Method CreatePendingOutboundMessage

internal/identity/store.go:1407–1471

CreatePendingOutboundMessage stores a fully composed outbound email in pending_review status, including body_text, body_html, and attachments so that approval can reconstruct the original SendRequest (or accept edits) without the caller needing to retain it. ttlSeconds sets how long the message rema

(ctx context.Context, agentID string, toRecipients, cc, bcc []string, subject, bodyText, bodyHTML string, attachmentsJSON []byte, msgType, conversationID, replyToEmailMessageID string, ttlSeconds int)

// ([{filename, content_type, data}, ...]) or nil. Callers that already have
// an []outbound.Attachment slice should json.Marshal it before passing in.
func (s *Store) CreatePendingOutboundMessage(ctx context.Context, agentID string, toRecipients, cc, bcc []string, subject, bodyText, bodyHTML string, attachmentsJSON []byte, msgType, conversationID, replyToEmailMessageID string, ttlSeconds int) (*Message, error) {
	if ttlSeconds <= 0 || ttlSeconds > HITLMaxTTLSeconds {
		return nil, fmt.Errorf("ttl_seconds must be between 1 and %d", HITLMaxTTLSeconds)
	}

	id := "msg_" + generateID()
	now := time.Now()
	approvalExpiresAt := now.Add(time.Duration(ttlSeconds) * time.Second)

	var recipient string
	if len(toRecipients) > 0 {
		recipient = toRecipients[0]
	}

	var attachmentsArg interface{}
	if len(attachmentsJSON) > 0 {
		attachmentsArg = attachmentsJSON
	}

	m := &Message{
		ID:                id,
		AgentID:           agentID,
		Direction:         "outbound",
		Recipient:         recipient,
		Subject:           subject,
		EmailMessageID:    replyToEmailMessageID,
		Type:              msgType,
		ConversationID:    conversationID,
		CreatedAt:         now,
		ExpiresAt:         now.Add(MessageTTL),
		ToRecipients:      toRecipients,
		CC:                cc,
		BCC:               bcc,
		Status:            MessageStatusPendingReview,
		ApprovalExpiresAt: &approvalExpiresAt,
		BodyText:          bodyText,
		BodyHTML:          bodyHTML,
		AttachmentsJSON:   json.RawMessage(attachmentsJSON),
		// Sender is the agent itself (agent ID == email) so `from` isn't empty
		// on a held draft's detail/list view (B1).
		Sender: agentID,
	}
	_, err := s.pool.Exec(ctx,
		`INSERT INTO messages (
		    id, agent_id, direction, recipient, subject, email_message_id, message_type,
		    conversation_id, created_at, expires_at,
		    to_recipients, cc, bcc,
		    status, approval_expires_at,
		    body_text, body_html, attachments_json, sender)
		 VALUES ($1, $2, $3, $4, $5, $6, $7,
		         $8, $9, $10,
		         $11, $12, $13,
		         $14, $15,
		         $16, $17, $18, $19)`,
		m.ID, m.AgentID, m.Direction, m.Recipient, m.Subject, m.EmailMessageID, m.Type,
		m.ConversationID, m.CreatedAt, m.ExpiresAt,
		m.ToRecipients, m.CC, m.BCC,
		m.Status, m.ApprovalExpiresAt,