PUT /api/boards/{id}/email-identity — set/clear per-board outbound identity fields (from address, display name, reply-to, signature).

Parameters

Request body

PutBoardIdentityRequest

Responses

Security: bearer

PUT /api/boards/{id}/inbound-address — set/clear a board-level address.

Parameters

Request body

PutBoardAddressRequest

Responses

Security: bearer

GET /api/email/delivery-ledger — the outbound message ledger (queued/sending/sent/dead) with attempts, last error, and counts.

Parameters

Responses

Security: bearer

GET /api/email/inbound-holds — messages waiting for a decision, newest first, with the reason each is held and the engine's proposal when the org runs shadow or autonomous.

Parameters

Responses

Security: bearer

POST /api/email/inbound-holds/{id}/decide — the person's decision on one held message. `accept` threads it onto the ticket and leaves a client-visible comment; `refuse` records the refusal. Both write the decision columns, an audit row naming the person, and `email.sender_binding_decided`. A message that is no longer held answers a typed 409, so a decision cannot thread twice.

Parameters

Request body

DecideHeldRequest

Responses

Security: bearer

GET /api/email/inbound-settings — current org catch-all, if configured.

Responses

Security: bearer

PUT /api/email/inbound-settings — upsert the org catch-all route.

Request body

PutInboundSettingsRequest

Responses

Security: bearer

PUT /api/email/outbound-settings — partial update of the org outbound identity, transport selection, and digest policy. Values are validated against their registry declarations before any write.

Request body

PutOutboundSettingsRequest

Responses

Security: bearer

GET /api/email/settings — the whole mail surface in one read: inbound routes + per-board identities, outbound identity + transport readiness (never credential material), the delivery ledger's enablement bits, and the org digest policy.

Responses

Security: bearer

POST /api/email/test-send — renders a branded test message and enqueues it through the configured transport. Refuses with a typed conflict when no transport is configured (the honest not-configured state).

Request body

TestSendRequest

Responses

Security: bearer

PUT /api/email/transport-credentials — seals the selected transport's credential into the sealed slot (presence-only response). The plaintext exists exactly once, in this request.

Request body

PutTransportCredentialsRequest

Responses

Security: bearer

DELETE /api/email/transport-credentials?transport=… — removes the sealed credential; the transport then reports not-configured (mail stays queued).

Parameters

Responses

Security: bearer