@agentxv2/gateway 0.1.1

package/dist/middleware/auth.js

@@ -0,0 +1,192 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Auth Middleware
+// ---------------------------------------------------------------------------
+// EIP-191 wallet signature auth + JWT + auto tenant creation.
+// ---------------------------------------------------------------------------
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getChallenge = getChallenge;
+exports.verifyChallenge = verifyChallenge;
+exports.authMiddleware = authMiddleware;
+const crypto_1 = __importDefault(require("crypto"));
+const ethers_1 = require("ethers");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const config_1 = require("../config");
+const db_1 = require("../lib/db");
+const rate_limiter_1 = require("./rate-limiter");
+// Challenge TTL in seconds (matches the 5-minute window)
+const CHALLENGE_TTL_SEC = 5 * 60;
+/**
+ * Store a challenge in Redis so it works across PM2 cluster workers.
+ * Falls back to an in-memory Map when Redis is unavailable (single-process dev).
+ */
+const fallbackMap = new Map();
+function challengeKey(address) {
+    return `auth:challenge:${address}`;
+}
+async function saveChallenge(address, challenge) {
+    const r = (0, rate_limiter_1.getRedis)();
+    if (r) {
+        await r.setex(challengeKey(address), CHALLENGE_TTL_SEC, JSON.stringify(challenge));
+    }
+    else {
+        fallbackMap.set(address, challenge);
+    }
+}
+async function loadChallenge(address) {
+    const r = (0, rate_limiter_1.getRedis)();
+    if (r) {
+        const raw = await r.get(challengeKey(address));
+        if (raw)
+            return JSON.parse(raw);
+        return undefined;
+    }
+    return fallbackMap.get(address);
+}
+async function deleteChallenge(address) {
+    const r = (0, rate_limiter_1.getRedis)();
+    if (r) {
+        await r.del(challengeKey(address));
+    }
+    else {
+        fallbackMap.delete(address);
+    }
+}
+async function getChallenge(req, res) {
+    const address = (req.query.address || '').toLowerCase();
+    if (!address) {
+        res.status(400).json({ error: 'Missing wallet address' });
+        return;
+    }
+    const timestamp = Math.floor(Date.now() / 1000);
+    const nonce = crypto_1.default.randomBytes(16).toString('hex');
+    const message = `agentx:auth:${timestamp}:${nonce}`;
+    await saveChallenge(address, { address, timestamp, nonce });
+    res.json({ challenge: message, timestamp, nonce });
+}
+async function verifyChallenge(req, res) {
+    const { wallet_address, signature, timestamp, nonce } = req.body;
+    if (!wallet_address || !signature) {
+        res.status(400).json({ error: 'Missing wallet_address or signature' });
+        return;
+    }
+    const address = wallet_address.toLowerCase();
+    const challenge = await loadChallenge(address);
+    if (!challenge || challenge.nonce !== nonce) {
+        res.status(401).json({ error: 'Challenge expired or not found. Please request a new challenge.' });
+        return;
+    }
+    const expectedMessage = `agentx:auth:${timestamp}:${nonce}`;
+    let recovered;
+    try {
+        recovered = ethers_1.ethers.verifyMessage(expectedMessage, signature).toLowerCase();
+    }
+    catch {
+        res.status(401).json({ error: 'Invalid signature' });
+        return;
+    }
+    if (recovered !== address) {
+        res.status(401).json({ error: 'Signature does not match wallet address' });
+        return;
+    }
+    await deleteChallenge(address);
+    const pool = (0, db_1.getPool)();
+    let tenant = null;
+    const existing = await pool.query(`SELECT t.id, t.wallet_address, t.status,
+            t.quota_daily, t.quota_used, t.rate_limit_rpm, t.max_concurrent,
+            p.id as plan_id, p.slug as plan_slug
+     FROM tenants t
+     LEFT JOIN plans p ON t.plan_id = p.id
+     WHERE LOWER(t.wallet_address) = $1`, [address]);
+    if (existing.rows.length > 0) {
+        const row = existing.rows[0];
+        if (row.status === 'suspended') {
+            res.status(403).json({ error: 'Account suspended' });
+            return;
+        }
+        tenant = {
+            id: row.id,
+            walletAddress: row.wallet_address,
+            planId: row.plan_id || '',
+            planSlug: row.plan_slug || 'free',
+            quotaDaily: row.quota_daily,
+            quotaUsed: row.quota_used,
+            rateLimitRpm: row.rate_limit_rpm,
+            maxConcurrent: row.max_concurrent,
+            status: row.status,
+        };
+    }
+    else {
+        const freePlan = await pool.query(`SELECT id FROM plans WHERE slug = 'free' LIMIT 1`);
+        const planId = freePlan.rows[0]?.id || null;
+        const inserted = await pool.query(`INSERT INTO tenants (wallet_address, plan_id, quota_daily, rate_limit_rpm, max_concurrent)
+       VALUES ($1, $2, $3, $4, $5)
+       RETURNING id`, [address, planId, 0, 5, 1]);
+        tenant = {
+            id: inserted.rows[0].id,
+            walletAddress: address,
+            planId: planId || '',
+            planSlug: 'free',
+            quotaDaily: 0,
+            quotaUsed: 0,
+            rateLimitRpm: 5,
+            maxConcurrent: 1,
+            status: 'active',
+        };
+    }
+    const token = jsonwebtoken_1.default.sign({ tenantId: tenant.id, walletAddress: tenant.walletAddress }, config_1.config.jwtSecret, { expiresIn: config_1.config.sessionTtlSec });
+    res.json({ access_token: token, expires_in: config_1.config.sessionTtlSec, tenant });
+}
+function authMiddleware(req, res, next) {
+    const authHeader = req.headers.authorization;
+    if (!authHeader || !authHeader.startsWith('Bearer ')) {
+        res.status(401).json({ error: 'Missing or invalid Authorization header' });
+        return;
+    }
+    const token = authHeader.slice(7);
+    let decoded;
+    try {
+        decoded = jsonwebtoken_1.default.verify(token, config_1.config.jwtSecret);
+    }
+    catch {
+        res.status(401).json({ error: 'Invalid or expired token' });
+        return;
+    }
+    (0, db_1.getPool)()
+        .query(`SELECT t.id, t.wallet_address, t.status,
+              t.quota_daily, t.quota_used, t.rate_limit_rpm, t.max_concurrent,
+              p.id as plan_id, p.slug as plan_slug
+       FROM tenants t
+       LEFT JOIN plans p ON t.plan_id = p.id
+       WHERE t.id = $1`, [decoded.tenantId])
+        .then(r => {
+        if (r.rows.length === 0) {
+            res.status(401).json({ error: 'Tenant not found' });
+            return;
+        }
+        const row = r.rows[0];
+        if (row.status === 'suspended') {
+            res.status(403).json({ error: 'Account suspended' });
+            return;
+        }
+        req.tenant = {
+            id: row.id,
+            walletAddress: row.wallet_address,
+            planId: row.plan_id || '',
+            planSlug: row.plan_slug || 'free',
+            quotaDaily: row.quota_daily,
+            quotaUsed: row.quota_used,
+            rateLimitRpm: row.rate_limit_rpm,
+            maxConcurrent: row.max_concurrent,
+            status: row.status,
+        };
+        next();
+    })
+        .catch(err => {
+        next(err);
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;;;;;AA6E9E,oCAcC;AAED,0CA4FC;AAED,wCAoDC;AA7OD,oDAA2B;AAE3B,mCAA+B;AAC/B,gEAA8B;AAC9B,sCAAkC;AAClC,kCAAmC;AACnC,iDAAyC;AA4BzC,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,CAAA;AAEhC;;;GAGG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAA;AAEhD,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,kBAAkB,OAAO,EAAE,CAAA;AACpC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,SAAoB;IAChE,MAAM,CAAC,GAAG,IAAA,uBAAQ,GAAE,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;IACpF,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,CAAC,GAAG,IAAA,uBAAQ,GAAE,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;QAC9C,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAA;QAC5C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe;IAC5C,MAAM,CAAC,GAAG,IAAA,uBAAQ,GAAE,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa;IAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAiB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAA;QACzD,OAAM;IACR,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,eAAe,SAAS,IAAI,KAAK,EAAE,CAAA;IAEnD,MAAM,aAAa,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;IAE3D,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AACpD,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IAC/D,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAA;IAEhE,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAA;QACtE,OAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;IAE9C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAA;QAClG,OAAM;IACR,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,SAAS,IAAI,KAAK,EAAE,CAAA;IAC3D,IAAI,SAAiB,CAAA;IACrB,IAAI,CAAC;QACH,SAAS,GAAG,eAAM,CAAC,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;QACpD,OAAM;IACR,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IAED,MAAM,eAAe,CAAC,OAAO,CAAC,CAAA;IAE9B,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;IACtB,IAAI,MAAM,GAAyB,IAAI,CAAA;IAEvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;wCAKoC,EACpC,CAAC,OAAO,CAAC,CACV,CAAA;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,MAAM,GAAG;YACP,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM;YACjC,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,YAAY,EAAE,GAAG,CAAC,cAAc;YAChC,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAA;QAE3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;oBAEc,EACd,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAC3B,CAAA;QACD,MAAM,GAAG;YACP,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACvB,aAAa,EAAE,OAAO;YACtB,MAAM,EAAE,MAAM,IAAI,EAAE;YACpB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;YACZ,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,MAAM,EAAE,QAAQ;SACjB,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,sBAAG,CAAC,IAAI,CACpB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,EAC5D,eAAM,CAAC,SAAS,EAChB,EAAE,SAAS,EAAE,eAAM,CAAC,aAAa,EAAE,CACpC,CAAA;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,eAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,SAAgB,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC5E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;IAC5C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,OAAoD,CAAA;IACxD,IAAI,CAAC;QACH,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAM,CAAC,SAAS,CAAmB,CAAA;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAA;QAC3D,OAAM;IACR,CAAC;IAED,IAAA,YAAO,GAAE;SACN,KAAK,CACJ;;;;;uBAKiB,EACjB,CAAC,OAAO,CAAC,QAAQ,CAAC,CACnB;SACA,IAAI,CAAC,CAAC,CAAC,EAAE;QACR,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,GAAG,CAAC,MAAM,GAAG;YACX,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM;YACjC,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,YAAY,EAAE,GAAG,CAAC,cAAc;YAChC,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAA;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE;QACX,IAAI,CAAC,GAAG,CAAC,CAAA;IACX,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/middleware/error-handler.d.ts

@@ -0,0 +1,36 @@
+import { Request, Response, NextFunction } from 'express';
+export declare class AppError extends Error {
+    readonly statusCode: number;
+    readonly code: string;
+    readonly expose: boolean;
+    constructor(message: string, statusCode?: number, code?: string, expose?: boolean);
+}
+export declare class BadRequestError extends AppError {
+    constructor(message?: string);
+}
+export declare class UnauthorizedError extends AppError {
+    constructor(message?: string);
+}
+export declare class ForbiddenError extends AppError {
+    constructor(message?: string);
+}
+export declare class NotFoundError extends AppError {
+    constructor(message?: string);
+}
+export declare class ConflictError extends AppError {
+    constructor(message?: string);
+}
+export declare class TooManyRequestsError extends AppError {
+    constructor(message?: string);
+}
+/**
+ * Centralized Express error handler.
+ * - AppError subclasses → use their statusCode + expose message
+ * - Unknown errors → 500 with safe message (no leak)
+ */
+export declare function globalErrorHandler(err: Error, _req: Request, res: Response, _next: NextFunction): void;
+/**
+ * Async route wrapper — catches thrown errors and forwards them to next().
+ * Usage: router.get('/path', asyncHandler(async (req, res) => { ... }))
+ */
+export declare function asyncHandler(fn: (req: Request, res: Response, next: NextFunction) => Promise<void>): (req: Request, res: Response, next: NextFunction) => void;

package/dist/middleware/error-handler.js

@@ -0,0 +1,100 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Unified Error Handler
+// ---------------------------------------------------------------------------
+// AppError hierarchy + global Express error middleware.
+// Replaces scattered res.status(500).json({ error: err.message }) patterns.
+// ---------------------------------------------------------------------------
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TooManyRequestsError = exports.ConflictError = exports.NotFoundError = exports.ForbiddenError = exports.UnauthorizedError = exports.BadRequestError = exports.AppError = void 0;
+exports.globalErrorHandler = globalErrorHandler;
+exports.asyncHandler = asyncHandler;
+// ── Error Classes ────────────────────────────────────────────────────────
+class AppError extends Error {
+    statusCode;
+    code;
+    expose;
+    constructor(message, statusCode = 500, code = 'INTERNAL_ERROR', expose = false) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.expose = expose;
+        Object.setPrototypeOf(this, AppError.prototype);
+    }
+}
+exports.AppError = AppError;
+class BadRequestError extends AppError {
+    constructor(message = 'Bad request') {
+        super(message, 400, 'BAD_REQUEST', true);
+    }
+}
+exports.BadRequestError = BadRequestError;
+class UnauthorizedError extends AppError {
+    constructor(message = 'Unauthorized') {
+        super(message, 401, 'UNAUTHORIZED', true);
+    }
+}
+exports.UnauthorizedError = UnauthorizedError;
+class ForbiddenError extends AppError {
+    constructor(message = 'Forbidden') {
+        super(message, 403, 'FORBIDDEN', true);
+    }
+}
+exports.ForbiddenError = ForbiddenError;
+class NotFoundError extends AppError {
+    constructor(message = 'Not found') {
+        super(message, 404, 'NOT_FOUND', true);
+    }
+}
+exports.NotFoundError = NotFoundError;
+class ConflictError extends AppError {
+    constructor(message = 'Conflict') {
+        super(message, 409, 'CONFLICT', true);
+    }
+}
+exports.ConflictError = ConflictError;
+class TooManyRequestsError extends AppError {
+    constructor(message = 'Too many requests') {
+        super(message, 429, 'TOO_MANY_REQUESTS', true);
+    }
+}
+exports.TooManyRequestsError = TooManyRequestsError;
+// ── Global Error Handler Middleware ───────────────────────────────────────
+/**
+ * Centralized Express error handler.
+ * - AppError subclasses → use their statusCode + expose message
+ * - Unknown errors → 500 with safe message (no leak)
+ */
+function globalErrorHandler(err, _req, res, _next) {
+    if (res.headersSent)
+        return;
+    if (err instanceof AppError) {
+        const body = {
+            error: err.expose ? err.message : 'Internal server error',
+            code: err.code,
+        };
+        // Attach details only in development
+        if (process.env.NODE_ENV === 'development' && !err.expose) {
+            body.detail = err.message;
+        }
+        res.status(err.statusCode).json(body);
+        return;
+    }
+    // Unknown / unexpected error — never leak message to client
+    console.error('[Gateway Error]', err);
+    res.status(500).json({
+        error: 'Internal server error',
+        code: 'INTERNAL_ERROR',
+        ...(process.env.NODE_ENV === 'development' ? { detail: err.message } : {}),
+    });
+}
+/**
+ * Async route wrapper — catches thrown errors and forwards them to next().
+ * Usage: router.get('/path', asyncHandler(async (req, res) => { ... }))
+ */
+function asyncHandler(fn) {
+    return (req, res, next) => {
+        fn(req, res, next).catch(next);
+    };
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/middleware/error-handler.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAC9E,wDAAwD;AACxD,4EAA4E;AAC5E,8EAA8E;;;AA+D9E,gDA4BC;AAMD,oCAMC;AAnGD,4EAA4E;AAE5E,MAAa,QAAS,SAAQ,KAAK;IACjB,UAAU,CAAQ;IAClB,IAAI,CAAQ;IACZ,MAAM,CAAS;IAE/B,YAAY,OAAe,EAAE,UAAU,GAAG,GAAG,EAAE,IAAI,GAAG,gBAAgB,EAAE,MAAM,GAAG,KAAK;QACpF,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IACjD,CAAC;CACF;AAZD,4BAYC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAO,GAAG,aAAa;QACjC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC;CACF;AAJD,0CAIC;AAED,MAAa,iBAAkB,SAAQ,QAAQ;IAC7C,YAAY,OAAO,GAAG,cAAc;QAClC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC;CACF;AAJD,8CAIC;AAED,MAAa,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAO,GAAG,WAAW;QAC/B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC;CACF;AAJD,wCAIC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAO,GAAG,WAAW;QAC/B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC;CACF;AAJD,sCAIC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAO,GAAG,UAAU;QAC9B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IACvC,CAAC;CACF;AAJD,sCAIC;AAED,MAAa,oBAAqB,SAAQ,QAAQ;IAChD,YAAY,OAAO,GAAG,mBAAmB;QACvC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;CACF;AAJD,oDAIC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,GAAU,EACV,IAAa,EACb,GAAa,EACb,KAAmB;IAEnB,IAAI,GAAG,CAAC,WAAW;QAAE,OAAM;IAE3B,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;YACzD,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAA;QACD,qCAAqC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAA;QAC3B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,OAAM;IACR,CAAC;IAED,4DAA4D;IAC5D,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAA;IACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,gBAAgB;QACtB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAC1B,EAAsE;IAEtE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC,CAAA;AACH,CAAC"}

package/dist/middleware/rate-limiter.d.ts

@@ -0,0 +1,5 @@
+import { Request, Response, NextFunction } from 'express';
+import Redis from 'ioredis';
+export declare function getRedis(): Redis | null;
+export declare function tenantRateLimiter(req: Request, res: Response, next: NextFunction): Promise<void>;
+export declare function updateQuota(tenantId: string, tokens: number): Promise<void>;

package/dist/middleware/rate-limiter.js

@@ -0,0 +1,107 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Rate Limiter Middleware
+// ---------------------------------------------------------------------------
+// Three-layer rate limiting:
+//   1. Global IP-level (express-rate-limit)
+//   2. Per-tenant RPM (Redis sliding window)
+//   3. Per-tenant daily quota (Redis counter + DB fallback)
+//   4. Per-tenant concurrency control (Redis)
+// ---------------------------------------------------------------------------
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRedis = getRedis;
+exports.tenantRateLimiter = tenantRateLimiter;
+exports.updateQuota = updateQuota;
+const ioredis_1 = __importDefault(require("ioredis"));
+const config_1 = require("../config");
+const db_1 = require("../lib/db");
+let redis = null;
+function getRedis() {
+    if (!redis) {
+        redis = new ioredis_1.default(config_1.config.redisUrl, { lazyConnect: true });
+        redis.connect().catch(() => {
+            redis = null;
+        });
+    }
+    return redis;
+}
+async function tenantRateLimiter(req, res, next) {
+    const tenant = req.tenant;
+    if (!tenant) {
+        next();
+        return;
+    }
+    const r = getRedis();
+    if (!r) {
+        next();
+        return;
+    }
+    try {
+        // 1. RPM check
+        const rpmKey = `rpm:${tenant.id}`;
+        const rpmCurrent = await r.incr(rpmKey);
+        if (rpmCurrent === 1) {
+            await r.expire(rpmKey, 60);
+        }
+        if (rpmCurrent > tenant.rateLimitRpm) {
+            res.status(429).json({
+                error: 'Rate limit exceeded',
+                retry_after: 60,
+                limit: tenant.rateLimitRpm,
+                limit_type: 'rpm',
+            });
+            return;
+        }
+        // 2. Daily quota check (only for platform mode)
+        if (tenant.quotaDaily > 0) {
+            const quotaKey = `quota:${tenant.id}`;
+            const used = await r.get(quotaKey);
+            const current = used ? parseInt(used, 10) : tenant.quotaUsed;
+            if (current >= tenant.quotaDaily) {
+                res.status(429).json({
+                    error: 'Daily quota exceeded. Upgrade your plan or switch to BYOK mode.',
+                    limit: tenant.quotaDaily,
+                    used: current,
+                    limit_type: 'daily_quota',
+                });
+                return;
+            }
+        }
+        // 3. Concurrency check
+        const concurrencyKey = `concurrent:${tenant.id}`;
+        const currentConcurrent = await r.incr(concurrencyKey);
+        await r.expire(concurrencyKey, 300);
+        if (currentConcurrent > tenant.maxConcurrent) {
+            await r.decr(concurrencyKey);
+            res.status(429).json({
+                error: 'Too many concurrent requests',
+                limit: tenant.maxConcurrent,
+                limit_type: 'concurrency',
+            });
+            return;
+        }
+        res.on('finish', () => {
+            r.decr(concurrencyKey).catch(() => { });
+        });
+        next();
+    }
+    catch {
+        next();
+    }
+}
+async function updateQuota(tenantId, tokens) {
+    const r = getRedis();
+    if (r) {
+        const quotaKey = `quota:${tenantId}`;
+        await r.incrby(quotaKey, tokens);
+        await r.expire(quotaKey, 86400);
+    }
+    else {
+        const pool = (0, db_1.getPool)();
+        await pool.query(`UPDATE tenants SET quota_used = quota_used + $2 WHERE id = $1`, [tenantId, tokens]);
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/middleware/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/middleware/rate-limiter.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAC9E,6BAA6B;AAC7B,4CAA4C;AAC5C,6CAA6C;AAC7C,4DAA4D;AAC5D,8CAA8C;AAC9C,8EAA8E;;;;;AAS9E,4BAQC;AAED,8CAwEC;AAED,kCAaC;AAvGD,sDAA2B;AAC3B,sCAAkC;AAClC,kCAAmC;AAEnC,IAAI,KAAK,GAAiB,IAAI,CAAA;AAE9B,SAAgB,QAAQ;IACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,IAAI,iBAAK,CAAC,eAAM,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACzB,KAAK,GAAG,IAAI,CAAA;QACd,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,EAAE,CAAA;QACN,OAAM;IACR,CAAC;IAED,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAA;IACpB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,CAAA;QACN,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QACH,eAAe;QACf,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,EAAE,EAAE,CAAA;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC5B,CAAC;QACD,IAAI,UAAU,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,MAAM,CAAC,YAAY;gBAC1B,UAAU,EAAE,KAAK;aAClB,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,gDAAgD;QAChD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,SAAS,MAAM,CAAC,EAAE,EAAE,CAAA;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAA;YAC5D,IAAI,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iEAAiE;oBACxE,KAAK,EAAE,MAAM,CAAC,UAAU;oBACxB,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,aAAa;iBAC1B,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,cAAc,GAAG,cAAc,MAAM,CAAC,EAAE,EAAE,CAAA;QAChD,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACtD,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;QACnC,IAAI,iBAAiB,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,8BAA8B;gBACrC,KAAK,EAAE,MAAM,CAAC,aAAa;gBAC3B,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,IAAI,EAAE,CAAA;IACR,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAA;IACR,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAc;IAChE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,QAAQ,GAAG,SAAS,QAAQ,EAAE,CAAA;QACpC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;QACtB,MAAM,IAAI,CAAC,KAAK,CACd,+DAA+D,EAC/D,CAAC,QAAQ,EAAE,MAAM,CAAC,CACnB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/routes/a2a.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;

package/dist/routes/a2a.js

@@ -0,0 +1,84 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// AgentX Gateway — A2A Task Results API
+// ---------------------------------------------------------------------------
+// GET  /api/v1/a2a/pending-tasks?agentId=X     → tasks ready for agent to complete
+// GET  /api/v1/a2a/task-result/:taskId          → single task LLM result
+// GET  /api/v1/a2a/worker-status                 → A2A worker health
+// ---------------------------------------------------------------------------
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const db_1 = require("../lib/db");
+const a2a_worker_1 = require("../services/a2a-worker");
+const router = (0, express_1.Router)();
+// ── List pending task results for an agent ─────────────────────────────────
+router.get('/pending-tasks', async (req, res) => {
+    try {
+        const agentId = parseInt(req.query.agentId);
+        if (!agentId || isNaN(agentId)) {
+            res.status(400).json({ error: 'agentId query parameter required' });
+            return;
+        }
+        const pool = (0, db_1.getPool)();
+        const { rows } = await pool.query(`SELECT task_id, agent_id, task_type, input_data, output_data, status,
+              llm_model, tokens_used, processed_at, created_at
+       FROM a2a_task_results
+       WHERE agent_id = $1 AND status = 2
+       ORDER BY created_at DESC
+       LIMIT 50`, [agentId]);
+        res.json({ tasks: rows, total: rows.length, agentId });
+    }
+    catch (err) {
+        console.error('[a2a] pending-tasks error:', err.message);
+        res.status(500).json({ error: 'Failed to fetch pending tasks' });
+    }
+});
+// ── Single task result ─────────────────────────────────────────────────────
+router.get('/task-result/:taskId', async (req, res) => {
+    try {
+        const taskId = parseInt(req.params.taskId);
+        if (!taskId || isNaN(taskId)) {
+            res.status(400).json({ error: 'Invalid taskId' });
+            return;
+        }
+        const pool = (0, db_1.getPool)();
+        const { rows } = await pool.query(`SELECT * FROM a2a_task_results WHERE task_id = $1`, [taskId]);
+        if (rows.length === 0) {
+            res.status(404).json({ error: 'Task result not found', taskId });
+            return;
+        }
+        res.json(rows[0]);
+    }
+    catch (err) {
+        console.error('[a2a] task-result error:', err.message);
+        res.status(500).json({ error: 'Failed to fetch task result' });
+    }
+});
+// ── Worker status ──────────────────────────────────────────────────────────
+router.get('/worker-status', async (_req, res) => {
+    try {
+        const status = (0, a2a_worker_1.getWorkerStatus)();
+        const pool = (0, db_1.getPool)();
+        const { rows: stats } = await pool.query(`SELECT status, COUNT(*) as count
+       FROM a2a_task_results
+       GROUP BY status`);
+        const counts = { pending: 0, processing: 0, completed: 0, failed: 0 };
+        for (const r of stats) {
+            if (r.status === 0)
+                counts.pending = Number(r.count);
+            else if (r.status === 1)
+                counts.processing = Number(r.count);
+            else if (r.status === 2)
+                counts.completed = Number(r.count);
+            else if (r.status === 3)
+                counts.failed = Number(r.count);
+        }
+        res.json({ ...status, taskCounts: counts });
+    }
+    catch (err) {
+        console.error('[a2a] worker-status error:', err.message);
+        res.status(500).json({ error: 'Failed to fetch worker status' });
+    }
+});
+exports.default = router;
+//# sourceMappingURL=a2a.js.map

package/dist/routes/a2a.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.js","sourceRoot":"","sources":["../../src/routes/a2a.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAC9E,mFAAmF;AACnF,yEAAyE;AACzE,qEAAqE;AACrE,8EAA8E;;AAE9E,qCAAmD;AACnD,kCAAmC;AACnC,uDAAwD;AAExD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAA;AAEvB,8EAA8E;AAE9E,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAiB,CAAC,CAAA;QACrD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAA;YACnE,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;QACtB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;gBAKU,EACV,CAAC,OAAO,CAAC,CACV,CAAA;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;IAClE,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAE9E,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;YACjD,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;QACtB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mDAAmD,EACnD,CAAC,MAAM,CAAC,CACT,CAAA;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAE9E,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,4BAAe,GAAE,CAAA;QAChC,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;QACtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACtC;;uBAEiB,CAClB,CAAA;QACD,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;QAC7F,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;iBAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;iBACvD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;iBACtD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAC1D,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;IAClE,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,kBAAe,MAAM,CAAA"}

package/dist/routes/admin.d.ts

@@ -0,0 +1,2 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;