Method handleCreateMessage

internal/httpapi/outbound.go:434–460

(ctx context.Context, in *createMessageInput)

}

func (s *Server) handleCreateMessage(ctx context.Context, in *createMessageInput) (*sendOutput, error) {
	ag, err := s.resolveOwnedAgent(ctx, in.Address)
	if err != nil {
		return nil, err
	}
	user, uerr := s.requireUser(ctx)
	if uerr != nil {
		return nil, uerr
	}
	b := in.Body
	if env := s.validateOutboundBody(b.Subject, b.Body, b.To, b.CC, b.BCC, b.ConversationID); env != nil {
		return nil, env
	}
	// The sender is the path agent (decision 3) — there is no body `from`; the
	// agent is the path and auth scopes the sender, so no spoofing is possible.
	req := outbound.SendRequest{
		From: ag.EmailAddress(), To: b.To, CC: b.CC, BCC: b.BCC, Subject: b.Subject,
		Body: b.Body, HTMLBody: b.HTMLBody, ConversationID: b.ConversationID, Attachments: b.Attachments,
	}
	// The agent moved from the body (`from`) to the path, so fold the agent id
	// into the idempotency route — otherwise two agents owned by the same user
	// could collide on an identical key+body (the body hash alone no longer
	// separates them).
	route := "/v1/agents/" + ag.ID + "/messages"
	// A cold send has no referenced inbound (nil) — it's not a reply/forward.
	return s.deliver(ctx, user, ag, req, "send", "", route, in.IdempotencyKey, in.RawBody, nil)
}