InboxPay
InboxPay is a multi-business accounts-payable operator on Arc. Each business connects Gmail through OAuth (api/gmail/start.mjs, callback.mjs) with encrypted tokens and gets an isolated Circle developer-controlled wallet per network via createWalletSet/createWallets in lib/circle-wallets.mjs (ARC-TESTNET and ARC). Invoice emails and PDFs are extracted by lib/gmail-live.mjs and lib/pdf-runtime.mjs, checked against the vendor registry for duplicates, currency and sender identity, and scored by lib/evaluator.mjs into PAY_NOW, HOLD, ESCALATE or SCHEDULE; lib/autonomy.mjs turns approved decisions into durable jobs. Settlement goes through contracts/BusinessPolicyVault.sol, deployed per business with Circle's Smart Contract Platform (lib/policy-contract.mjs), which enforces a vendor allowlist, per-transaction and daily limits, a cash floor, pause control and on-chain duplicate protection in executePayment. Supabase migrations hold the queue, reconciliation and operations-health state and test/BusinessPolicyVault.t.sol covers the vault. Mainnet writes are gated behind INBOXPAY_ALLOW_MAINNET_WRITES. Apache-2.0.
1 (Solo) — Shaly
Bounded accounts payable from Gmail to Circle wallets and Arc USDC settlement.