Method RejectInboundReviewCore

internal/agent/hitl_api.go:283–295

RejectInboundReviewCore drops a held INBOUND message (status pending_review → review_rejected; it stays hidden from the agent, raw payload retained for forensics) and fires email.review_rejected. Compare-and-set semantics as in ApproveInboundReviewCore.

(ctx context.Context, userID, reason string, msg *identity.ReviewMessageMeta)

// forensics) and fires email.review_rejected. Compare-and-set semantics as in
// ApproveInboundReviewCore.
func (a *API) RejectInboundReviewCore(ctx context.Context, userID, reason string, msg *identity.ReviewMessageMeta) *OutboundError {
	if err := a.store.RejectInboundReview(ctx, msg.ID, msg.AgentID, userID, reason); err != nil {
		if errors.Is(err, identity.ErrNotPendingReview) {
			return &OutboundError{http.StatusConflict, "message_not_pending", "message is not pending review"}
		}
		log.Printf("[api] reject inbound review %s: %v", msg.ID, err)
		return &OutboundError{http.StatusInternalServerError, "internal_error", "failed to reject message"}
	}
	log.Printf("[mail:%s] dir=inbound type=%s status=%s agent=%s rejected_by=user:%s reason=%q",
		msg.ID, msg.Type, identity.MessageStatusReviewRejected, msg.AgentID, userID, reason)
	a.publishRejected(ctx, a.buildInboundRejectedEvent(msg, a.reviewOwnerID(ctx, msg.AgentID, userID), userID, reason), msg.ID)
	return nil
}