PactAgent infrastructure for app-scoped agreements, escrow, proof, disputes, events, and webhooks.
The primary integration surface is the `/v1` API. External products create Apps, issue scoped API keys, create agreements and milestones, manage sandbox/mock escrow, receive signed webhooks, and query their own lifecycle events without crossing tenant boundaries.
Operator Access
Wallet access is retained for internal app/admin management. Product-user workflows and legacy agreement screens are secondary to the infrastructure API.
Tenant Boundary
Every external API request resolves to one appId from the API key. Agreements, milestones, proof, disputes, events, webhooks, audit logs, and escrow records stay scoped to that app.
Lifecycle API
Create agreements, attach milestones, create sandbox/mock escrow, submit proof, approve or reject proof, resolve disputes, and release or refund escrow with idempotency.
Signed Integrations
Lifecycle events are queryable and delivered through HMAC-signed webhooks with SSRF checks, retry state, delivery history, and bounded retry windows.
Core API Surface
POST /v1/agreementsPOST /v1/agreements/:id/milestonesPOST /v1/escrowsPOST /v1/proofsPOST /v1/proofs/:id/reviewPOST /v1/disputes/:id/resolveGET /v1/eventsPOST /v1/webhook-endpointsLegacy Product Surface
The old `/api` wallet product routes can be enabled for migration with `ENABLE_LEGACY_PRODUCT_API=true`, but production infrastructure deployments should keep them disabled and integrate through `/v1`.