover a rollback to master	🤖 Agent	QA handoff
Seam for the one From setting	Django reads the env var the worker already reads, and the separate Django From setting is gone. The worker keeps its fixed From, so its SES identity check is unchanged. Alternative: Django passes the stored address to the worker, which changes the send path	🤖 Agent	decision comment

Involvement: restack onto fork master 448d802 on 2026-10-23; round 1 with GPT-6.1 Sol lanes plus Claude Opus 5.5 fresh eyes for group G1; round 2 on the fix diff; final read 1 by GPT-6.1 Sol per group, with no findings; proofs captured; final read 2 by GPT-6.1 Sol on the round 4 decisions, with no findings; the round 4 live run and a UI walk of the two changed surfaces. Before that: the 2026-10-19 whole-stack QA swarm and the modernize rebase (see Earlier evidence). No review bots run on the fork.

Agent: Codex with GPT-6.1 Sol (gpt-6.1-sol) built the original layers, orchestrated by Claude Code with Claude Opus 5.5 (claude-opus-5-5). Restack, review fixes and this description refresh: Claude Opus 5.5 (claude-opus-5-5). Review: GPT-6.1 Sol (gpt-6.1-sol). Fresh eyes: Claude Opus 5.5 (claude-opus-5-5).

Skills: tdd, pr, stacking-prs, writing-pr-descriptions, merge-risk, improving-drf-endpoints, writing-tests, writing-dataclasses, running-ci-preflight, writing-voice, and qa-swarm. The description refresh used pr-description, writing-pr-descriptions, writing-voice and merge-risk.

The rebuild uses public source from the original draft. Current master moves reputation reads into the email-health service and requires facade errors in contracts.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Silthus · 2026-10-24T13:12:21Z

Note

🤖 Claude Opus 5.5 responding on behalf of Michael

Decision lines for this PR. The Decisions table in the description links each row here.

👤 One sandbox From address in two settings (R2-11) Django and the worker read one setting, SES_SANDBOX_FROM_ADDRESS, so the address the UI shows is the address the worker sends from. Replaces the earlier call to set two settings to one value at rollout.
👤 Prod-shape proofs before production read access Accepted as gaps until production read access on 2026-11-02.
🤖 Seam for the one From setting Django reads the env var the worker already reads, and WORKFLOWS_SANDBOX_SENDER_FROM_ADDRESS is gone. The worker keeps its fixed From, so its SES identity check is unchanged. Alternative: Django passes the stored address to the worker, which changes the send path.

github-actions · 2026-10-24T13:18:02Z

🤖 CI report

✅ Complexity (TypeScript) — clean

Cyclomatic complexity above the limit in changed typescript files (10 for production files, 15 for test files). Warn only: worth simplifying when you next touch these functions.

✅ Bundle size — no change

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 76.03 MiB · no change

No file changed by more than 1000 B.

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

⚠️

Eager graph — 2 over budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.01 MiB · 24 files	no change	`█████████░` 88.6% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	2.94 MiB · 620 files	no change	`██████████` 96.9% of 3.03 MiB
🟡 authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	7.65 MiB · 2,633 files	no change	`██████████` 102.1% of 7.50 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	9.68 MiB · 3,703 files	no change	`██████████` 96.7% of 10.01 MiB
🟡 today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	8.06 MiB · 2,977 files	no change	`██████████` 104.1% of 7.74 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	7.90 MiB · 2,706 files	no change	`█████████░` 88.1% of 8.96 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	9.15 MiB · 3,495 files	no change	`██████████` 95.4% of 9.59 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	10.01 MiB · 3,713 files	no change	`█████████░` 92.4% of 10.83 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	8.22 MiB · 3,075 files	no change	`█████████░` 86.8% of 9.47 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.5 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
3.9 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.4 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.4 KiB	`src/index.tsx`
1.3 KiB	`src/RootErrorBoundary.tsx`
1.3 KiB	`src/lib/utils/bootTiming.ts`
912 B	`../node_modules/.pnpm/ieee754@1.2.1/node_modules/ieee754/index.js`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
69.4 KiB	`src/lib/lemon-ui/icons/icons.tsx`
38.7 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
33.9 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
29.4 KiB	`src/scenes/scenes.ts`
26.9 KiB	`src/lib/constants.tsx`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
183.2 KiB	`src/queries/validators.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
143.2 KiB	`../packages/quill/packages/primitives/dist/index.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
321.9 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
316.1 KiB	`../node_modules/.pnpm/posthog-js@1.438.18_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
286.8 KiB	`src/taxonomy/core-filter-definitions-by-group.json`
238.5 KiB	`../packages/quill/packages/quill/dist/index.js`
220.9 KiB	`../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
153.7 KiB	`../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
106.3 KiB	`src/products.tsx`
98.9 KiB	`src/lib/api.ts`
93.3 KiB	`../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of PostHog#32479}

✅ Toolbar bundle — eager 2.29 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.29 MiB · 18 files	no change	`████░░░░░░` 39.9% of 5.72 MiB
Deferred (lazy)	2.11 MiB · 40 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
899.3 KiB	`dist/toolbar/toolbar-app-T6M4L4D7.css`
691.4 KiB	`dist/toolbar/chunk-chunk-DDSP4M6B.js`
260.7 KiB	`dist/toolbar/chunk-chunk-HRRIOF34.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FDH2IBXT.js`
130.4 KiB	`dist/toolbar/chunk-chunk-IT6XUU73.js`
74.8 KiB	`dist/toolbar/toolbar-app-YPZZ2PIS.js`
69.0 KiB	`dist/toolbar/chunk-chunk-TSAL54PB.js`
35.6 KiB	`dist/toolbar/chunk-chunk-CGDYYVIR.js`
21.7 KiB	`dist/toolbar/chunk-chunk-PM4VBMO5.js`
6.8 KiB	`dist/toolbar/chunk-chunk-DV7IWQNF.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +1.9 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 1020.63 MiB · 🔺 +1.9 KiB (+0.0%)

ℹ️ MCP UI apps size — 34 app(s), 27964.5 KB JS

Built size of each MCP UI app (main.js + styles.css).

App	JS	CSS
debug	844.2 KB	209.0 KB
action	767.6 KB	209.0 KB
action-list	835.3 KB	209.0 KB
cohort	766.6 KB	209.0 KB
cohort-list	834.2 KB	209.0 KB
email-template	766.5 KB	209.0 KB
error-details	771.5 KB	209.0 KB
error-issue	768.0 KB	209.0 KB
error-issue-list	835.8 KB	209.0 KB
experiment	832.4 KB	209.0 KB
experiment-list	836.0 KB	209.0 KB
experiment-results	834.9 KB	209.0 KB
feature-flag	834.6 KB	209.0 KB
feature-flag-list	838.4 KB	209.0 KB
feature-flag-testing	769.9 KB	209.0 KB
inline-scan	767.1 KB	209.0 KB
insight-actors	833.7 KB	209.0 KB
llm-costs	831.0 KB	209.0 KB
session-recording	768.9 KB	209.0 KB
survey	768.2 KB	209.0 KB
survey-global-stats	831.1 KB	209.0 KB
survey-list	835.9 KB	209.0 KB
survey-stats	831.0 KB	209.0 KB
trace-span	767.0 KB	209.0 KB
trace-span-list	835.1 KB	209.0 KB
vision-observation-list	834.3 KB	209.0 KB
workflow	767.0 KB	209.0 KB
workflow-list	834.6 KB	209.0 KB
workflow-setup-status	766.7 KB	209.0 KB
query-results	1086.5 KB	209.0 KB
render-ui	1161.5 KB	209.0 KB
visual-review-snapshots	771.5 KB	209.0 KB
workflow-data-suggestions	769.3 KB	209.0 KB
workflow-sending-rules	768.0 KB	209.0 KB

Silthus · 2026-10-27T11:11:29Z

Replaced by the re-sliced fork stack: #601 and #602. Tracked in Silthus/personal#71.

Silthus self-assigned this Oct 12, 2026

Silthus added this pull request to stack #429 October 12, 2026 10:38

Silthus force-pushed the workflows-sandbox/sender-row branch from 9280ce3 to b7246bf Compare October 19, 2026 10:58

Silthus mentioned this pull request Oct 19, 2026

feat(workflows): route sandbox email through its fixed ses identity #428

Closed

Silthus force-pushed the workflows-sandbox/sender-row branch from b7246bf to a9cc60d Compare October 19, 2026 13:36

Silthus force-pushed the workflows-sandbox/sender-row branch from a9cc60d to e223673 Compare October 23, 2026 16:26

feat(workflows): provision a managed sandbox email sender

5a5be19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Silthus force-pushed the workflows-sandbox/sender-row branch from e223673 to 5a5be19 Compare October 24, 2026 13:12

This was referenced Oct 24, 2026

Sandbox sender stack: remaining follow-ups #563

Open

feat(workflows): provision a managed sandbox email sender #601

Draft

fix(cdp): skip email sends through the sandbox sender in the worker #611

Closed

Silthus closed this Oct 27, 2026

Navigation Menu

Repository navigation

feat(workflows): provision a managed sandbox email sender - #426

feat(workflows): provision a managed sandbox email sender#426
Silthus wants to merge 1 commit into
masterfrom
workflows-sandbox/sender-row

Silthus commented Oct 12, 2026 •

edited

Loading

Uh oh!

Silthus commented Oct 24, 2026

Uh oh!

github-actions Bot commented Oct 24, 2026 •

edited

Loading

Uh oh!

Silthus commented Oct 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Silthus commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

How did you test this code?

Release status

Docs update

🤖 Agent context

Uh oh!

Silthus commented Oct 24, 2026

Uh oh!

github-actions Bot commented Oct 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

Uh oh!

Silthus commented Oct 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Silthus commented Oct 12, 2026 •

edited

Loading

github-actions Bot commented Oct 24, 2026 •

edited

Loading