feat(messaging): lock code-managed templates and adopt templates into code by Silthus · Pull Request #127172 · PostHog/posthog

Silthus · 2026-11-02T08:50:16Z

Part of the code-first rebuild of the email send stack; the third of three PRs split out of #127169 (schema, upload, lock and adopt).

Problem

Once code uploads a template (feat(messaging): upload email templates from code by key #127169), an edit in the PostHog editor gets overwritten by the next deploy, and the team loses it without warning.
A team that made a template in PostHog has no way to move it into code and keep its id, workflow and sender.
An SDK deploy uploads its local template and takes over a template that a teammate edited in PostHog, without a word.
Map: Silthus/posthog#461.

Changes

A template managed by code refuses every edit in PostHog with 403 immutable, until someone releases it with managed_by: gui. A release captures a message template released usage event.
A template made in PostHog moves into code when someone gives it a key. The next upload under that key keeps its id, workflow and sender, and takes over the code sends under the key.
Giving a template a key needs edit access to the workflow that already sends code emails under that key. Without it the change answers 403.
A new key for a template that already has one answers 400 key_already_set, before the lock check.
An upload with if_code_managed: true, as both SDKs send, refuses a template edited in PostHog with 409 template_edited_in_posthog and changes nothing. The fix says to upload without the flag to manage it in code again. A new key, or a template managed by code, uploads as before.
That check runs before if_not_superseded. A template edited in PostHog keeps the code's old content on its superseded list, so the other order answers superseded and the SDK sends the PostHog edit.
The MCP update and patch tools say how a code-managed template refuses them.
Until feat(workflows): show code-managed email templates read-only #127179 ships the read-only view, an autosave in the editor on a code-managed template answers 403 and the edit stays unsaved.
Mechanical: the regenerated OpenAPI, frontend and MCP types, and the tool snapshot.

How did you test this code?

Test rationale:

test_code_managed_template_lock.py: a PostHog edit that overwrites a code-managed template, and a release that does not unlock it.
test_template_adoption.py: an upload that makes a new template instead of adopting the keyed one, and code sends that move before an upload claims the key.
test_template_upload.py: an upload that adopts a template under a key whose workflow the member can't edit, and goes through. It takes the key's code sends. Without the adoption check this row fails.
test_an_upload_if_code_managed_refuses_a_template_edited_in_posthog: an SDK upload that adopts a template made or edited in PostHog, or answers superseded for it. The new-key and code-managed rows guard the uploads that must still go through.
test_refuses_a_key_whose_code_send_workflow_the_member_cannot_edit: a member who takes over code sends they cannot edit by giving a template their key.
test_a_new_key_for_a_code_managed_template_is_refused_as_a_key_change: a key change answered as a lock refusal, which points the member at the wrong fix.

Proofs (saved with fleet proof); the live run and shadow diff ran on c9db420 and still hold, because if_code_managed defaults to off:

Live run: Django at this head, cdp-api and both CDP workers at the node stack f9abed0, maildev as the sink. 21 requests through the public API. An edit in PostHog of an uploaded or adopted template answers 403 immutable with why and fix, and the next send keeps the uploaded content.
SDK live run on feat(messaging): send the workflow version a template send by key was checked against #127188's head 5304e8d, which contains this fix: posthog-node (feat(node): upload local email templates by hash on send Silthus/posthog-js#7 (now feat(node): upload local email templates by hash on send posthog-js#5513)) and posthog-python (feat: send email content from code with posthog.emails.send Silthus/posthog-python#2 (now feat: send email content from code with posthog.emails.send posthog-python#1171)) upload a new key and send it. Onto a template edited in PostHog, both get 409 template_edited_in_posthog, send nothing, and leave the template as it was.
Shadow diff: the same 21 requests on master 43333f8. Beyond feat(messaging): upload email templates from code by key #127169's differences, only the 403 immutable answers and the send after them differ, as the goal names.
Prod shape: a gap, accepted by the standing rule until read-only production access exists on 2026-11-02.
Lane gate on this head: ruff, the IDOR check, the migration checks, repo-wide mypy, and the messaging and workflows tests pass, and so do the MCP server's typecheck, lint and unit tests.

Release status

This change is behind a feature flag and is not available to users

Docs update

None. The send API docs follow when the flag opens.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code, Claude Opus 5.5 (claude-opus-5-5)

Skills: /qa-swarm, /improving-drf-endpoints, /implementing-mcp-tools, /writing-tests, /stacking-prs, /pr-description, /writing-pr-descriptions

Question	Answer	Who	Where
Does #127169 land as one PR?	No, as three: schema, upload, lock and adopt	👤 Human	lane brief of 2026-10-31
Does the upload honor the SDKs' `if_code_managed`?	Yes, the server follows the contract: `409 template_edited_in_posthog`. Replaces ignoring the field	👤 Human	conductor relay of Michael, 2026-11-02
Where does that check sit?	Before `if_not_superseded`, so an edited template is never answered `superseded`	🤖 Agent	this PR
Do release and adoption check the new flag?	No; gating release would strand code-managed templates when the flag is off	🤖 Agent	pending approval
Do code sends move to a template when someone gives it a key?	No, only once an upload claims the key	🤖 Agent	pending approval
Does adoption check access to the key's workflow?	Yes, edit access, like an upload under that key	🤖 Agent	QA swarm 2026-11-01

Follow-ups: the TemplateWriteIntent action strings as a type, and one shared wording for the adopt and upload 403.

Involvement: one brief from Michael; QA swarm on 2026-11-01 with two panel rounds (GPT-6.1 Sol review, Opus 5.5 fresh eyes): 3 findings fixed, 4 rejected; a GPT-6.1 Sol fix round (correctness and systems) on d090f43 found nothing; live, SDK and shadow-diff proof captured.

🤖 Generated with Claude Code

… code A template managed by code now refuses edits in PostHog with `403 immutable` until someone releases it with `managed_by: gui`, which captures a `message template released` usage event. A template made in PostHog moves into code when someone gives it a `key`: the next upload under that key keeps its id, workflow and sender, and takes over the code sends under the key from then on. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

… template Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…e-lock-adopt # Conflicts: # products/messaging/backend/tests/api/test_template_upload.py

…a key change Adopting a key now needs editor access to the workflow that already sends under it, so a later upload can't move those sends to a template the member controls. A new key on a code-managed template now answers key_already_set instead of the lock's refusal, whose fix would not have helped. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…e-lock-adopt

…e-lock-adopt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

… in posthog An upload that sets if_code_managed now answers 409 template_edited_in_posthog when its key names a template that code does not manage, and changes nothing. The check runs first, before if_not_superseded, because the SDK sends both flags and a superseded answer would hide that people edit the template in PostHog. An upload without the flag still takes the template over. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

github-actions · 2026-11-02T08:51:49Z

🤖 CI report

⚠️

Trunk lane — backend Python lane

This PR is assigned to the backend Python lane. It runs backend Python tests and may merge in parallel with PRs in other lanes.

✅ Complexity (TypeScript) — clean

Cyclomatic complexity above the limit in changed typescript files (10 for production files, 15 for test files). Warn only: worth simplifying when you next touch these functions.

✅ Duplication (Python) — clean

New Python code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Duplication (TypeScript) — clean

New TypeScript code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Bundle size — 🟢 -586 B (-0.0%)

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 77.12 MiB · 🟢 -586 B (-0.0%)

File	Size	Δ vs base
`posthog-app/src/lib/components/CommandKSearch/CommandKSearch.js`	63.0 KiB	🟢 -1.2 KiB (-1.9%)

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) `src/index.tsx`	1.03 MiB · 25 files	no change	`█████████░` 89.6% of 1.14 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) `src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts`	3.00 MiB · 623 files	🔺 +1.2 KiB (+0.0%)	`██████████` 99.0% of 3.03 MiB
authenticated shell (every logged-in page) `src/scenes/AuthenticatedShell.tsx`	3.82 MiB · 1,222 files	🔺 +1.2 KiB (+0.0%)	`██████████` 95.4% of 4.01 MiB
dashboard scene `src/scenes/dashboard/Dashboard.tsx`	7.58 MiB · 2,930 files	🔺 +1.2 KiB (+0.0%)	`████████░░` 77.1% of 9.84 MiB
today home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx`	4.69 MiB · 1,749 files	🔺 +1.2 KiB (+0.0%)	`██████████` 95.0% of 4.93 MiB
AI-first home path `src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx`	5.98 MiB · 2,256 files	🔺 +1.2 KiB (+0.0%)	`██████████` 95.3% of 6.27 MiB
events scene `src/scenes/activity/explore/EventsScene.tsx`	6.66 MiB · 2,508 files	🔺 +1.2 KiB (+0.0%)	`███████░░░` 70.8% of 9.41 MiB
web analytics scene `src/scenes/web-analytics/WebAnalyticsScene.tsx`	7.68 MiB · 2,870 files	🔺 +1.2 KiB (+0.0%)	`███████░░░` 73.2% of 10.49 MiB
replay detail scene `src/scenes/session-recordings/detail/SessionRecordingDetail.tsx`	6.89 MiB · 2,599 files	🔺 +709 B (+0.0%)	`████████░░` 84.8% of 8.13 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/index.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/zod/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/logic/billing/billingLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/ProductEmptyState/productSetupPreloadLogic.ts stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/kea-test-utils/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/product_analytics/frontend/insights/activityDescriptions stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/dashboards/frontend/widgets/previews/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/panel-layout/ProjectTree/menus/SessionReplayMenuItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/projectNoticeLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/navigation/ImpersonationNotice/ImpersonationNotice.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/cohortSavedToast.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/wizard/frontend/runs/WizardRunDetailsDrawer.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayShell.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayContextPanelFloating.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodaySidePanel.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/TodayTopBar.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/layout/today/todayRailItems.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/subscriptions/frontend/components/Subscriptions/exportNudge/exportNudgeLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/billing/paymentEntryLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/conversations/frontend/components/SidePanel/sidepanelTicketsLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/zod/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/auth/loginLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/authentication/shared/passkeyLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/cohorts/CohortFilters/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 products/persons/frontend/logics/personsLogic.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/surveys/constants.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/re2js/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/react-markdown/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/Command/Command.tsx stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 zod/v4/locales/de.js stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/svg/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 node_modules/@posthog/brand/dist/generated/hoggies/components/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/marked/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/re2js/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/dashboard/Dashboard.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/scenes/project-homepage/today/TodayReportPage.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/charts/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/VisualizationWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/components/tool/widgets/RecordingsWidget.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/queries/Query/Query.tsx stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 products/posthog_ai/frontend/api/primitives.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 src/scenes/notebooks/Notebook/notebookLogic.ts stays out of src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/session-recordings/playlist/SessionRecordingsPlaylist.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/web-analytics/tiles/WebAnalyticsTile.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/web-analytics-validators.js stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/InsightViz/InsightViz.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/DataVisualization/DataVisualization.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/nodes/WebOverview/WebOverview.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/activity/explore/EventsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/marked/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/frimousse/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/web-analytics/LiveMetricsDashboard/LiveWebAnalyticsMetrics.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 products/product_analytics/frontend/insights/trends/WorldMap/countryVectors.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/validators.js stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/re2js/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/scenes/debug/HogDebug.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 src/queries/QueryEditor/QueryEditor.tsx stays out of src/scenes/web-analytics/WebAnalyticsScene.tsx
🟢 packages/quill/packages/quill/dist/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/@tiptap/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/prosemirror- stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/marked/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 src/scenes/settings/SettingsMap.tsx stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 @jspm/core/nodelibs/browser/fs stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/re2js/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/kea-test-utils/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx
🟢 node_modules/d3/src/ stays out of src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`
6.3 KiB	`../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js`
4.7 KiB	`../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js`
4.0 KiB	`../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js`
1.9 KiB	`src/lib/utils/bootTiming.ts`
1.7 KiB	`src/index.tsx`
1.7 KiB	`../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js`
1.2 KiB	`src/RootErrorBoundary.tsx`
1.1 KiB	`src/lib/utils/deferredAppContext.ts`

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
28.3 KiB	`src/lib/constants.tsx`
24.6 KiB	`../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js`

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`
32.3 KiB	`src/lib/utils/eventUsageLogic.ts`
28.3 KiB	`src/lib/constants.tsx`

Largest files eagerly shipped from src/scenes/dashboard/Dashboard.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
115.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/today/TodayHome.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
36.4 KiB	`../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js`

Largest files eagerly shipped from

src/scenes/AuthenticatedShell.tsx + src/scenes/project-homepage/ProjectHomepage.tsx + src/scenes/project-homepage/ai-first/AiFirstHomepage.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`
41.9 KiB	`../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js`
41.7 KiB	`src/scenes/hog-functions/sub-templates/sub-templates.ts`

Largest files eagerly shipped from src/scenes/activity/explore/EventsScene.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

Largest files eagerly shipped from src/scenes/web-analytics/WebAnalyticsScene.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
115.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/surveys-preview.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
79.0 KiB	`src/scenes/dashboard/dashboardLogic.tsx`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`

Largest files eagerly shipped from src/scenes/session-recordings/detail/SessionRecordingDetail.tsx

Size	File
359.8 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs`
321.1 KiB	`../node_modules/.pnpm/posthog-js@1.447.1_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/rrweb.js`
224.1 KiB	`../node_modules/.pnpm/@posthog+icons@0.39.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js`
126.8 KiB	`../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js`
110.8 KiB	`../packages/quill/packages/primitives/dist/index.js`
105.6 KiB	`src/products.tsx`
96.1 KiB	`../packages/quill/packages/components/dist/index.js`
87.4 KiB	`src/lib/api.ts`
68.7 KiB	`src/lib/lemon-ui/icons/icons.tsx`
68.0 KiB	`../products/posthog_ai/frontend/logics/runStreamLogic.ts`

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of #32479}

✅ Frontend layers — no new upward imports, 0 removed

Static imports from a lower frontend layer into a higher one (layers, lowest first: kernel, shell, query, features). Compared with the base branch, so an import that a PR also adds to layer-baseline.txt still shows here. Sizes are the source bytes on the eager path of every logged-in page.

Layer	Eager source bytes	Δ vs base
kernel	2.97 MiB	🟢 -184 B (-0.0%)
shell	2.35 MiB	no change
query	56.2 KiB	no change
features	273.6 KiB	no change

Download the interactive layer graph for this PR.

_{Posted automatically by check-layers}

✅ Toolbar bundle — eager 2.42 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.42 MiB · 19 files	🔺 +1.2 KiB (+0.0%)	`████░░░░░░` 42.3% of 5.72 MiB
Deferred (lazy)	2.61 MiB · 42 files	no change	n/a — loads on demand
Loader `dist/toolbar.js`	1.2 KiB	no change	`█░░░░░░░░░` 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
961.3 KiB	`dist/toolbar/toolbar-app-F4WAIZ6W.css`
731.7 KiB	`dist/toolbar/chunk-chunk-N27OD2N3.js`
290.5 KiB	`dist/toolbar/chunk-chunk-B4EIGQIG.js`
131.8 KiB	`dist/toolbar/chunk-chunk-FQJO25M6.js`
130.4 KiB	`dist/toolbar/chunk-chunk-3F26PAMR.js`
75.7 KiB	`dist/toolbar/toolbar-app-KS35NDNZ.js`
69.0 KiB	`dist/toolbar/chunk-chunk-BFAXZMC5.js`
33.8 KiB	`dist/toolbar/chunk-chunk-43ZVAZS7.js`
21.7 KiB	`dist/toolbar/chunk-chunk-F6URCRZB.js`
6.8 KiB	`dist/toolbar/chunk-chunk-RVLGRPCH.js`

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +9.2 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 985.20 MiB · 🔺 +9.2 KiB (+0.0%)

ℹ️ MCP UI apps size — 35 app(s), 29268.6 KB JS

Built size of each MCP UI app (main.js + styles.css).

App	JS	CSS
debug	848.8 KB	220.9 KB
explain-chart	1122.9 KB	220.9 KB
action	771.5 KB	220.9 KB
action-list	839.8 KB	220.9 KB
cohort	770.5 KB	220.9 KB
cohort-list	838.8 KB	220.9 KB
email-template	770.4 KB	220.9 KB
error-details	775.4 KB	220.9 KB
error-issue	772.5 KB	220.9 KB
error-issue-list	841.0 KB	220.9 KB
experiment	836.9 KB	220.9 KB
experiment-list	840.5 KB	220.9 KB
experiment-results	838.7 KB	220.9 KB
feature-flag	839.2 KB	220.9 KB
feature-flag-list	842.9 KB	220.9 KB
feature-flag-testing	773.8 KB	220.9 KB
inline-scan	771.0 KB	220.9 KB
insight-actors	838.3 KB	220.9 KB
llm-costs	835.6 KB	220.9 KB
session-recording	772.8 KB	220.9 KB
survey	772.1 KB	220.9 KB
survey-global-stats	835.6 KB	220.9 KB
survey-list	840.5 KB	220.9 KB
survey-stats	835.6 KB	220.9 KB
trace-span	770.9 KB	220.9 KB
trace-span-list	839.7 KB	220.9 KB
vision-observation-list	838.9 KB	220.9 KB
workflow	770.9 KB	220.9 KB
workflow-list	839.1 KB	220.9 KB
workflow-setup-status	770.6 KB	220.9 KB
query-results	1094.4 KB	220.9 KB
render-ui	1198.6 KB	220.9 KB
visual-review-snapshots	775.4 KB	220.9 KB
workflow-data-suggestions	773.2 KB	220.9 KB
workflow-sending-rules	771.9 KB	220.9 KB

ℹ️ MCP agent API — agent-facing tool changes

What this PR changes for agents, from the tool schema snapshots and tool definitions.

Tools changed (3):

Tool	Params	Annotations	Schema chars
`workflows-patch-email-template`		description changed
`workflows-update-email-template`	+`key`	description changed	4,572 -> 5,042
`workflows-upload-email-template`	+`if_code_managed`		2,038 -> 2,449

✅ Django migration risk — migration analysis complete

We've analyzed your migrations for potential risks.

Summary: 1 Safe | 0 Needs Review | 0 Blocked

✅ Safe

Brief or no lock, backwards compatible

messaging.0017_messagetemplate_code_managed_fields
  └─ #1 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: content_hash
  └─ #2 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: managed_by
  └─ #3 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: source_path
  └─ #4 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: source_ref
  └─ #5 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: source_repository
  └─ #6 ✅ AddField
     Adding nullable field requires brief lock
     model: messagetemplate, field: superseded_content_hashes

📚 How to Deploy These Changes Safely

AddField:

This operation acquires a brief lock but doesn't rewrite the table.

Deployment uses lock timeouts with automatic retries, so lock contention will cause retries rather than connection pile-up.

Last updated: 2026-11-06 09:27 UTC (38c228c)

…e-lock-adopt # Conflicts: # services/mcp/src/tools/generated/email_templates.ts

…option tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…e-lock-adopt

…sal tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

The template uploads layer now sits on master, so this merge keeps that layer's code and re-applies only this layer's change: code-managed templates refuse edits in PostHog, and a template made in PostHog moves into code by key. The update tool's description keeps master's note on the read-only fields of a fetched template and adds this layer's lock and adoption text. OpenAPI types, MCP tools and tool snapshots are regenerated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…e-lock-adopt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Master reads a template through read_object now, so the race test claims the template there, and the workflow reload is patched where the hog flow model calls it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Silthus and others added 8 commits October 31, 2026 12:26

chore(messaging): test the key workflow check when an upload adopts a…

98e10b5

… template Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

c3a9531

…e-lock-adopt # Conflicts: # products/messaging/backend/tests/api/test_template_upload.py

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

5cc95f4

…e-lock-adopt

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

c9db420

…e-lock-adopt

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

4584bd8

…e-lock-adopt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

pr-assigner-resolver-posthog Bot assigned Silthus Nov 2, 2026

This was referenced Nov 2, 2026

feat(messaging): send a stored template by key on send/email #127176

Draft

feat(messaging): send the workflow version a template send by key was checked against #127188

Draft

Silthus added this pull request to stack #127190 November 2, 2026 08:54

This was referenced Nov 2, 2026

feat(messaging): upload email templates from code by key #127169

Draft

feat(messaging): lock code-managed templates and adopt templates into code Silthus/posthog#631

Closed

Silthus and others added 8 commits November 2, 2026 10:13

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

8ab6006

…e-lock-adopt # Conflicts: # services/mcp/src/tools/generated/email_templates.ts

fix(messaging): import HogFlow through the workflows facade in the ad…

002a08f

…option tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

a0ecc32

…e-lock-adopt

chore(messaging): expect the transactional email api docs url in refu…

9976f6c

…sal tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge branch 'email-v2/04-template-uploads' into email-v2/04c-templat…

7f77981

…e-lock-adopt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

chore(messaging): fit the lock tests to master's object access hook

16f3d2d

Master reads a template through read_object now, so the race test claims the template there, and the workflow reload is patched where the hog flow model calls it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

chore: update OpenAPI generated types

38c228c

Navigation Menu

Repository navigation

feat(messaging): lock code-managed templates and adopt templates into code - #127172

feat(messaging): lock code-managed templates and adopt templates into code#127172
Silthus wants to merge 16 commits into
email-v2/04-template-uploadsfrom
email-v2/04c-template-lock-adopt

Silthus commented Nov 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 2, 2026 •

edited

Loading

✅ Safe

📚 How to Deploy These Changes Safely

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Silthus commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

How did you test this code?

Release status

Docs update

🤖 Agent context

Uh oh!

github-actions Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CI report

✅ Safe

📚 How to Deploy These Changes Safely

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Silthus commented Nov 2, 2026 •

edited

Loading

github-actions Bot commented Nov 2, 2026 •

edited

Loading