01

The feature was not email

A mail inbox is only the most visible part of the problem. The hard part is the account behind it: OAuth state, provider callbacks, refresh, revocation, reconnect cascades, scopes, audit, and the question of which tenant feature is allowed to use which provider capability.

Once that layer exists, email and calendar are no longer isolated integrations. They become first-class runtime surfaces for agents: an inbound message can start a run, an attachment can become a controlled document intake, and a booking action can be guarded like any other tool call.

02

One account substrate, many product surfaces

Connections gives each provider account a lifecycle that every feature can share. Email does not invent refresh handling. Calendar does not invent revocation. A future Drive or CRM adapter should not invent audit. The connective tissue is deliberately boring because boring is what keeps production integrations alive.

provider account
Connections
email
calendar
next adapter
agent run
Provider identity is shared; product features become controlled consumers.
03

Messages and events become runs

The clean mental model is this: inbound email, calendar events, webhooks, and chat messages all become trigger payloads. They differ at the edge, but inside ChatFlow they enter the same orchestration vocabulary: run state, graph steps, tools, guardrails, and trace spans.

That is why the calendar work mattered even before calendar looked spectacular in the UI. It proved that a non-chat surface can start deterministic agent work without a special one-off pipeline.

  • Inbound mail can start a run
  • Outbound replies pass through provider scopes and guardrails
  • Calendar events can trigger booking workflows
  • Provider credentials copied into individual tools
04

Attachments are document intake, not loose files

Attachments are where integration demos usually become messy. A user sends a PDF, the bot grabs it, and nobody knows whether it became a knowledge-base document, a temporary blob, or a permanent liability.

The new path treats attachments as governed intake. The message is the origin, the blob is stored with provenance, extraction runs through the document pipeline, and downstream KB material can still be traced back to the provider account and inbound event that created it.

05

Why enterprises ask about this early

Enterprise buyers rarely start with agents. They start with identity, audit, revocation, and data flow. The Connections layer answers those questions in the same vocabulary their platform teams already use.

The work is not finished forever. Provider-specific quotas, consent screens, webhook policies, and tenant-by-tenant approvals still need validation. But now those decisions attach to a single account layer instead of being scattered across every feature.