Method publishRejected

internal/agent/api.go:402–419

publishRejected fires email.review_rejected via the outbox (PublishTx — pre-side-effect: rejection is a row update, no SES involvement) AND the legacy goroutine.

(ctx context.Context, e webhookpub.Event, rejectedMsgID string)

// pre-side-effect: rejection is a row update, no SES involvement) AND
// the legacy goroutine.
func (a *API) publishRejected(ctx context.Context, e webhookpub.Event, rejectedMsgID string) {
	var outboxWrote bool
	if a.outbox != nil && rejectedMsgID != "" {
		e.ID = webhookpub.DeterministicEventID(rejectedMsgID, e.Type)
		err := a.store.WithTx(ctx, func(tx pgx.Tx) error {
			return a.outbox.PublishTx(ctx, tx, e)
		})
		if err != nil {
			log.Printf("[api] outbox tx for %s err: %v", e.Type, err)
		} else {
			outboxWrote = true
		}
	}
	a.emit().OutboxEventsPublished(e.Type)
	if a.shouldFireLegacy(outboxWrote) {
		a.publishAsync(e)
	}
}

// SetApprovalSigner wires in the magic-link signer after construction so
// callers (and tests) that don't need HITL magic-link endpoints don't