Method buildInboundRejectedEvent

internal/agent/webhooks_api.go:196–213

buildInboundRejectedEvent fires when a reviewer drops a held inbound message (status pending_review → review_rejected; it stays hidden from the agent and its raw payload is retained for forensics — design §4.4). Routing key is the agent owner (see buildInboundReleasedEvent).

(msg *identity.ReviewMessageMeta, ownerUserID, reviewerUserID, reason string)

// its raw payload is retained for forensics — design §4.4). Routing key is the
// agent owner (see buildInboundReleasedEvent).
func (a *API) buildInboundRejectedEvent(msg *identity.ReviewMessageMeta, ownerUserID, reviewerUserID, reason string) webhookpub.Event {
	data := map[string]interface{}{
		"message_id":          msg.ID,
		"direction":           "inbound",
		"type":                msg.Type,
		"rejection_reason":    reason,
		"reviewed_by_user_id": reviewerUserID,
	}
	return webhookpub.Event{
		ID:        generateEventIDForAgent(),
		Type:      webhookpub.EventEmailReviewRejected,
		CreatedAt: time.Now().UTC(),
		UserID:    ownerUserID,
		AgentID:   msg.AgentID,
		MessageID: msg.ID,
		Data:      data,
	}
}

// generateEventIDForAgent wraps webhookpub's id helper so this file
// doesn't need to import internal/webhookpub just for the constructor.