@aria-cli/wireguard 1.0.69 → 1.0.70

package/dist/.aria-build-stamp.json

@@ -0,0 +1,4 @@
+{
+  "label": "@aria-cli/wireguard",
+  "fingerprint": "b49b3213a6add4e7c6e179a82009c12cc55059ea10051e206cc44c76cd29d01e"
+}

package/dist/nat.d.ts

@@ -65,6 +65,7 @@ export declare class StunClient {
     private servers;
     private pollIntervalMs;
     private interval;
+    private startInProgress;
     private lastResult;
     private _natType;
     /** Number of consecutive discovery failures (reset to 0 on success) */
@@ -74,6 +75,7 @@ export declare class StunClient {
     getNatType(): NatType | null;
     /** Get the last discovered endpoint */
     getEndpoint(): StunResult | null;
+    private discoveryServers;
     /** Discover endpoint once — uses first configured server (or defaults) */
     discover(): Promise<StunResult>;
     /** Start periodic endpoint discovery. Detects NAT type on first call. */

package/dist/nat.js

@@ -55,6 +55,49 @@ const STUN_BINDING_RESPONSE = 0x0101;
 const STUN_MAGIC_COOKIE = 0x2112a442;
 const STUN_ATTR_XOR_MAPPED_ADDRESS = 0x0020;
 const STUN_ATTR_MAPPED_ADDRESS = 0x0001;
+function parseIpv4(host) {
+    const parts = host.split(".");
+    if (parts.length !== 4)
+        return null;
+    const octets = parts.map((part) => Number(part));
+    if (octets.some((octet) => !Number.isInteger(octet) || octet < 0 || octet > 255)) {
+        return null;
+    }
+    return octets;
+}
+function shouldCheckTunnelRoute(host) {
+    const normalized = host.trim().toLowerCase();
+    if (normalized === "localhost")
+        return false;
+    const ipv4 = parseIpv4(normalized);
+    if (!ipv4)
+        return true;
+    const a = ipv4[0];
+    const b = ipv4[1];
+    if (a === 0)
+        return false;
+    if (a === 10)
+        return false;
+    if (a === 127)
+        return false;
+    if (a === 169 && b === 254)
+        return false;
+    if (a === 172 && b >= 16 && b <= 31)
+        return false;
+    if (a === 192 && b === 168)
+        return false;
+    if (a === 192 && b === 0)
+        return false;
+    if (a === 192 && b === 2)
+        return false;
+    if (a === 198 && (b === 18 || b === 19 || b === 51))
+        return false;
+    if (a === 203 && b === 0)
+        return false;
+    if (a >= 224)
+        return false;
+    return true;
+}
 /**
  * Detect whether the route to a STUN server exits through a tunnel/VPN
  * interface. If so, STUN results reflect the tunnel exit IP — not the
@@ -67,6 +110,9 @@ const STUN_ATTR_MAPPED_ADDRESS = 0x0001;
  * Physical interfaces (Ethernet, WiFi) always have a real MAC.
  */
 function routeExitsThroughTunnel(host, port) {
+    if (!shouldCheckTunnelRoute(host)) {
+        return Promise.resolve(false);
+    }
     return new Promise((resolve) => {
         const probe = dgram.createSocket("udp4");
         const timer = setTimeout(() => {
@@ -310,6 +356,7 @@ class StunClient {
     servers;
     pollIntervalMs;
     interval = null;
+    startInProgress = false;
     lastResult = null;
     _natType = null;
     /** Number of consecutive discovery failures (reset to 0 on success) */
@@ -326,6 +373,9 @@ class StunClient {
     getEndpoint() {
         return this.lastResult;
     }
+    discoveryServers() {
+        return this.servers.length > 0 ? this.servers : DEFAULT_STUN_SERVERS;
+    }
     /** Discover endpoint once — uses first configured server (or defaults) */
     async discover() {
         const result = await discoverEndpoint(this.servers[0], 5000);
@@ -334,12 +384,14 @@ class StunClient {
     }
     /** Start periodic endpoint discovery. Detects NAT type on first call. */
     start(onUpdate) {
-        if (this.interval)
+        if (this.interval || this.startInProgress)
             return;
+        this.startInProgress = true;
         // Check once if we're behind a VPN. If so, STUN will always return
         // the wrong IP — skip the entire poll loop instead of spamming errors.
         void (async () => {
-            const [firstHost, firstPortStr] = this.servers[0].split(":");
+            const servers = this.discoveryServers();
+            const [firstHost, firstPortStr] = servers[0].split(":");
             const isTunnel = await routeExitsThroughTunnel(firstHost, parseInt(firstPortStr ?? "3478", 10));
             if (isTunnel) {
                 if (typeof process !== "undefined" && process.stderr) {
@@ -350,7 +402,7 @@ class StunClient {
             // Initial discovery + NAT type detection
             try {
                 if (!this._natType) {
-                    const detection = await detectNatType(this.servers);
+                    const detection = await detectNatType(servers);
                     this._natType = detection.natType;
                     if (detection.results.length > 0) {
                         this.lastResult = detection.results[0];
@@ -383,7 +435,9 @@ class StunClient {
                     }
                 }
             }, this.pollIntervalMs);
-        })();
+        })().finally(() => {
+            this.startInProgress = false;
+        });
     }
     /** Stop periodic discovery */
     stop() {

package/dist/native.js

@@ -46,33 +46,69 @@ exports.generateKeypair = generateKeypair;
 const path = __importStar(require("node:path"));
 /** Lazy-loaded native addon */
 let _native = null;
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function isWireGuardNativeAddon(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return (typeof candidate.WireGuardTunnel === "function" &&
+        typeof candidate.generateKeypair === "function");
+}
+function requireWireGuardNative(candidatePath) {
+    if (path.resolve(candidatePath) === path.resolve(__filename)) {
+        throw new Error(`${candidatePath} is the TypeScript wrapper, not the native WireGuard API`);
+    }
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const candidate = require(candidatePath);
+    if (!isWireGuardNativeAddon(candidate)) {
+        throw new Error(`${candidatePath} did not export WireGuardTunnel and generateKeypair`);
+    }
+    return candidate;
+}
+function appendUnique(candidates, candidate) {
+    if (!candidates.includes(candidate)) {
+        candidates.push(candidate);
+    }
+}
+function appendPackageEntryCandidates(candidates, entry) {
+    appendUnique(candidates, entry);
+    const entryDir = path.dirname(entry);
+    if (path.basename(entryDir) === "dist") {
+        appendUnique(candidates, path.join(entryDir, "..", "index.js"));
+    }
+}
 function loadNative() {
     if (_native)
         return _native;
     const errors = [];
-    // Strategy 1: Resolve via package name (works in bundled aria.mjs + dev mode).
-    // require.resolve finds @aria-cli/wireguard/package.json in node_modules,
-    // then we load the napi-rs CJS loader (index.js) from the package root.
+    const candidates = [];
+    // Strategy 1: Resolve via the package's exported entry and, when that entry
+    // lives under dist/, add the package-root napi-rs loader. Never resolve
+    // package.json: modern package exports often hide it.
     // Array join prevents the bundler from resolving the specifier at build time.
     try {
-        const pkgSpec = ["@aria-cli", "wireguard", "package.json"].join("/");
-        const pkgDir = path.dirname(require.resolve(pkgSpec));
-        // eslint-disable-next-line @typescript-eslint/no-require-imports
-        _native = require(path.join(pkgDir, "index.js"));
-        return _native;
+        const pkgSpec = ["@aria-cli", "wireguard"].join("/");
+        const entry = require.resolve(pkgSpec);
+        appendPackageEntryCandidates(candidates, entry);
     }
     catch (err) {
-        errors.push(err instanceof Error ? err.message : String(err));
+        errors.push(errorMessage(err));
     }
-    // Strategy 2: Relative path from dist/native.js → package-root index.js.
-    // Fallback for compiled binaries where the bundler resolves at build time.
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-require-imports
-        _native = require(path.join(__dirname, "..", "index.js"));
-        return _native;
-    }
-    catch (err) {
-        errors.push(err instanceof Error ? err.message : String(err));
+    // Strategy 2: Relative candidates cover both source execution
+    // (__dirname = package root) and compiled/bundled execution
+    // (__dirname = dist/).
+    appendUnique(candidates, path.join(__dirname, "index.js"));
+    appendUnique(candidates, path.join(__dirname, "..", "index.js"));
+    for (const candidate of candidates) {
+        try {
+            _native = requireWireGuardNative(candidate);
+            return _native;
+        }
+        catch (err) {
+            errors.push(`${candidate}: ${errorMessage(err)}`);
+        }
     }
     throw new Error(`@aria/wireguard: Failed to load native addon (${process.platform}-${process.arch}). ${errors.join(" | ")}`);
 }

package/dist/network-state-store.d.ts

@@ -25,7 +25,7 @@ export declare class NetworkStateStore {
     get path(): string;
     /** Whether the store has been opened */
     get isOpen(): boolean;
-    getConnection(): SqliteDatabase | null;
+    getConnection(): SqliteDatabase;
     /** Open the database, creating schema if needed */
     open(): SqliteDatabase;
     private reconcilePeerTableSchema;

package/dist/network-state-store.js

@@ -127,7 +127,7 @@ class NetworkStateStore {
         return this.db !== null;
     }
     getConnection() {
-        return this.db;
+        return this.open();
     }
     /** Open the database, creating schema if needed */
     open() {

package/dist/network.js

@@ -57,6 +57,7 @@ const path = __importStar(require("node:path"));
 const tools_1 = require("@aria-cli/tools");
 const bootstrap_authority_js_1 = require("./bootstrap-authority.js");
 const bootstrap_tls_js_1 = require("./bootstrap-tls.js");
+const peer_restore_eligibility_js_1 = require("./peer-restore-eligibility.js");
 const route_ownership_js_1 = require("./route-ownership.js");
 const tunnel_js_1 = require("./tunnel.js");
 const resilient_tunnel_js_1 = require("./resilient-tunnel.js");
@@ -1648,6 +1649,23 @@ class NetworkManager {
                     });
                     return;
                 }
+                const restoreDecision = (0, peer_restore_eligibility_js_1.shouldAutoRestoreDirectPeer)(peer);
+                if (!restoreDecision.eligible) {
+                    this.appendDiagnostic({
+                        timestamp: Date.now(),
+                        event: "route_restore_skipped",
+                        peerPublicKey: peer.publicKey,
+                        peerNodeId: peer.nodeId,
+                        peerName: peer.name,
+                        detail: {
+                            reason: restoreDecision.reason,
+                            status: peer.status,
+                            staleByMs: restoreDecision.staleByMs ?? null,
+                            newestKnownActivityMs: restoreDecision.newestKnownActivityMs ?? null,
+                        },
+                    });
+                    return;
+                }
                 try {
                     await this.startTunnelByTransportKey(peer.publicKey);
                 }
@@ -1693,6 +1711,23 @@ class NetworkManager {
                         });
                         continue;
                     }
+                    const restoreDecision = (0, peer_restore_eligibility_js_1.shouldAutoRestoreDirectPeer)(peer);
+                    if (!restoreDecision.eligible) {
+                        this.appendDiagnostic({
+                            timestamp: Date.now(),
+                            event: "route_restore_skipped",
+                            peerPublicKey: peer.publicKey,
+                            peerNodeId: peer.nodeId,
+                            peerName: peer.name,
+                            detail: {
+                                reason: restoreDecision.reason,
+                                status: peer.status,
+                                staleByMs: restoreDecision.staleByMs ?? null,
+                                newestKnownActivityMs: restoreDecision.newestKnownActivityMs ?? null,
+                            },
+                        });
+                        continue;
+                    }
                     await this.startTunnelByTransportKey(peer.publicKey);
                 }
                 catch {

package/dist/peer-discovery.js

@@ -25,6 +25,7 @@ exports.PeerDiscoveryService = void 0;
 const node_events_1 = require("node:events");
 const tools_1 = require("@aria-cli/tools");
 const bootstrap_tls_js_1 = require("./bootstrap-tls.js");
+const peer_restore_eligibility_js_1 = require("./peer-restore-eligibility.js");
 /**
  * Periodic peer discovery service.
  *
@@ -372,6 +373,8 @@ class PeerDiscoveryService extends node_events_1.EventEmitter {
             const { identityState } = (0, tools_1.derivePeerStateFromLegacyStatus)(peer);
             if (!(0, tools_1.canRefreshEndpoint)(identityState))
                 continue;
+            if (!(0, peer_restore_eligibility_js_1.shouldAutoRestoreDirectPeer)(peer).eligible)
+                continue;
             remoteMap.set(peer.nodeId, peer);
         }
         // Detect known peers whose endpoint changed on the coordination server.

package/dist/peer-restore-eligibility.d.ts

@@ -0,0 +1,18 @@
+import type { LegacyPeerRegistryStatus } from "@aria-cli/tools";
+type PeerRestoreTimestamps = {
+    status: LegacyPeerRegistryStatus;
+    lastHandshake?: number | null;
+    createdAt?: number | null;
+    updatedAt?: number | null;
+};
+export type PeerRestoreDecision = {
+    eligible: true;
+} | {
+    eligible: false;
+    reason: "stale_active_handshake" | "stale_active_without_handshake" | "stale_pending_restore" | "non_rehydratable_status";
+    staleByMs?: number;
+    newestKnownActivityMs?: number;
+};
+export declare function shouldAutoRestoreDirectPeer(peer: PeerRestoreTimestamps, now?: number): PeerRestoreDecision;
+export {};
+//# sourceMappingURL=peer-restore-eligibility.d.ts.map

package/dist/peer-restore-eligibility.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shouldAutoRestoreDirectPeer = shouldAutoRestoreDirectPeer;
+const PLAUSIBLE_EPOCH_MS = Date.UTC(2020, 0, 1);
+const ACTIVE_DIRECT_RESTORE_MAX_IDLE_MS = 7 * 24 * 60 * 60 * 1000;
+const PENDING_DIRECT_RESTORE_MAX_IDLE_MS = 24 * 60 * 60 * 1000;
+function plausibleEpoch(value) {
+    return typeof value === "number" && Number.isFinite(value) && value >= PLAUSIBLE_EPOCH_MS
+        ? value
+        : null;
+}
+function newestPlausibleEpoch(values) {
+    const plausible = values
+        .map((value) => plausibleEpoch(value))
+        .filter((value) => value !== null);
+    return plausible.length > 0 ? Math.max(...plausible) : null;
+}
+function staleBy(now, activityMs, maxIdleMs) {
+    return Math.max(0, now - activityMs - maxIdleMs);
+}
+function shouldAutoRestoreDirectPeer(peer, now = Date.now()) {
+    if (peer.status === "active") {
+        const lastHandshake = plausibleEpoch(peer.lastHandshake);
+        if (lastHandshake !== null) {
+            if (now - lastHandshake > ACTIVE_DIRECT_RESTORE_MAX_IDLE_MS) {
+                return {
+                    eligible: false,
+                    reason: "stale_active_handshake",
+                    staleByMs: staleBy(now, lastHandshake, ACTIVE_DIRECT_RESTORE_MAX_IDLE_MS),
+                    newestKnownActivityMs: lastHandshake,
+                };
+            }
+            return { eligible: true };
+        }
+        const newestRowActivity = newestPlausibleEpoch([peer.updatedAt, peer.createdAt]);
+        if (newestRowActivity === null) {
+            return { eligible: true };
+        }
+        if (now - newestRowActivity > ACTIVE_DIRECT_RESTORE_MAX_IDLE_MS) {
+            return {
+                eligible: false,
+                reason: "stale_active_without_handshake",
+                staleByMs: staleBy(now, newestRowActivity, ACTIVE_DIRECT_RESTORE_MAX_IDLE_MS),
+                newestKnownActivityMs: newestRowActivity,
+            };
+        }
+        return { eligible: true };
+    }
+    if (peer.status === "pending_verification" || peer.status === "pending_tunnel") {
+        const newestBootstrapActivity = newestPlausibleEpoch([
+            peer.lastHandshake,
+            peer.updatedAt,
+            peer.createdAt,
+        ]);
+        if (newestBootstrapActivity === null) {
+            return { eligible: true };
+        }
+        if (now - newestBootstrapActivity > PENDING_DIRECT_RESTORE_MAX_IDLE_MS) {
+            return {
+                eligible: false,
+                reason: "stale_pending_restore",
+                staleByMs: staleBy(now, newestBootstrapActivity, PENDING_DIRECT_RESTORE_MAX_IDLE_MS),
+                newestKnownActivityMs: newestBootstrapActivity,
+            };
+        }
+        return { eligible: true };
+    }
+    return {
+        eligible: false,
+        reason: "non_rehydratable_status",
+    };
+}
+//# sourceMappingURL=peer-restore-eligibility.js.map

package/index.js

@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-android-arm64')
         const bindingPackageVersion = require('@aria-cli/wireguard-android-arm64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-android-arm-eabi')
         const bindingPackageVersion = require('@aria-cli/wireguard-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-win32-x64-gnu')
         const bindingPackageVersion = require('@aria-cli/wireguard-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-win32-x64-msvc')
         const bindingPackageVersion = require('@aria-cli/wireguard-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-win32-ia32-msvc')
         const bindingPackageVersion = require('@aria-cli/wireguard-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-win32-arm64-msvc')
         const bindingPackageVersion = require('@aria-cli/wireguard-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@aria-cli/wireguard-darwin-universal')
       const bindingPackageVersion = require('@aria-cli/wireguard-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-darwin-x64')
         const bindingPackageVersion = require('@aria-cli/wireguard-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-darwin-arm64')
         const bindingPackageVersion = require('@aria-cli/wireguard-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-freebsd-x64')
         const bindingPackageVersion = require('@aria-cli/wireguard-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-freebsd-arm64')
         const bindingPackageVersion = require('@aria-cli/wireguard-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-x64-musl')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-x64-gnu')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-arm64-musl')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-arm64-gnu')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-arm-musleabihf')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-loong64-musl')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-loong64-gnu')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-riscv64-musl')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@aria-cli/wireguard-linux-riscv64-gnu')
           const bindingPackageVersion = require('@aria-cli/wireguard-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-linux-ppc64-gnu')
         const bindingPackageVersion = require('@aria-cli/wireguard-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-linux-s390x-gnu')
         const bindingPackageVersion = require('@aria-cli/wireguard-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-openharmony-arm64')
         const bindingPackageVersion = require('@aria-cli/wireguard-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-openharmony-x64')
         const bindingPackageVersion = require('@aria-cli/wireguard-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@aria-cli/wireguard-openharmony-arm')
         const bindingPackageVersion = require('@aria-cli/wireguard-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '1.0.69' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 1.0.69 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '1.0.70' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 1.0.70 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {

package/npm/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard-darwin-arm64",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "os": [
     "darwin"
   ],

package/npm/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard-darwin-x64",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "os": [
     "darwin"
   ],

package/npm/linux-arm64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard-linux-arm64-gnu",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "os": [
     "linux"
   ],

package/npm/linux-x64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard-linux-x64-gnu",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "os": [
     "linux"
   ],

package/npm/win32-x64-msvc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard-win32-x64-msvc",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "os": [
     "win32"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aria-cli/wireguard",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "description": "WireGuard native addon for ARIA secure networking (boringtun via napi-rs)",
   "main": "dist/index.js",
   "types": "./dist/index.d.ts",
@@ -45,11 +45,11 @@
     "ws": "^8.19.0"
   },
   "optionalDependencies": {
-    "@aria-cli/wireguard-darwin-arm64": "1.0.69",
-    "@aria-cli/wireguard-darwin-x64": "1.0.69",
-    "@aria-cli/wireguard-linux-x64-gnu": "1.0.69",
-    "@aria-cli/wireguard-linux-arm64-gnu": "1.0.69",
-    "@aria-cli/wireguard-win32-x64-msvc": "1.0.69"
+    "@aria-cli/wireguard-darwin-arm64": "1.0.70",
+    "@aria-cli/wireguard-darwin-x64": "1.0.70",
+    "@aria-cli/wireguard-linux-x64-gnu": "1.0.70",
+    "@aria-cli/wireguard-linux-arm64-gnu": "1.0.70",
+    "@aria-cli/wireguard-win32-x64-msvc": "1.0.70"
   },
   "files": [
     "index.js",