NOTIFICATIONS — email / SMS / WhatsApp / FCM

Intents carry identifiers only. Templates are allowlisted and escaped. Sensitive workflows use generic “open CASA securely” wording. Secrets rotate with overlap; webhooks require signatures. No contact lists in the browser.

System email catalogue

Delivery

Provider credentials live under Integrations → Email Provider. Templates, quiet hours and retries also appear in Notification Infrastructure.

Event keyNameStatus

From address and variables