internal/

Package approvaltoken signs and verifies the short-lived HMAC tokens embedded in HITL notification-email magic links.

Package dkim wraps github.com/emersion/go-msgauth/dkim for the per-domain signing path.

Package hitlnotify sends the approval notification email that fires whenever a new outbound message enters pending_approval.

Package hitlworker runs the periodic sweep that finalizes pending_approval messages whose TTL has elapsed.

Package idempotency implements the storage backing the Idempotency-Key header on the outbound send endpoints.

Package limits enforces per-user resource caps at the agent-create, domain-register, and message-send paths.

Package loopback delivers agent-to-self messages without touching the upstream SMTP relay.

Package oauth wires the e2a authorization server using ory/fosite as the protocol layer.

Package telemetry defines the metrics interface for the e2a backend.

Package webhookpub publishes events from the e2a core (relay, outbound sender, HITL flow) to subscribers registered via the new /api/v1/webhooks resource.