Outcome
Operator kill switch for one seat: nothing is sent from it until it is resumed. Its scheduled messages are held, not cancelled. A manual pause is never lifted automatically.
Before you start
- Verify the intended environment, signed-in credential, authorized organization and the action permission workspace:write.
- Discover and select an authorized canonical Engage workspace. Pass resourceType=workspace and resourceId separately from action input.
- Review the exact effects and obtain approval before CLI --confirm or MCP confirm:true. A local capture does not authorize a live mutation.
Discover the target
topolo whoami --json
topolo actions get app_topolo_engage.seats.pause --json
topolo workspaces list topolo-engage --json
Set ENGAGE_WORKSPACE_ID to the identifier of the selected authorized workspace.
Input contract
| Field | Required | Declared constraints |
|---|---|---|
id | Yes | {"type":"string","minLength":1,"maxLength":128} |
reason | No | {"type":"string","minLength":1,"maxLength":500} |
Validate, plan and execute
Build payload.json from the current schema and discovered identifiers. The action description above defines its behavior, limits, side effects and declared errors.
: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions validate app_topolo_engage.seats.pause --data @payload.json --json
topolo actions plan app_topolo_engage.seats.pause --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --confirm --json
Review the plan and approve its exact effects before executing the unchanged request.
: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions call app_topolo_engage.seats.pause --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --confirm --json
For MCP, use topolo_get_action, topolo_validate_action, topolo_plan_action and topolo_call_action. Pass resource context separately where required; confirm:true is required for mutations.
Captured successful requests and responses
Captured HTTP 200 · sender health enforcement > leaves a seat under the minimum volume, and never rewrites a manual pause
Action input
{
"id": "eng_seat_2",
"reason": "manual"
}
Actual local response
{
"seat": {
"id": "eng_seat_2",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "b@other.io",
"status": "paused",
"pauseReason": "manual",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 50,
"bounced": 0,
"optedOut": 50,
"bounceRate": 0,
"optOutRate": 1,
"healthy": false,
"sentToday": 50,
"warmupCap": 25
}
}
}
Source test: sender health enforcement > leaves a seat under the minimum volume, and never rewrites a manual pause. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · the run ledger > records a seat_paused hold
Action input
{
"id": "eng_seat_1"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "manual",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 0,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 0,
"warmupCap": 25
}
}
}
Source test: the run ledger > records a seat_paused hold. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · runDueSends > seat health auto-pause > pauses on opt-outs, and never lifts a manual pause
Action input
{
"id": "eng_seat_1",
"reason": "manual"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "manual",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 20,
"bounced": 0,
"optedOut": 2,
"bounceRate": 0,
"optOutRate": 0.1,
"healthy": false,
"sentToday": 0,
"warmupCap": 25
}
}
}
Source test: runDueSends > seat health auto-pause > pauses on opt-outs, and never lifts a manual pause. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · reply inbox actions > threads.reply > refuses with 409 while stopped, the seat is paused or has no mailbox, the contact is gone or unsubscribed
Action input
{
"id": "eng_seat_1",
"reason": "manual"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "manual",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 1,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 1,
"warmupCap": 25
}
}
}
Source test: reply inbox actions > threads.reply > refuses with 409 while stopped, the seat is paused or has no mailbox, the contact is gone or unsubscribed. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · runDueSends > hold order > global cap first: holds once the workspace reached its daily cap, until the next day's window
Action input
{
"id": "eng_seat_1"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "manual",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 1,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 1,
"warmupCap": 25
}
}
}
Source test: runDueSends > hold order > global cap first: holds once the workspace reached its daily cap, until the next day's window. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · seats.resume with a breach > refuses while the breach holds, and needs a note to override
Action input
{
"id": "eng_seat_1",
"reason": "health_hard_bounce_rate"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "health_hard_bounce_rate",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 20,
"bounced": 2,
"optedOut": 0,
"bounceRate": 0.1,
"optOutRate": 0,
"healthy": false,
"sentToday": 20,
"warmupCap": 25
}
}
}
Source test: seats.resume with a breach > refuses while the breach holds, and needs a note to override. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · seat mailbox actions > reads the mailbox status: active resumes a needs-reauth pause, never a manual one
Action input
{
"id": "eng_seat_1",
"reason": "mailbox_needs_reauth"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ash",
"fromAddress": "ash@example.com",
"status": "paused",
"pauseReason": "mailbox_needs_reauth",
"timezone": "Europe/London",
"warmup": {
"startDate": "2026-10-01",
"startLimit": 10,
"dailyIncrease": 3,
"maxLimit": 50
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 0,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 0,
"warmupCap": 25
}
}
}
Source test: seat mailbox actions > reads the mailbox status: active resumes a needs-reauth pause, never a manual one. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · seat routes > edits, pauses and resumes a seat
Action input
{
"id": "eng_seat_1"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ashley",
"fromAddress": "ashley@example.com",
"status": "paused",
"pauseReason": "manual",
"timezone": "America/New_York",
"warmup": {
"startDate": "2026-10-02",
"startLimit": 5,
"dailyIncrease": 2,
"maxLimit": 25
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 0,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 0,
"warmupCap": 13
}
}
}
Source test: seat routes > edits, pauses and resumes a seat. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Captured HTTP 200 · seat routes > edits, pauses and resumes a seat
Action input
{
"id": "eng_seat_1",
"reason": "Mailbox review"
}
Actual local response
{
"seat": {
"id": "eng_seat_1",
"nexusMailboxId": "mbsender_1",
"mailboxStatus": "active",
"mailboxCheckedAt": "2026-10-06T08:30:00.000Z",
"whatsappConnectionId": null,
"displayName": "Ashley",
"fromAddress": "ashley@example.com",
"status": "paused",
"pauseReason": "Mailbox review",
"timezone": "America/New_York",
"warmup": {
"startDate": "2026-10-02",
"startLimit": 5,
"dailyIncrease": 2,
"maxLimit": 25
},
"createdAt": "2026-10-06T08:30:00.000Z",
"updatedAt": "2026-10-06T08:30:00.000Z",
"health": {
"windowDays": 14,
"sent": 0,
"bounced": 0,
"optedOut": 0,
"bounceRate": 0,
"optOutRate": 0,
"healthy": true,
"sentToday": 0,
"warmupCap": 13
}
}
}
Source test: seat routes > edits, pauses and resumes a seat. Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
Effects and response meaning
- Operator kill switch for one seat: nothing is sent from it until it is resumed. Its scheduled messages are held, not cancelled. A manual pause is never lifted automatically.
Verify the outcome
- Check the response against the declared output schema and the requested operation. For mutations, use the action-specific read described in the action description before any dependent operation.
Recover
For an uncertain result, inspect current retained state with a read action before retrying. Do not replay a mutation unless its contract explicitly guarantees idempotency.
Refused requests
No refusal response for this action is present in the selected capture set.
Error recovery
Related actions
- List sending seats
- Create sending seat
- Get sending seat
- Update sending seat
- Resume sending seat
- Start mailbox connection (Google or Microsoft)
- Connect IMAP/SMTP mailbox
- Bind mailbox to seat
- Check seat mailbox
- Set seat WhatsApp number
- List seat health
- Get seat health
Evidence and limits
-
/api/seats/{id}/pause -
Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.
-
Widget/bootstrap use actual app handler but mocked worker runtime and app identity.
-
No gateway execution, live permissions, external delivery or deployed proof.
These are local route captures with synthetic identity and simulated dependencies. They do not prove live authorization, gateway execution, production state, or external delivery.