@agentxv2/gateway 0.1.1

package/dist/services/agent-indexer.js

@@ -0,0 +1,124 @@
+"use strict";
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Agent Indexer (reads chain → stores in PostgreSQL)
+// ---------------------------------------------------------------------------
+// Syncs agent metadata from IdentityRegistry (ERC-721) into the agents table.
+// Handles: IPFS CIDs, base64 data URIs, and malformed tokenURIs.
+// ---------------------------------------------------------------------------
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncAgents = syncAgents;
+const ethers_1 = require("ethers");
+const db_1 = require("../lib/db");
+const config_1 = require("../config");
+const IDENTITY_ABI = [
+    'function tokenURI(uint256 tokenId) view returns (string)',
+    'function ownerOf(uint256 tokenId) view returns (address)',
+];
+// Parse base64 data URI tokenURI → JSON metadata object
+function parseTokenURIToJSON(tokenURI) {
+    if (!tokenURI)
+        return null;
+    if (tokenURI.startsWith('ipfs://'))
+        return null;
+    const match = tokenURI.match(/^data:application\/json;base64,(.+)$/i);
+    if (!match)
+        return null;
+    // Clean up malformed base64: trim everything after the last "==" padding
+    let b64 = match[1];
+    const lastDoubleEq = b64.lastIndexOf('==');
+    if (lastDoubleEq > 0 && lastDoubleEq < b64.length - 2) {
+        b64 = b64.substring(0, lastDoubleEq + 2);
+    }
+    try {
+        const decoded = Buffer.from(b64, 'base64').toString('utf-8');
+        // Try JSON parse first
+        try {
+            return JSON.parse(decoded);
+        }
+        catch {
+            // Unterminated JSON (contract bug): append missing closing quotes/braces
+            let fixed = decoded;
+            // Count unclosed quotes
+            const quoteCount = (fixed.match(/"/g) || []).length;
+            if (quoteCount % 2 !== 0)
+                fixed += '"';
+            // Count unclosed braces
+            const openBraces = (fixed.match(/\{/g) || []).length;
+            const closeBraces = (fixed.match(/\}/g) || []).length;
+            for (let i = closeBraces; i < openBraces; i++)
+                fixed += '}';
+            try {
+                return JSON.parse(fixed);
+            }
+            catch { /* ok */ }
+        }
+        // Regex fallback
+        const nameM = decoded.match(/"name"\s*:\s*"([^"]*)/);
+        if (nameM)
+            return { name: nameM[1] };
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// Extract CID from IPFS tokenURI
+function extractCID(tokenURI) {
+    if (!tokenURI)
+        return null;
+    if (tokenURI.startsWith('ipfs://'))
+        return tokenURI.replace('ipfs://', '').split('/')[0];
+    const match = tokenURI.match(/\/ipfs\/([^/?#]+)/);
+    if (match)
+        return match[1];
+    return null;
+}
+async function syncAgents() {
+    const provider = new ethers_1.ethers.JsonRpcProvider(config_1.config.rpcUrlOxaChain);
+    const contract = new ethers_1.ethers.Contract(config_1.config.identityRegistryOxaChain, IDENTITY_ABI, provider);
+    const pool = (0, db_1.getPool)();
+    let synced = 0;
+    let consecutiveMisses = 0;
+    const MAX_MISSES = 8;
+    const BATCH_SIZE = 10;
+    for (let batchStart = 1; consecutiveMisses < MAX_MISSES; batchStart += BATCH_SIZE) {
+        const batchIds = [];
+        for (let i = batchStart; i < batchStart + BATCH_SIZE && consecutiveMisses < MAX_MISSES; i++) {
+            batchIds.push(i);
+        }
+        const results = await Promise.allSettled(batchIds.map(async (id) => {
+            const [tokenURI, owner] = await Promise.all([
+                contract.tokenURI(id).catch(() => null),
+                contract.ownerOf(id).catch(() => null),
+            ]);
+            if (!tokenURI) {
+                consecutiveMisses++;
+                return null;
+            }
+            consecutiveMisses = 0;
+            const parsed = parseTokenURIToJSON(tokenURI);
+            const name = parsed?.name || `Agent ${id}`;
+            const description = parsed?.description || '';
+            const tags = Array.isArray(parsed?.tags) ? parsed.tags.map(String) : [];
+            const capabilities = Array.isArray(parsed?.capabilities) ? parsed.capabilities.map(String) : [];
+            await pool.query(`INSERT INTO agents (id, owner, name, description, tags, capabilities, token_uri, metadata_json, synced_at, updated_at)
+           VALUES ($1,$2,$3,$4,$5,$6,$7,$8,NOW(),NOW())
+           ON CONFLICT (id) DO UPDATE SET
+             owner = EXCLUDED.owner,
+             name = EXCLUDED.name,
+             description = EXCLUDED.description,
+             tags = EXCLUDED.tags,
+             capabilities = EXCLUDED.capabilities,
+             token_uri = EXCLUDED.token_uri,
+             metadata_json = EXCLUDED.metadata_json,
+             synced_at = NOW(),
+             updated_at = NOW()`, [id, owner || '', name, description, tags, capabilities, tokenURI, JSON.stringify(parsed || {})]);
+            return { id, name, owner };
+        }));
+        synced += results.filter(r => r.status === 'fulfilled' && r.value !== null).length;
+        if (consecutiveMisses >= MAX_MISSES)
+            break;
+    }
+    return { synced, total: synced };
+}
+//# sourceMappingURL=agent-indexer.js.map

package/dist/services/agent-indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-indexer.js","sourceRoot":"","sources":["../../src/services/agent-indexer.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;;AA2D9E,gCA8DC;AAvHD,mCAA+B;AAC/B,kCAAmC;AACnC,sCAAkC;AAElC,MAAM,YAAY,GAAG;IACnB,0DAA0D;IAC1D,0DAA0D;CAC3D,CAAA;AAED,wDAAwD;AACxD,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,yEAAyE;IACzE,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAClB,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC5D,uBAAuB;QACvB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,IAAI,KAAK,GAAG,OAAO,CAAA;YACnB,wBAAwB;YACxB,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;YACnD,IAAI,UAAU,GAAG,CAAC,KAAK,CAAC;gBAAE,KAAK,IAAI,GAAG,CAAA;YACtC,wBAAwB;YACxB,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;YACpD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;YACrD,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE;gBAAE,KAAK,IAAI,GAAG,CAAA;YAC3D,IAAI,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrD,CAAC;QACD,iBAAiB;QACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QACpD,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC;AAED,iCAAiC;AACjC,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACjD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAA;AACb,CAAC;AAEM,KAAK,UAAU,UAAU;IAC9B,MAAM,QAAQ,GAAG,IAAI,eAAM,CAAC,eAAe,CAAC,eAAM,CAAC,cAAc,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,wBAAwB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;IAC7F,MAAM,IAAI,GAAG,IAAA,YAAO,GAAE,CAAA;IAEtB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,MAAM,UAAU,GAAG,CAAC,CAAA;IACpB,MAAM,UAAU,GAAG,EAAE,CAAA;IAErB,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,iBAAiB,GAAG,UAAU,EAAE,UAAU,IAAI,UAAU,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,UAAU,GAAG,UAAU,IAAI,iBAAiB,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5F,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACxB,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;gBACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aACvC,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,EAAE,CAAA;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,iBAAiB,GAAG,CAAC,CAAA;YACrB,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;YAE5C,MAAM,IAAI,GAAI,MAAM,EAAE,IAAe,IAAI,SAAS,EAAE,EAAE,CAAA;YACtD,MAAM,WAAW,GAAI,MAAM,EAAE,WAAsB,IAAI,EAAE,CAAA;YACzD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACvE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAE/F,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;;;;;;gCAWsB,EACtB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CACjG,CAAA;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC5B,CAAC,CAAC,CACH,CAAA;QAED,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAA;QAElF,IAAI,iBAAiB,IAAI,UAAU;YAAE,MAAK;IAC5C,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAClC,CAAC"}

package/e2e_wallet.js

@@ -0,0 +1,175 @@
+const { ethers } = require('ethers');
+
+const RPC_URL = 'http://43.156.99.215:18545';
+const PK = '0x5a74fd11c022e5e1fdc099e9971ebcdbad8b813f91fa99e6861bc0bcac99e094';
+const GW = 'http://localhost:3090';
+
+const contracts = {
+  identity: '0xbf5F9db266c8c97E3334466C88597Eb758AfE212',
+  sub: '0x019AC9d945467478Dd371CDbD70cb2f325800E6B',
+  rep: '0x6a18C2664E1b42063860d864b6448b824d7B843F',
+  cfg: '0x07280674ccc2898Fd038A9e3C22005CA83ffD2F8',
+  ep: '0xB361d04F49000013FC131D3C59C41c8486C64f8c',
+};
+
+const ID_ABI = [
+  'function register(string tokenURI) payable returns (uint256)',
+  'function agentExists(uint256) view returns (bool)',
+  'function getCurrentAgentId() view returns (uint256)',
+  'function getAgentsByOwner(address) view returns (uint256[])',
+  'function tokenURI(uint256) view returns (string)',
+];
+const CFG_ABI = [
+  'function setConfig(uint256,string,string,string) returns (bool)',
+  'function getAgentConfigs(uint256) view returns (tuple(uint256,uint256,string,string,string,string,bool,uint256,uint256,address)[])',
+];
+const REP_ABI = [
+  'function setFeedback(uint256,uint8) returns (bool)',
+  'function getReputationSummary(uint256,address[],bytes32,bytes32) view returns (uint64,uint8)',
+];
+
+let results = [];
+let p = 0, f = 0;
+
+function log(t, s, d) {
+  const icon = s === 'PASS' ? '✅' : s === 'SKIP' ? '⚠️' : '❌';
+  if (s === 'PASS') p++; else if (s === 'FAIL') f++;
+  results.push({ test: t, status: s, detail: d });
+  console.log(icon + ' [' + s + '] ' + t + (d ? ': ' + d.substring(0, 100) : ''));
+}
+
+async function mcp(name, args) {
+  const r = await fetch(GW + '/mcp', {
+    method: 'POST', headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/call', params: { name, arguments: { chain: 'oxachain', ...args } } }),
+  });
+  return r.json();
+}
+
+async function main() {
+  console.log('=== AgentX E2E Wallet Injection Test ===\n');
+  const provider = new ethers.JsonRpcProvider(RPC_URL);
+  const wallet = new ethers.Wallet(PK, provider);
+  const bal = await provider.getBalance(wallet.address);
+  console.log('Wallet: ' + wallet.address + '\nBalance: ' + ethers.formatEther(bal) + ' T0x\n');
+
+  const id = new ethers.Contract(contracts.identity, ID_ABI, wallet);
+  const cfg = new ethers.Contract(contracts.cfg, CFG_ABI, wallet);
+  const rep = new ethers.Contract(contracts.rep, REP_ABI, wallet);
+
+  let currentId = Number(await id.getCurrentAgentId());
+  let agentIds = [];
+  console.log('Current total agents: ' + currentId + '\n');
+
+  // TEST 1: Register 3 Agents
+  console.log('--- [1] Register 3 Agents ---');
+  const names = ['E2E-Alpha', 'E2E-Beta', 'E2E-Gamma'];
+  for (let i = 0; i < 3; i++) {
+    try {
+      const tx = await id.register('ipfs://QmE2E' + names[i], { gasLimit: 300000 });
+      const r = await tx.wait();
+      agentIds.push(currentId + i + 1);
+      log('Register ' + names[i], 'PASS', 'agentId=' + agentIds[i] + ' gas=' + r.gasUsed);
+    } catch (e) { log('Register ' + names[i], 'FAIL', e.reason || e.message?.substring(0, 80)); }
+  }
+
+  // TEST 2: Verify Agents
+  console.log('\n--- [2] Verify Agents ---');
+  for (const aid of agentIds) {
+    try {
+      const ex = await id.agentExists(aid);
+      const uri = await id.tokenURI(aid);
+      log('Agent ' + aid + ' exists', 'PASS', 'exists=' + ex + ' uri=' + uri);
+    } catch (e) { log('Agent ' + aid, 'FAIL', e.message?.substring(0, 80)); }
+  }
+
+  // TEST 3: List owned
+  console.log('\n--- [3] List Owned Agents ---');
+  try {
+    const owned = await id.getAgentsByOwner(wallet.address);
+    log('getAgentsByOwner', 'PASS', 'ids=[' + owned.map(n => Number(n)).join(',') + ']');
+  } catch (e) { log('getAgentsByOwner', 'FAIL', e.message?.substring(0, 80)); }
+
+  // TEST 4: Configure
+  console.log('\n--- [4] Configure Agents ---');
+  for (let i = 0; i < agentIds.length; i++) {
+    try {
+      const tx = await cfg.setConfig(agentIds[i], 'greeting', 'Hello from ' + names[i] + '!', 'string', { gasLimit: 200000 });
+      await tx.wait();
+      log('Config Agent ' + agentIds[i], 'PASS', 'greeting set');
+    } catch (e) { log('Config Agent ' + agentIds[i], 'FAIL', e.reason || e.message?.substring(0, 80)); }
+  }
+
+  // TEST 5: Rate
+  console.log('\n--- [5] Rate Agents ---');
+  const scores = [5, 4, 5];
+  for (let i = 0; i < agentIds.length; i++) {
+    try {
+      const tx = await rep.setFeedback(agentIds[i], scores[i], { gasLimit: 200000 });
+      await tx.wait();
+      log('Rate Agent ' + agentIds[i], 'PASS', 'score=' + scores[i]);
+    } catch (e) { log('Rate Agent ' + agentIds[i], 'FAIL', e.reason || e.message?.substring(0, 80)); }
+  }
+
+  // TEST 6: MCP Integration
+  console.log('\n--- [6] MCP Integration ---');
+  try {
+    const r = await mcp('agentx_identity_list', { ownerAddress: wallet.address });
+    const t = JSON.parse(r?.result?.content?.[0]?.text || '{}');
+    log('MCP identity_list', 'PASS', 'found ' + (t.agentIds?.length || 0) + ' agents');
+  } catch (e) { log('MCP identity_list', 'FAIL', e.message?.substring(0, 80)); }
+
+  for (const aid of agentIds) {
+    try {
+      const r = await mcp('agentx_identity_exists', { agentId: aid });
+      const t = JSON.parse(r?.result?.content?.[0]?.text || '{}');
+      log('MCP exists(' + aid + ')', t.exists ? 'PASS' : 'FAIL', 'exists=' + t.exists);
+    } catch (e) { log('MCP exists(' + aid + ')', 'FAIL', e.message?.substring(0, 80)); }
+  }
+
+  for (const aid of agentIds) {
+    try {
+      const r = await mcp('agentx_reputation_get', { agentId: aid });
+      const t = JSON.parse(r?.result?.content?.[0]?.text || '{}');
+      log('MCP reputation(' + aid + ')', 'PASS', 'avg=' + t.averageScore + ' count=' + t.reviewCount);
+    } catch (e) { log('MCP reputation(' + aid + ')', 'FAIL', e.message?.substring(0, 80)); }
+  }
+
+  // TEST 7: Subscription
+  console.log('\n--- [7] Subscription ---');
+  try {
+    const r = await mcp('agentx_subscription_check', { subscriberAddress: wallet.address, agentId: agentIds[0] });
+    const t = JSON.parse(r?.result?.content?.[0]?.text || '{}');
+    log('MCP sub_check', 'PASS', 'active=' + t.active);
+  } catch (e) { log('MCP sub_check', 'FAIL', e.message?.substring(0, 80)); }
+
+  try {
+    const r = await mcp('agentx_subscription_plans', { planId: 1 });
+    const t = JSON.parse(r?.result?.content?.[0]?.text || '{}');
+    log('MCP plans', t.note ? 'SKIP' : 'PASS', t.note || JSON.stringify(t).substring(0, 60));
+  } catch (e) { log('MCP plans', 'FAIL', e.message?.substring(0, 80)); }
+
+  // TEST 8: Auth
+  console.log('\n--- [8] Gateway Auth ---');
+  try {
+    const cRes = await fetch(GW + '/api/v1/auth/challenge?address=' + wallet.address);
+    const c = await cRes.json();
+    if (c.challenge) {
+      log('Auth challenge', 'PASS');
+      const sig = await wallet.signMessage(c.challenge);
+      const vRes = await fetch(GW + '/api/v1/auth/verify', {
+        method: 'POST', headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ address: wallet.address, signature: sig }),
+      });
+      const v = await vRes.json();
+      log('Auth verify', v.token ? 'PASS' : 'FAIL', v.token ? 'JWT issued' : JSON.stringify(v).substring(0, 60));
+    } else { log('Auth challenge', 'FAIL', JSON.stringify(c).substring(0, 80)); }
+  } catch (e) { log('Auth', 'FAIL', e.message?.substring(0, 80)); }
+
+  // SUMMARY
+  const fb = await provider.getBalance(wallet.address);
+  console.log('\n=== SUMMARY: ' + p + ' PASS, ' + f + ' FAIL, ' + (results.length - p - f) + ' SKIP ===');
+  console.log('Gas used: ' + ethers.formatEther(bal - fb) + ' T0x');
+  console.log('Final balance: ' + ethers.formatEther(fb) + ' T0x');
+}
+main().catch(e => { console.error('FATAL:', e); process.exit(1); });

package/ecosystem.config.js

@@ -0,0 +1,17 @@
+module.exports = {
+  apps: [{
+    name: 'agentx-gateway',
+    script: 'dist/index.js',
+    instances: 2,
+    exec_mode: 'cluster',
+    env: {
+      NODE_ENV: 'production',
+      PORT: 3090,
+    },
+    error_file: './logs/err.log',
+    out_file: './logs/out.log',
+    merge_logs: true,
+    max_memory_restart: '512M',
+    node_args: '--max-old-space-size=512',
+  }],
+}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@agentxv2/gateway",
+  "version": "0.1.1",
+  "description": "AgentX Gateway — Multi-tenant LLM proxy with wallet auth, rate limiting, and API key management",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx watch src/index.ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5",
+    "ethers": "^6.13.0",
+    "express": "^4.21.0",
+    "express-rate-limit": "^7.4.0",
+    "helmet": "^8.0.0",
+    "jsonwebtoken": "^9.0.2",
+    "pg": "^8.13.0",
+    "ioredis": "^5.4.1"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.7",
+    "@types/node": "^22.0.0",
+    "@types/pg": "^8.11.10",
+    "tsx": "^4.19.0",
+    "typescript": "^5.5.0"
+  },
+  "license": "MIT"
+}

package/src/config.ts

@@ -0,0 +1,47 @@
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Configuration
+// ---------------------------------------------------------------------------
+
+import dotenv from 'dotenv'
+dotenv.config()
+
+export const config = {
+  port: parseInt(process.env.PORT || '3090', 10),
+  nodeEnv: process.env.NODE_ENV || 'development',
+
+  databaseUrl: process.env.DATABASE_URL || 'postgresql://localhost:5432/agentx_gateway',
+  redisUrl: process.env.REDIS_URL || 'redis://localhost:6379',
+
+  jwtSecret: process.env.JWT_SECRET || 'dev-secret-change-me',
+  masterEncryptionKey: process.env.MASTER_ENCRYPTION_KEY || '',
+
+  sessionTtlSec: parseInt(process.env.SESSION_TTL_SEC || '86400', 10),
+
+  // MCP / On-chain read — Dual-chain
+  // Sepolia
+  rpcUrl: process.env.RPC_URL || 'https://ethereum-sepolia-rpc.publicnode.com',
+  rpcUrlOxaChain: process.env.RPC_URL_OXACHAIN || 'https://rpc-oxa.0xainet.top',
+  chainId: parseInt(process.env.CHAIN_ID || '11155111', 10),
+  chainIdOxaChain: parseInt(process.env.CHAIN_ID_OXACHAIN || '19505', 10),
+
+  identityRegistry: process.env.IDENTITY_REGISTRY || '0xe94ad380d3F8d08a7590eda0C84f354a93F96e5F',
+  identityRegistryOxaChain: process.env.IDENTITY_REGISTRY_OXACHAIN || '0xbf5F9db266c8c97E3334466C88597Eb758AfE212',
+
+  subscriptionManager: process.env.SUBSCRIPTION_MANAGER || '0xC15fE80b9d800abb72121F353a6ae6d6E9077E63',
+  subscriptionManagerOxaChain: process.env.SUBSCRIPTION_MANAGER_OXACHAIN || '0x019AC9d945467478Dd371CDbD70cb2f325800E6B',
+
+  a2aProtocol: process.env.A2A_PROTOCOL || '0x309C7447d89f3087A9924BB686d88df020F7e9cB',
+  a2aProtocolOxaChain: process.env.A2A_PROTOCOL_OXACHAIN || '0x7F42a7dC4A0F3C107664C3750bE1B5B6fa6BEb86',
+
+  reputationRegistry: process.env.REPUTATION_REGISTRY || '0xeb6B410ea71b8d9dA0c96f6A91d35027CE143DC9',
+  reputationRegistryOxaChain: process.env.REPUTATION_REGISTRY_OXACHAIN || '0x6a18C2664E1b42063860d864b6448b824d7B843F',
+
+  configurationRegistry: process.env.CONFIGURATION_REGISTRY || '0x68DcE00e4C9077c94BC68016cD14B09557faEA6c',
+  configurationRegistryOxaChain: process.env.CONFIGURATION_REGISTRY_OXACHAIN || '0x07280674ccc2898Fd038A9e3C22005CA83ffD2F8',
+
+  multiEndpoint: process.env.MULTI_ENDPOINT || '0xEB5e866f186d4B73F97aa0d70B86f2C6e2e21Cb7',
+  multiEndpointOxaChain: process.env.MULTI_ENDPOINT_OXACHAIN || '0xB361d04F49000013FC131D3C59C41c8486C64f8c',
+
+  // A2A Worker wallet (for creating sub-tasks on-chain during multi-agent orchestration)
+  a2aWorkerPrivateKey: process.env.A2A_WORKER_PRIVATE_KEY || '',
+}

package/src/index.ts

@@ -0,0 +1,143 @@
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Entry Point
+// ---------------------------------------------------------------------------
+
+import express from 'express'
+import cors from 'cors'
+import helmet from 'helmet'
+import rateLimit from 'express-rate-limit'
+import { config } from './config'
+import { getChallenge, verifyChallenge, authMiddleware } from './middleware/auth'
+import { tenantRateLimiter } from './middleware/rate-limiter'
+import { globalErrorHandler } from './middleware/error-handler'
+import chatRouter from './routes/chat'
+import tenantRouter from './routes/tenant'
+import historyRouter from './routes/history'
+import mcpRouter from './routes/mcp'
+import agentsRouter from './routes/agents'
+import a2aRouter from './routes/a2a'
+import adminRouter from './routes/admin'
+
+const app = express()
+
+// ── Security ──────────────────────────────────────────────────────────────
+
+app.use(helmet({
+  contentSecurityPolicy: false,
+  crossOriginEmbedderPolicy: false,
+}))
+app.use(cors({
+  origin: process.env.CORS_ORIGIN || '*',
+  credentials: true,
+}))
+
+// ── Global rate limit ─────────────────────────────────────────────────────
+
+app.use(rateLimit({
+  windowMs: 60_000,
+  max: 1000,
+  standardHeaders: true,
+  legacyHeaders: false,
+  message: { error: 'Too many requests, please try again later.' },
+}))
+
+// ── Body parsing ──────────────────────────────────────────────────────────
+
+app.use(express.json({ limit: '1mb' }))
+
+// Handle malformed JSON (return 400 instead of 500)
+app.use((err: any, _req: express.Request, res: express.Response, next: express.NextFunction) => {
+  if (err && err.type === 'entity.parse.failed') {
+    return res.status(400).json({ error: 'Invalid JSON in request body' })
+  }
+  next(err)
+})
+
+// ── Health check ──────────────────────────────────────────────────────────
+
+app.get('/api/v1/health', async (_req, res) => {
+  res.json({ status: 'ok', time: new Date().toISOString() })
+})
+
+// ── MCP endpoint (public JSON-RPC 2.0) ────────────────────────────────────
+
+app.use('/mcp', mcpRouter)
+
+// ── Admin API (protected by admin key, not wallet auth) ──────────────────
+
+app.use('/api/v1/admin', adminRouter)
+
+// ── Auth routes (public) ──────────────────────────────────────────────────
+
+app.get('/api/v1/auth/challenge', getChallenge)
+app.post('/api/v1/auth/verify', verifyChallenge)
+
+// ── Agents API (public, no auth needed) ────────────────────────────────────
+
+app.use('/api/v1/agents', agentsRouter)
+
+// ── A2A Task Results API (public, SDK daemon queries this) ────────────────
+
+app.use('/api/v1/a2a', a2aRouter)
+
+// Agent sync (public, for cron)
+app.post('/api/v1/agents-sync', async (_req, res, next) => {
+  try {
+    const { syncAgents } = await import('./services/agent-indexer')
+    const result = await syncAgents()
+    res.json({ success: true, ...result })
+  } catch (err: any) {
+    next(err)
+  }
+})
+
+// ── Protected routes (auth + rate-limit only on known paths) ─────────────
+
+// Known protected API path prefixes (anything else under /api/v1 returns 404)
+const PROTECTED_PREFIXES = ['/chat/completions', '/chat/history', '/tenant/']
+
+app.use('/api/v1', (req, _res, next) => {
+  if (PROTECTED_PREFIXES.some(p => req.path.startsWith(p))) {
+    next()
+  } else {
+    // Path is not a known API route → 404, skip auth middleware
+    _res.status(404).json({ error: 'Not found' })
+  }
+})
+
+const api = express.Router()
+api.use(authMiddleware)
+api.use(tenantRateLimiter)
+
+api.use(chatRouter)
+api.use('/tenant', tenantRouter)
+api.use('/chat', historyRouter)
+
+app.use('/api/v1', api)
+
+// ── 404 handler ───────────────────────────────────────────────────────────
+
+app.use((_req, res) => {
+  if (!res.headersSent) {
+    res.status(404).json({ error: 'Not found' })
+  }
+})
+
+// ── Error handler ─────────────────────────────────────────────────────────
+
+app.use(globalErrorHandler)
+
+// ── Start ─────────────────────────────────────────────────────────────────
+
+app.listen(config.port, () => {
+  console.log(`[AgentX Gateway] Running on port ${config.port}`)
+  console.log(`[AgentX Gateway] Mode: ${config.nodeEnv}`)
+
+  // Start A2A background worker for multi-agent task processing
+  import('./services/a2a-worker').then(({ startA2AWorker }) => {
+    startA2AWorker()
+    console.log('[AgentX Gateway] A2A Worker started')
+  }).catch(err => {
+    console.error('[AgentX Gateway] Failed to start A2A Worker:', err.message)
+  })
+})

package/src/lib/crypto.ts

@@ -0,0 +1,44 @@
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Crypto Utilities
+// ---------------------------------------------------------------------------
+// AES-256-GCM encrypt/decrypt for tenant API keys at rest.
+// ---------------------------------------------------------------------------
+
+import crypto from 'crypto'
+
+const ALGORITHM = 'aes-256-gcm'
+const IV_LENGTH = 12
+const AUTH_TAG_LENGTH = 16
+
+export function encryptApiKey(plaintext: string, masterKeyHex: string): string {
+  const key = Buffer.from(masterKeyHex, 'hex')
+  const iv = crypto.randomBytes(IV_LENGTH)
+  const cipher = crypto.createCipheriv(ALGORITHM, key, iv)
+
+  const encrypted = Buffer.concat([
+    cipher.update(plaintext, 'utf8'),
+    cipher.final(),
+  ])
+  const authTag = cipher.getAuthTag()
+
+  const combined = Buffer.concat([iv, authTag, encrypted])
+  return combined.toString('base64')
+}
+
+export function decryptApiKey(ciphertext: string, masterKeyHex: string): string {
+  const key = Buffer.from(masterKeyHex, 'hex')
+  const combined = Buffer.from(ciphertext, 'base64')
+
+  const iv = combined.subarray(0, IV_LENGTH)
+  const authTag = combined.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH)
+  const encrypted = combined.subarray(IV_LENGTH + AUTH_TAG_LENGTH)
+
+  const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv)
+  decipher.setAuthTag(authTag)
+
+  const decrypted = Buffer.concat([
+    decipher.update(encrypted),
+    decipher.final(),
+  ])
+  return decrypted.toString('utf8')
+}

package/src/lib/db.ts

@@ -0,0 +1,25 @@
+// ---------------------------------------------------------------------------
+// AgentX Gateway — Database Pool
+// ---------------------------------------------------------------------------
+
+import { Pool } from 'pg'
+
+let pool: Pool | null = null
+
+export function getPool(): Pool {
+  if (!pool) {
+    pool = new Pool({
+      connectionString: process.env.DATABASE_URL,
+      max: 20,
+      idleTimeoutMillis: 30_000,
+    })
+  }
+  return pool
+}
+
+export async function closePool(): Promise<void> {
+  if (pool) {
+    await pool.end()
+    pool = null
+  }
+}