Topolo Docs Topolo Platform
Open workspace

Create sending seat

Add a sending seat: the display and from address, the time zone its sending days are counted in, and its warm-up plan. The daily cap is min(startLimit + days since warmupStartDate × dailyIncrease, maxLimit), 0 before the start date. Defaults: start today, 10 + 3/day up to 50, Europe/London. The seat sends nothing until a Nexus mailbox is bound (seats.connect_mailbox_oauth, seats.connect_mailbox_imap or seats.bind_mailbox); its messages are held as mailbox_not_connected. Nothing is sent.

Outcome

Add a sending seat: the display and from address, the time zone its sending days are counted in, and its warm-up plan. The daily cap is min(startLimit + days since warmupStartDate × dailyIncrease, maxLimit), 0 before the start date. Defaults: start today, 10 + 3/day up to 50, Europe/London. The seat sends nothing until a Nexus mailbox is bound (seats.connect_mailbox_oauth, seats.connect_mailbox_imap or seats.bind_mailbox); its messages are held as mailbox_not_connected. Nothing is sent.

Before you start

  • Verify the intended environment, signed-in credential, authorized organization and the action permission workspace:write.
  • Discover and select an authorized canonical Engage workspace. Pass resourceType=workspace and resourceId separately from action input.
  • Review the exact effects and obtain approval before CLI --confirm or MCP confirm:true. A local capture does not authorize a live mutation.

Discover the target

topolo whoami --json
topolo actions get app_topolo_engage.seats.create --json
topolo workspaces list topolo-engage --json

Set ENGAGE_WORKSPACE_ID to the identifier of the selected authorized workspace.

Input contract

FieldRequiredDeclared constraints
displayNameYes{"type":"string","minLength":1,"maxLength":120}
fromAddressYes{"type":"string","maxLength":320,"format":"email","pattern":"^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$"}
timezoneNo{"type":"string","minLength":1,"maxLength":64}
warmupStartDateNo{"type":"string","pattern":"^\\d{4}-\\d{2}-\\d{2}$"}
warmupStartLimitNo{"type":"integer","minimum":1,"maximum":500}
warmupDailyIncreaseNo{"type":"integer","minimum":0,"maximum":100}
warmupMaxLimitNo{"type":"integer","minimum":1,"maximum":500}

Validate, plan and execute

Build payload.json from the current schema and discovered identifiers. The action description above defines its behavior, limits, side effects and declared errors.

: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions validate app_topolo_engage.seats.create --data @payload.json --json
topolo actions plan app_topolo_engage.seats.create --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --confirm --json

Review the plan and approve its exact effects before executing the unchanged request.

: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions call app_topolo_engage.seats.create --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --confirm --json

For MCP, use topolo_get_action, topolo_validate_action, topolo_plan_action and topolo_call_action. Pass resource context separately where required; confirm:true is required for mutations.

Captured successful requests and responses

Captured HTTP 201 · the run ledger > records a scheduled pass: the heartbeat and one row per workspace touched

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: the run ledger > records a scheduled pass: the heartbeat and one row per workspace touched. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > leaves a seat under the minimum volume, and never rewrites a manual pause

Action input

{
  "displayName": "Ash",
  "fromAddress": "b@other.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "b@other.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > leaves a seat under the minimum volume, and never rewrites a manual pause. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · engagement analytics > reports first-touch rates by campaign: each contact once, bounced never replied, test campaigns excluded

Action input

{
  "displayName": "Bea",
  "fromAddress": "bea@example.com",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Bea",
    "fromAddress": "bea@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: engagement analytics > reports first-touch rates by campaign: each contact once, bounced never replied, test campaigns excluded. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · the run ledger > records a scheduled pass: the heartbeat and one row per workspace touched

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: the run ledger > records a scheduled pass: the heartbeat and one row per workspace touched. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue

Action input

{
  "displayName": "Ash",
  "fromAddress": "a@one.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "a@one.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue

Action input

{
  "displayName": "Ash",
  "fromAddress": "b@two.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "b@two.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue

Action input

{
  "displayName": "Ash",
  "fromAddress": "c@three.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_3",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "c@three.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses on complaints, a soft-bounce streak and a mailbox issue. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses every seat on a breaching sending domain

Action input

{
  "displayName": "Ash",
  "fromAddress": "a@shared.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "a@shared.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses every seat on a breaching sending domain. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses every seat on a breaching sending domain

Action input

{
  "displayName": "Ash",
  "fromAddress": "b@shared.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "b@shared.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses every seat on a breaching sending domain. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · sender health enforcement > pauses every seat on a breaching sending domain

Action input

{
  "displayName": "Ash",
  "fromAddress": "c@other.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_3",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "c@other.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: sender health enforcement > pauses every seat on a breaching sending domain. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · the run ledger > records holds by reason

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-10-01",
  "warmupStartLimit": 1,
  "warmupMaxLimit": 1
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 1,
      "dailyIncrease": 3,
      "maxLimit": 1
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 1
    }
  }
}

Source test: the run ledger > records holds by reason. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · runDueSends > hold order > then the recipient-local window, then the warm-up cap

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-12-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-12-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 0
    }
  }
}

Source test: runDueSends > hold order > then the recipient-local window, then the warm-up cap. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · runDueSends > seat health auto-pause > pauses a seat over the bounce limit and resumes it once the 14-day window recovers

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-10-01",
  "warmupStartLimit": 100,
  "warmupMaxLimit": 100
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 100,
      "dailyIncrease": 3,
      "maxLimit": 100
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 100
    }
  }
}

Source test: runDueSends > seat health auto-pause > pauses a seat over the bounce limit and resumes it once the 14-day window recovers. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · render ahead for approval > queues a message due tomorrow today, sends it in the window once approved, and never renders twice

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-05T09:00:00.000Z",
    "updatedAt": "2026-10-05T09:00:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 22
    }
  }
}

Source test: render ahead for approval > queues a message due tomorrow today, sends it in the window once approved, and never renders twice. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · seat health reports > judges seats sharing a sending domain together

Action input

{
  "displayName": "Ash",
  "fromAddress": "b@Shared.io",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "b@shared.io",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: seat health reports > judges seats sharing a sending domain together. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · seat routes > creates a seat with OpenClaw warm-up defaults counted from today in its zone

Action input

{
  "displayName": "Ash",
  "fromAddress": "Ash@Example.com"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_1",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "ash@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-06",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 10
    }
  }
}

Source test: seat routes > creates a seat with OpenClaw warm-up defaults counted from today in its zone. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 201 · ops.health.get > snapshots the pipeline of this workspace only

Action input

{
  "displayName": "Ash",
  "fromAddress": "b@example.com",
  "warmupStartDate": "2026-10-01"
}

Actual local response

{
  "seat": {
    "id": "eng_seat_2",
    "nexusMailboxId": null,
    "mailboxStatus": null,
    "mailboxCheckedAt": null,
    "whatsappConnectionId": null,
    "displayName": "Ash",
    "fromAddress": "b@example.com",
    "status": "active",
    "pauseReason": null,
    "timezone": "Europe/London",
    "warmup": {
      "startDate": "2026-10-01",
      "startLimit": 10,
      "dailyIncrease": 3,
      "maxLimit": 50
    },
    "createdAt": "2026-10-06T08:30:00.000Z",
    "updatedAt": "2026-10-06T08:30:00.000Z",
    "health": {
      "windowDays": 14,
      "sent": 0,
      "bounced": 0,
      "optedOut": 0,
      "bounceRate": 0,
      "optOutRate": 0,
      "healthy": true,
      "sentToday": 0,
      "warmupCap": 25
    }
  }
}

Source test: ops.health.get > snapshots the pipeline of this workspace only. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Effects and response meaning

  • Add a sending seat: the display and from address, the time zone its sending days are counted in, and its warm-up plan. The daily cap is min(startLimit + days since warmupStartDate × dailyIncrease, maxLimit), 0 before the start date. Defaults: start today, 10 + 3/day up to 50, Europe/London. The seat sends nothing until a Nexus mailbox is bound (seats.connect_mailbox_oauth, seats.connect_mailbox_imap or seats.bind_mailbox); its messages are held as mailbox_not_connected. Nothing is sent.

Verify the outcome

  • Check the response against the declared output schema and the requested operation. For mutations, use the action-specific read described in the action description before any dependent operation.

Recover

For an uncertain result, inspect current retained state with a read action before retrying. Do not replay a mutation unless its contract explicitly guarantees idempotency.

Refused requests

Captured HTTP 422 · seat routes > validates the time zone and the warm-up plan

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "timezone": "Mars/Base"
}

Actual local response

{
  "error": {
    "code": "invalid_timezone",
    "message": "The time zone must be an IANA name such as Europe/London."
  }
}

Source test: seat routes > validates the time zone and the warm-up plan. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 422 · seat routes > validates the time zone and the warm-up plan

Action input

{
  "displayName": "Ash",
  "fromAddress": "ash@example.com",
  "warmupStartLimit": 20,
  "warmupMaxLimit": 10
}

Actual local response

{
  "error": {
    "code": "invalid_warmup",
    "message": "The warm-up maximum must be at least the starting limit."
  }
}

Source test: seat routes > validates the time zone and the warm-up plan. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 422 · seat routes > validates the time zone and the warm-up plan

Refused input; do not execute

{
  "displayName": "Ash",
  "fromAddress": "nope"
}

Actual local response

{
  "error": {
    "code": "invalid_action_input",
    "message": "Input for seats.create is invalid.",
    "details": [
      {
        "origin": "string",
        "code": "invalid_format",
        "format": "email",
        "pattern": "/^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$/",
        "path": [
          "fromAddress"
        ],
        "message": "Invalid email address"
      }
    ]
  }
}

Source test: seat routes > validates the time zone and the warm-up plan. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Captured HTTP 403 · seat routes > keeps seats inside their workspace and organization

Refused input; do not execute

{
  "displayName": "x",
  "fromAddress": "x@y.z"
}

Actual local response

{
  "error": {
    "code": "permission_denied",
    "message": "The credential lacks workspace:write.",
    "details": {
      "requiredPermission": "workspace:write"
    }
  }
}

Source test: seat routes > keeps seats inside their workspace and organization. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

Error recovery

  • HTTP 422 invalid_timezone: Read the refusal details and current action contract, correct the stated cause, then validate and plan again. Do not retry unchanged or infer success.
  • HTTP 422 invalid_warmup: Read the refusal details and current action contract, correct the stated cause, then validate and plan again. Do not retry unchanged or infer success.
  • HTTP 422 invalid_action_input: Correct the request against the current action input schema, then validate it again before planning.
  • HTTP 403 permission_denied: Stop and inspect the current credential and selected resource. It needs workspace:write; do not broaden access or switch organization automatically.

Evidence and limits

  • /api/seats

  • Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

  • Widget/bootstrap use actual app handler but mocked worker runtime and app identity.

  • No gateway execution, live permissions, external delivery or deployed proof.

These are local route captures with synthetic identity and simulated dependencies. They do not prove live authorization, gateway execution, production state, or external delivery.