@agentxv2/gateway 0.1.1

package/deploy/fix_and_build.py

@@ -0,0 +1,77 @@
+import paramiko, base64, time
+
+HOST = '43.156.225.164'
+PWD = 'Asdf1234!'
+
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect(HOST, username='ubuntu', password=PWD, timeout=30)
+
+# Upload fixed page.tsx
+with open(r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx\frontend\app\user\chat\[agentId]\page.tsx', 'r', encoding='utf-8') as f:
+    content = f.read()
+b64 = base64.b64encode(content.encode()).decode()
+
+stdin, stdout, stderr = c.exec_command(
+    f"echo '{b64}' | base64 -d > '/home/ubuntu/agentx-platform/app/user/chat/[agentId]/page.tsx' && wc -c '/home/ubuntu/agentx-platform/app/user/chat/[agentId]/page.tsx'",
+    timeout=15
+)
+print(stdout.read().decode().strip())
+
+# Install missing dep
+print("\n=== npm install missing ===")
+stdin, stdout, stderr = c.exec_command(
+    "cd /home/ubuntu/agentx-platform && npm install --save-dev @react-native-async-storage/async-storage 2>&1 | tail -5",
+    timeout=120
+)
+print(stdout.read().decode().strip())
+
+# Build
+print("\n=== Build ===")
+stdin, stdout, stderr = c.exec_command(
+    "cd /home/ubuntu/agentx-platform && "
+    "NODE_OPTIONS='--max-old-space-size=2560' ./node_modules/.bin/next build 2>&1 | tail -15",
+    timeout=600
+)
+out = stdout.read().decode()
+err = stderr.read().decode()
+ec = stdout.channel.recv_exit_status()
+
+# Check if build succeeded by looking for BUILD_ID
+stdin2, stdout2, stderr2 = c.exec_command(
+    "ls /home/ubuntu/agentx-platform/.next/BUILD_ID 2>/dev/null && echo 'BUILD_OK' || echo 'BUILD_FAILED'"
+)
+check = stdout2.read().decode().strip()
+print(out[-500:])
+if err and 'warn' not in err.lower(): print("ERR:", err[-300:])
+print(f"Check: {check}")
+
+if 'FAILED' in check:
+    # Show full error
+    stdin3, stdout3, stderr3 = c.exec_command(
+        "cd /home/ubuntu/agentx-platform && "
+        "./node_modules/.bin/next build 2>&1 | grep -E 'error|Error|Module not found|Failed' | tail -10",
+        timeout=120
+    )
+    print(stdout3.read().decode())
+    c.close()
+    exit(1)
+
+# Start
+print("\n=== Start ===")
+c.exec_command("fuser -k 3000/tcp 2>/dev/null; sleep 2", timeout=10)
+c.exec_command(
+    "cd /home/ubuntu/agentx-platform && "
+    "nohup ./node_modules/.bin/next start -p 3000 > /tmp/agentx-run.log 2>&1 & disown",
+    timeout=5
+)
+time.sleep(6)
+
+stdin4, stdout4, stderr4 = c.exec_command(
+    "ss -tlnp | grep 3000 && echo '---' && "
+    "curl -sI http://localhost:3000/ 2>&1 | head -3"
+)
+print(stdout4.read().decode())
+
+c.close()
+print("\n✅ DONE — http://43.156.225.164:3000")

package/deploy/fix_and_verify.py

@@ -0,0 +1,56 @@
+import paramiko
+
+host = '101.33.109.117'
+user = 'ubuntu'
+password = 'Asdf1234!'
+
+client = paramiko.SSHClient()
+client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+client.connect(host, username=user, password=password)
+
+def run(cmd):
+    print(f"> {cmd}")
+    stdin, stdout, stderr = client.exec_command(cmd)
+    out = stdout.read().decode()
+    err = stderr.read().decode()
+    stdout.channel.recv_exit_status()
+    if out: print(out)
+    if err and 'ERR' not in cmd: print("ERR:", err[:300])
+    return out, err
+
+# Fix: ethers.randomBytes(16) -> crypto.randomBytes(16) in auth.ts
+print("=== Fixing auth.ts ===")
+run("cd ~/agentx-gateway && sed -i \"s/ethers.randomBytes(16)/crypto.randomBytes(16)/g\" src/middleware/auth.ts")
+run("cd ~/agentx-gateway && sed -i \"1i import crypto from 'crypto'\" src/middleware/auth.ts")
+
+# Also fix: .toString('hex') for Buffer
+run("cd ~/agentx-gateway && sed -i \"s/crypto.randomBytes(16).toString('hex')/crypto.randomBytes(16).toString('hex')/g\" src/middleware/auth.ts")
+
+# Rebuild
+print("\n=== Rebuilding ===")
+run("cd ~/agentx-gateway && ./node_modules/.bin/tsc 2>&1")
+
+# Restart
+print("\n=== Restarting PM2 ===")
+run("pm2 restart agentx-gateway 2>&1")
+
+# Verify again
+import time
+time.sleep(2)
+print("\n=== Verify ===")
+run("curl -s http://localhost:3090/api/v1/health")
+
+# Test auth endpoint
+print("\n=== Test Auth Challenge ===")
+run("curl -s 'http://localhost:3090/api/v1/auth/challenge?address=0x1234567890123456789012345678901234567890'")
+
+# Test tenant me (should return 401 without token)
+print("\n=== Test Protected Route ===")
+run("curl -s http://localhost:3090/api/v1/tenant/me")
+
+# Also set up UFW to allow port 3090
+print("\n=== Opening firewall port ===")
+run("sudo ufw allow 3090/tcp 2>&1 || echo 'UFW not active'")
+
+client.close()
+print("\n=== Done ===")

package/deploy/fix_build.py

@@ -0,0 +1,51 @@
+import paramiko
+
+host = '101.33.109.117'
+user = 'ubuntu'
+password = 'Asdf1234!'
+
+client = paramiko.SSHClient()
+client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+client.connect(host, username=user, password=password)
+
+def run(cmd):
+    print(f"> {cmd}")
+    stdin, stdout, stderr = client.exec_command(cmd)
+    out = stdout.read().decode()
+    err = stderr.read().decode()
+    stdout.channel.recv_exit_status()
+    if out: print(out)
+    if err: print("ERR:", err[:500])
+    return out, err
+
+# Fix: install devDependencies for TypeScript compilation
+print("=== Installing all dependencies (including dev) ===")
+run("cd ~/agentx-gateway && npm install 2>&1")
+
+# Build
+print("\n=== Building TypeScript ===")
+run("cd ~/agentx-gateway && ./node_modules/.bin/tsc 2>&1")
+
+# Verify build output
+print("\n=== Checking build output ===")
+run("ls -la ~/agentx-gateway/dist/ 2>&1")
+
+# Kill existing PM2 and restart
+print("\n=== Restarting PM2 ===")
+run("pm2 delete all 2>&1")
+run("cd ~/agentx-gateway && pm2 start ecosystem.config.js 2>&1")
+run("pm2 save --force 2>&1")
+
+# Verify
+print("\n=== Verifying Gateway ===")
+import time
+time.sleep(2)
+run("curl -s http://localhost:3090/api/v1/health 2>&1")
+run("pm2 status 2>&1")
+
+# Also set PM2 to auto-start on boot
+print("\n=== PM2 startup ===")
+run("pm2 startup 2>&1")
+
+client.close()
+print("\n=== Done ===")

package/deploy/forge_deploy.py

@@ -0,0 +1,67 @@
+import paramiko
+import subprocess, sys
+
+pk = '0x872c3190b82d17b29bb046c9c55a7f7390c7f74bd6d592ba8d211f20f896f28e'
+sep_ir = '0xe94ad380d3F8d08a7590eda0C84f354a93F96e5F'
+ox_ir = '0xbf5F9db266c8c97E3334466C88597Eb758AfE212'
+sep_rpc = 'https://ethereum-sepolia-rpc.publicnode.com'
+ox_rpc = 'http://43.156.99.215:18545'
+
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect('43.156.78.59', username='ubuntu', password='Asdf1234!', timeout=30)
+
+def run(cmd):
+    print(f"> {cmd[:130]}")
+    stdin, stdout, stderr = c.exec_command(cmd, timeout=600)
+    out = stdout.read().decode()
+    err = stderr.read().decode()
+    ec = stdout.channel.recv_exit_status()
+    if out: print(out[-400:])
+    if err: print("STDERR:", err[-400:])
+    return ec, out, err
+
+# Ensure symlink exists
+run("cd /tmp/a2a_build/src && ln -sf erc8004-interfaces interfaces && echo LINK_OK")
+
+# Deploy Sepolia
+print("\n=== SEPOLIA ===")
+ec, out, err = run(
+    f"export PATH=$HOME/.foundry/bin:$PATH && cd /tmp/a2a_build && "
+    f"forge create src/erc8004-extensions/A2AProtocolRegistry.sol:A2AProtocolRegistry "
+    f"--rpc-url {sep_rpc} --private-key {pk} --legacy "
+    f'--constructor-args $(cast abi-encode "constructor(address)" {sep_ir}) '
+    f"2>&1"
+)
+sep_addr = ""
+for line in (out + err).split('\n'):
+    if 'Deployed to' in line:
+        sep_addr = line.split(':')[-1].strip()
+        print(f"\n*** SEPOLIA A2A: {sep_addr}")
+
+# Deploy OxaChain
+print("\n=== OXACHAIN L1 ===")
+ec, out, err = run(
+    f"export PATH=$HOME/.foundry/bin:$PATH && cd /tmp/a2a_build && "
+    f"forge create src/erc8004-extensions/A2AProtocolRegistry.sol:A2AProtocolRegistry "
+    f"--rpc-url {ox_rpc} --private-key {pk} --legacy "
+    f'--constructor-args $(cast abi-encode "constructor(address)" {ox_ir}) '
+    f"2>&1"
+)
+ox_addr = ""
+for line in (out + err).split('\n'):
+    if 'Deployed to' in line:
+        ox_addr = line.split(':')[-1].strip()
+        print(f"\n*** OXACHAIN A2A: {ox_addr}")
+
+c.close()
+
+print("\n============================================")
+print(f"SEPOLIA_A2A={sep_addr}")
+print(f"OXACHAIN_A2A={ox_addr}")
+print("============================================")
+
+if sep_addr:
+    with open(r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx\gateway\deploy\a2a_addresses.txt', 'w') as f:
+        f.write(f"SEPOLIA_A2A={sep_addr}\n")
+        f.write(f"OXACHAIN_A2A={ox_addr}\n")

package/deploy/full_push.py

@@ -0,0 +1,101 @@
+#!/usr/bin/env python
+import paramiko, tarfile, os, base64
+
+HOST = '43.156.78.59'
+PWD = 'Asdf1234!'
+ROOT = r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx'
+TARPATH = r'c:\Users\apply\Downloads\code\agentx_full.tar.gz'
+
+EXCLUDE = {'node_modules', '.next', '.git', 'dist', 'archive', '__pycache__', '.turbo'}
+
+# 1. Create tar
+print("=== Creating full-source tar ===")
+count = 0
+with tarfile.open(TARPATH, 'w:gz') as tar:
+    for root, dirs, files in os.walk(ROOT):
+        dirs[:] = [d for d in dirs if d not in EXCLUDE]
+        for f in files:
+            if any(s in f for s in ['.tsbuildinfo', 'pnpm-lock.yaml', '.tar.gz', '.tgz']):
+                continue
+            full = os.path.join(root, f)
+            arc = os.path.relpath(full, ROOT).replace('\\', '/')
+            tar.add(full, arcname=arc)
+            count += 1
+
+size_mb = os.path.getsize(TARPATH) / (1024*1024)
+print(f"{count} files, {size_mb:.1f} MB")
+
+# 2. Upload
+print("\n=== Uploading ===")
+t = paramiko.Transport((HOST, 22))
+t.connect(username='ubuntu', password=PWD)
+s = paramiko.SFTPClient.from_transport(t)
+s.put(TARPATH, '/tmp/agentx_full.tar.gz')
+s.close()
+t.close()
+print("Uploaded")
+
+# 3. Git clone + overwrite + push + tag
+push_script = r'''#!/bin/bash
+set -e
+cd /tmp
+rm -rf agentx-full-push
+git clone git@github.com:sftgroup/Agentx.git agentx-full-push 2>&1 | tail -2
+
+cd agentx-full-push
+
+# Remove everything except .git
+find . -mindepth 1 -maxdepth 1 -not -name '.git' -exec rm -rf {} \; 2>/dev/null || true
+
+# Extract our code
+tar xzf /tmp/agentx_full.tar.gz
+echo "Extracted $(find . -type f -not -path './.git/*' | wc -l) files"
+
+# Show stats
+git add -A
+echo "=== STATS ==="
+git diff --cached --stat | tail -20
+
+# Commit
+git commit -m "release: v0.6.2 — full-stack production (164), A2A v2 dual-chain, Gateway migration, MCP setup guide, AgentLoop ReAct engine
+
+- Smart contracts: A2AProtocolRegistry v2 with getUserTasks (Sepolia + OxaChain L1)
+- SDK: @agentxv2/sdk@0.6.2 (13 modules, CJS/ESM/DTS)
+- Frontend: Next.js 16.2 Turbopack standalone (production: 43.156.225.164:3000)
+- Gateway: Express TypeScript multi-tenant LLM proxy (production: 43.156.225.164:3090)
+- PostgreSQL: 6-table schema with seed data
+- Docs: README, INTEGRATION, DEPLOYMENT, MCP_SETUP, PROGRESS (all updated)
+- Bug fixes: A2A page wrong contract, getUserTasks missing, PaymentGateway deprecated
+" 2>&1
+
+# Push
+git push origin main 2>&1
+echo "=== PUSH OK ==="
+
+# Tag
+git tag -a v0.6.2 -m "v0.6.2 — Full-stack production release on 43.156.225.164
+- A2AProtocolRegistry v2 (Sepolia: 0x309C...7e9cB, OxaChain: 0xDF29...112B)
+- Gateway migrated to 164 (Express + PostgreSQL)
+- MCP remote tool setup guide
+- AgentLoop ReAct engine
+- Dual-chain support (Sepolia 11155111 + OxaChain L1 19505)
+"
+
+git push origin v0.6.2 2>&1
+echo "=== TAG PUSHED ==="
+'''
+
+b64 = base64.b64encode(push_script.encode()).decode()
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect(HOST, username='ubuntu', password=PWD, timeout=30)
+
+stdin, stdout, stderr = c.exec_command(
+    f"echo '{b64}' | base64 -d > /tmp/full_push.sh && chmod +x /tmp/full_push.sh && bash /tmp/full_push.sh 2>&1"
+)
+out = stdout.read().decode()
+err = stderr.read().decode()
+print("\n=== RESULT ===")
+print(out)
+if err: print("E:", err[-500:])
+c.close()

package/deploy/full_push2.py

@@ -0,0 +1,106 @@
+#!/usr/bin/env python
+import paramiko, tarfile, os, base64
+
+HOST = '43.156.78.59'
+PWD = 'Asdf1234!'
+ROOT = r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx'
+TARPATH = r'c:\Users\apply\Downloads\code\agentx_full.tar.gz'
+
+EXCLUDE = {'node_modules', '.next', '.git', 'dist', 'archive', '__pycache__', '.turbo'}
+
+# Files containing secrets (passwords, tokens, private keys) — exclude
+SECRET_FILES = {
+    'git_push.py', 'restore_gateway.py', 'restore_quick.py', 'restore_frontend.py',
+    'restore_frontend2.py', 'server_prepare.py', 'server_setup.py', 'upload_and_start.py',
+    'start_deploy.py', 'start_frontend.py', 'start_v2.py', 'deploy_frontend.py',
+    'build_on_gw.py', 'build_on_fe.py', 'one_shot.py', 'final_check.py',
+    'final_deploy.py', 'final_fix.py', 'fix_and_verify.py', 'fix_build.py',
+    'fix_frontend.py', 'find_frontend.py', 'inline_build.py', 'rebuild_frontend.py',
+    'deploy_script.py', 'deploy_final.py', 'deploy_now.py', 'dev_mode.py',
+    'check_frontend.py', 'check_frontend2.py'
+}
+
+print("=== Creating full-source tar ===")
+count = 0
+with tarfile.open(TARPATH, 'w:gz') as tar:
+    for root, dirs, files in os.walk(ROOT):
+        dirs[:] = [d for d in dirs if d not in EXCLUDE]
+        for f in files:
+            if any(s in f for s in ['.tsbuildinfo', 'pnpm-lock.yaml', '.tar.gz', '.tgz']):
+                continue
+            if f in SECRET_FILES:
+                continue
+            full = os.path.join(root, f)
+            arc = os.path.relpath(full, ROOT).replace('\\', '/')
+            tar.add(full, arcname=arc)
+            count += 1
+
+size_mb = os.path.getsize(TARPATH) / (1024*1024)
+print(f"{count} files, {size_mb:.1f} MB")
+
+# Upload
+print("\n=== Uploading ===")
+t = paramiko.Transport((HOST, 22))
+t.connect(username='ubuntu', password=PWD)
+s = paramiko.SFTPClient.from_transport(t)
+s.put(TARPATH, '/tmp/agentx_full.tar.gz')
+s.close()
+t.close()
+print("Uploaded")
+
+# Push + tag
+push_script = r'''#!/bin/bash
+set -e
+cd /tmp
+rm -rf agentx-full-push
+git clone git@github.com:sftgroup/Agentx.git agentx-full-push
+cd agentx-full-push
+find . -mindepth 1 -maxdepth 1 -not -name '.git' -exec rm -rf {} \; 2>/dev/null || true
+tar xzf /tmp/agentx_full.tar.gz
+echo "Files: $(find . -type f -not -path './.git/*' | wc -l)"
+git add -A
+echo "=== STATS ==="
+git diff --cached --stat --stat=120 | tail -25
+git commit -m "release: v0.6.2 — full-stack production (164), A2A v2 dual-chain, Gateway, AgentLoop, MCP
+
+Core changes:
+- A2AProtocolRegistry v2 with getUserTasks(address) (Sepolia + OxaChain L1)
+- SDK @agentxv2/sdk@0.6.2 (13 modules, dual-chain A2A addresses)
+- Gateway Express TypeScript (EIP-191 auth, dual-mode LLM proxy, 3-layer rate limit)
+- PostgreSQL 6-table schema with seed data
+- Frontend Next.js 16.2 Turbopack (A2A page fix, AgentLoop chat, GatewayProvider)
+- Docs: README, INTEGRATION, DEPLOYMENT, MCP_SETUP, PROGRESS
+- Bug fixes: A2A wrong contract, missing getUserTasks, deprecated PaymentGateway
+
+Production: 43.156.225.164 (Frontend :3000, Gateway :3090, PG :5432)
+" 2>&1
+
+git push origin main 2>&1
+echo "=== PUSH OK ==="
+
+git tag -a v0.6.2 -m "v0.6.2 — Full-stack production release
+- A2AProtocolRegistry v2: Sepolia 0x309C7447d89f3087A9924BB686d88df020F7e9cB, OxaChain 0xDF2939EFafEe6439eB2226DbEd07AD6F5Ae2112B
+- SDK @agentxv2/sdk@0.6.2
+- Gateway on 43.156.225.164:3090
+- Frontend on 43.156.225.164:3000
+- MCP remote tool setup guide
+" 2>&1
+
+git push origin v0.6.2 2>&1
+echo "=== TAG PUSHED ==="
+'''
+
+b64 = base64.b64encode(push_script.encode()).decode()
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect(HOST, username='ubuntu', password=PWD, timeout=30)
+
+stdin, stdout, stderr = c.exec_command(
+    f"echo '{b64}' | base64 -d > /tmp/full_push2.sh && chmod +x /tmp/full_push2.sh && bash /tmp/full_push2.sh 2>&1"
+)
+out = stdout.read().decode()
+err = stderr.read().decode()
+print("\n=== RESULT ===")
+print(out)
+if err: print("E:", err[-500:])
+c.close()

package/deploy/go_prod.py

@@ -0,0 +1,59 @@
+import paramiko, base64, time
+
+HOST = '43.156.225.164'
+PWD = 'Asdf1234!'
+
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect(HOST, username='ubuntu', password=PWD, timeout=30)
+
+# Upload fixed next.config.js
+with open(r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx\frontend\next.config.js', 'r') as f:
+    content = f.read()
+b64 = base64.b64encode(content.encode()).decode()
+stdin, stdout, stderr = c.exec_command(
+    f"echo '{b64}' | base64 -d > /home/ubuntu/agentx-platform/next.config.js && echo 'ok'"
+)
+print(stdout.read().decode().strip())
+
+# Build
+print("\n=== Build ===")
+stdin, stdout, stderr = c.exec_command(
+    "cd /home/ubuntu/agentx-platform && "
+    "NODE_OPTIONS='--max-old-space-size=2560' ./node_modules/.bin/next build 2>&1 | tail -20",
+    timeout=600
+)
+out = stdout.read().decode()
+err = stderr.read().decode()
+print(out)
+if err: print("E:", err[-300:])
+
+# Check
+stdin2, stdout2, stderr2 = c.exec_command(
+    "ls /home/ubuntu/agentx-platform/.next/BUILD_ID 2>/dev/null && echo BUILD_OK || echo FAILED"
+)
+check = stdout2.read().decode().strip()
+print(f"Result: {check}")
+
+if 'FAILED' in check:
+    print("BUILD FAILED!")
+    c.close()
+    exit(1)
+
+# Start
+print("\n=== Start ===")
+c.exec_command("fuser -k 3000/tcp 2>/dev/null; sleep 2", timeout=10)
+channel = c.get_transport().open_session()
+channel.exec_command(
+    "cd /home/ubuntu/agentx-platform && "
+    "nohup ./node_modules/.bin/next start -p 3000 > /tmp/agentx-run.log 2>&1 & disown"
+)
+time.sleep(6)
+
+stdin3, stdout3, stderr3 = c.exec_command(
+    "ss -tlnp | grep 3000 && echo '---' && curl -sI http://localhost:3000/ 2>&1 | head -5"
+)
+print(stdout3.read().decode())
+
+c.close()
+print("\n✅ http://43.156.225.164:3000")

package/deploy/gw_deploy.py

@@ -0,0 +1,133 @@
+import paramiko
+import tarfile
+import os
+import base64
+import time
+
+HOST = '43.156.225.164'
+PWD = 'Asdf1234!'
+PORT = '3090'
+APP = '/home/ubuntu/agentx-gateway'
+
+# 1. Create tar of gateway source
+local = r'c:\Users\apply\Downloads\code\agentx\extracted\Agentx\gateway'
+tarpath = r'c:\Users\apply\Downloads\code\agentx_gw.tar.gz'
+
+print("=== Tar ===")
+with tarfile.open(tarpath, 'w:gz') as tar:
+    for root, dirs, files in os.walk(local):
+        dirs[:] = [d for d in dirs if d not in ('node_modules','dist','.git')]
+        for f in files:
+            if f.endswith('.tar.gz'): continue
+            full = os.path.join(root, f)
+            arc = os.path.relpath(full, local).replace('\\', '/')
+            tar.add(full, arcname=arc)
+print(f"{os.path.getsize(tarpath)//1024} KB")
+
+# 2. Upload
+print("Uploading...")
+t = paramiko.Transport((HOST, 22))
+t.connect(username='ubuntu', password=PWD)
+s = paramiko.SFTPClient.from_transport(t)
+s.put(tarpath, '/tmp/agentx_gw.tar.gz')
+s.close()
+t.close()
+
+# 3. Extract + install + build + start
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect(HOST, username='ubuntu', password=PWD, timeout=30)
+
+# Extract
+stdin, stdout, stderr = c.exec_command(
+    f"rm -rf {APP} && mkdir -p {APP} && cd {APP} && tar xzf /tmp/agentx_gw.tar.gz && ls src/index.ts && echo 'OK'",
+    timeout=15
+)
+print(stdout.read().decode().strip())
+
+# Read gateway .env.example from local
+try:
+    with open(local + r'\.env.example', 'r') as f:
+        env = f.read()
+except:
+    env = ''
+with open(local + r'\.env', 'r') as f:
+    env = f.read()
+
+# Write .env with PG on localhost
+env_lines = []
+for line in env.split('\n'):
+    if line.startswith('DATABASE_URL='):
+        env_lines.append('DATABASE_URL=postgresql://agentx:AgentX2024!Gateway@localhost:5432/agentx_gateway')
+    elif line.startswith('PG'):
+        continue
+    else:
+        env_lines.append(line)
+# Make sure critical lines exist
+new_env = '\n'.join(env_lines)
+if 'DATABASE_URL' not in new_env:
+    new_env += '\nDATABASE_URL=postgresql://agentx:AgentX2024!Gateway@localhost:5432/agentx_gateway'
+if 'PORT=' not in new_env:
+    new_env += f'\nPORT={PORT}'
+if 'JWT_SECRET' not in new_env:
+    new_env += '\nJWT_SECRET=agentx-prod-jwt-secret-key-2026'
+
+b64 = base64.b64encode(new_env.encode()).decode()
+stdin, stdout, stderr = c.exec_command(f"echo '{b64}' | base64 -d > {APP}/.env && echo 'env OK'")
+print(stdout.read().decode().strip())
+
+# Check if tsx is available, install deps
+print("\n=== npm install ===")
+stdin, stdout, stderr = c.exec_command(
+    f"cd {APP} && npm install 2>&1 | tail -8",
+    timeout=600
+)
+out = stdout.read().decode()
+err = stderr.read().decode()
+print(out)
+if err: print("E:", err[-300:])
+
+# Build TypeScript
+print("\n=== tsc build ===")
+stdin, stdout, stderr = c.exec_command(
+    f"cd {APP} && ./node_modules/.bin/tsc 2>&1 | tail -10; echo 'EXIT='$?",
+    timeout=120
+)
+out = stdout.read().decode()
+print(out)
+
+# Check if dist exists
+stdin, stdout, stderr = c.exec_command(f"ls {APP}/dist/index.js 2>/dev/null && echo BUILD_OK || echo BUILD_FAILED")
+check = stdout.read().decode().strip()
+print(f"Build: {check}")
+
+if 'FAILED' in check:
+    stdin, stdout, stderr = c.exec_command(f"cat {APP}/package.json")
+    print(stdout.read().decode()[:500])
+    # Try with tsx instead of tsc
+    print("Trying tsx...")
+    stdin, stdout, stderr = c.exec_command(f"cd {APP} && npm install tsx typescript --save-dev 2>&1 | tail -3", timeout=60)
+    print(stdout.read().decode())
+    stdin, stdout, stderr = c.exec_command(f"cd {APP} && ./node_modules/.bin/tsc --noEmit 2>&1 | tail -5; ls {APP}/dist/index.js 2>/dev/null || echo NO_DIST", timeout=60)
+    print(stdout.read().decode())
+
+# Kill old + start
+print(f"\n=== Start on {PORT} ===")
+c.exec_command(f"fuser -k {PORT}/tcp 2>/dev/null; sleep 2", timeout=10)
+c.exec_command(
+    f"cd {APP} && nohup npx tsx src/index.ts > /tmp/gw.log 2>&1 & disown",
+    timeout=5
+)
+time.sleep(4)
+
+stdin, stdout, stderr = c.exec_command(f"ss -tlnp | grep {PORT} && echo '---' && curl -s http://localhost:{PORT}/api/v1/health 2>&1")
+out = stdout.read().decode()
+print(out)
+if 'OK' in out or 'ok' in out.lower() or 'health' in out.lower():
+    print("\n✅ Gateway running!")
+else:
+    # Check logs
+    stdin, stdout, stderr = c.exec_command("tail -20 /tmp/gw.log")
+    print("Log:", stdout.read().decode()[:500])
+
+c.close()