Method HoldForApprovalCore

internal/agent/api.go:1029–1067

HoldForApprovalCore is the HTTP-free core of the HITL hold: it persists the pending outbound message, fires the async reviewer notification, and publishes the pending-approval event, returning the held message. Both the legacy handler and the v1 httpapi layer call it so there is exactly one hold-and

(ctx context.Context, agent *identity.AgentIdentity, req outbound.SendRequest, msgType, replyToEmailMessageID string)

// legacy handler and the v1 httpapi layer call it so there is exactly one
// hold-and-notify path (api-v1-redesign — outbound extraction).
func (a *API) HoldForApprovalCore(ctx context.Context, agent *identity.AgentIdentity, req outbound.SendRequest, msgType, replyToEmailMessageID string) (*identity.Message, error) {
	var attachmentsJSON []byte
	if len(req.Attachments) > 0 {
		b, err := json.Marshal(req.Attachments)
		if err != nil {
			log.Printf("[api] hitl: marshal attachments: %v", err)
			return nil, errHoldAttachments
		}
		attachmentsJSON = b
	}

	msg, err := a.store.CreatePendingOutboundMessage(
		ctx, agent.ID,
		req.To, req.CC, req.BCC,
		req.Subject, req.Body, req.HTMLBody,
		attachmentsJSON,
		msgType, req.ConversationID, replyToEmailMessageID,
		agent.HITLTTLSeconds,
	)
	if err != nil {
		log.Printf("[api] hitl: create pending message: agent=%s err=%v", agent.ID, err)
		return nil, err
	}

	slug, _, _ := strings.Cut(agent.EmailAddress(), "@")
	log.Printf("[mail:%s] dir=outbound type=%s status=%s from=%s to=%v slug=%s conv_id=%s subject=%q approval_expires_at=%s",
		msg.ID, msgType, msg.Status, agent.EmailAddress(), req.To, slug, req.ConversationID, req.Subject, msg.ApprovalExpiresAt.Format(time.RFC3339))

	// Fire the reviewer notification asynchronously. Failures are logged
	// inside the notifier and must never block the response — the pending
	// row is already persisted and the expiration worker will finalize it
	// even if every notification email bounces.
	if a.notifier != nil {
		a.notifier.NotifyPendingApprovalAsync(msg, agent)
	}

	a.publishPendingApproval(ctx, a.buildPendingApprovalEvent(agent, msg, req, msgType), msg.ID)
	return msg, nil
}

// OutboundResult is the HTTP-free outcome of DeliverOutbound.
type OutboundResult struct {