@claude-flow/plugin-agent-federation 1.0.0-alpha.9 → 1.0.1

package/dist/domain/services/wg-mesh-service.js

@@ -0,0 +1,292 @@
+/**
+ * ADR-111 Phase 2 — WgMeshService.
+ *
+ * Pure-projection service: takes the federation peer registry + local
+ * WG identity and produces (a) a `wg-quick`-compatible config string,
+ * (b) per-peer `wg set` commands the operator runs to converge an
+ * already-running interface, and (c) the AllowedIPs slice that maps to
+ * each peer's trust level.
+ *
+ * Deliberately does NOT shell out. Bringing up a network interface
+ * requires root and modifies system state — per CLAUDE.md's
+ * destructive-actions guidance the service emits the commands; the
+ * operator (or a thin shell wrapper they audit) runs them.
+ *
+ * Phase 3 (breaker integration) consumes this service: peer state
+ * transitions invoke removeAllowedIPs/removePeer/restoreAllowedIPs,
+ * which produce commands without side effects.
+ */
+import { TrustLevel, getTrustLevelLabel } from '../entities/trust-level.js';
+import { DEFAULT_MESH_SUBNET } from '../value-objects/wg-config.js';
+/**
+ * Trust-level → reachability. ADR-111's `WG_NETWORK_GATES`.
+ *
+ * Note: WireGuard's `AllowedIPs` is L3 routing, not L4 ACL — these port
+ * rules describe what the L4 firewall (Phase 4: nftables/pf) should
+ * enforce. v1 (this phase) only produces the rules; Phase 4 projects
+ * them into kernel firewall syntax. Until then, callers using v1
+ * fall back to the simpler "AllowedIPs = peer's mesh IP" model (option
+ * (b) in the ADR — app-layer auth carries the access decision).
+ */
+export const WG_NETWORK_GATES = {
+    [TrustLevel.UNTRUSTED]: [],
+    [TrustLevel.VERIFIED]: [
+        { proto: 'tcp', port: 9100 },
+    ],
+    [TrustLevel.ATTESTED]: [
+        { proto: 'tcp', port: 9100 },
+        { proto: 'tcp', portRange: [9101, 9199] },
+    ],
+    [TrustLevel.TRUSTED]: [
+        { proto: 'tcp', port: 9100 },
+        { proto: 'tcp', portRange: [9101, 9199] },
+        { proto: 'tcp', port: 22 },
+        { proto: 'tcp', portRange: [80, 443] },
+    ],
+    [TrustLevel.PRIVILEGED]: [
+        { proto: 'all' },
+    ],
+};
+/**
+ * Minimum trust level whose peers get a `[Peer]` block in the WG config.
+ * UNTRUSTED stays out of the mesh entirely — it's the explicit drop bucket.
+ */
+export const WG_MIN_MESH_TRUST = TrustLevel.VERIFIED;
+/**
+ * Security: validate every field we splice into a wg-quick config string
+ * or shell command. The ADR's threat model explicitly includes "compromised
+ * federation peer with valid WG key" — that peer signs their own manifest,
+ * so the Ed25519 signature only proves origin, not content safety. A
+ * compromised peer could publish e.g. wgEndpoint = "host:51820\n[Peer]\n..."
+ * to inject extra peers into the config the operator runs via wg-quick.
+ *
+ * These regexes are intentionally narrow:
+ *   - publicKey: base64 X25519, exactly 43 chars + '=' padding
+ *   - meshIP:    a.b.c.d/32, octets 0-255, no whitespace
+ *   - endpoint:  hostname-or-ipv4-or-bracketed-ipv6 + :port, no newlines/specials
+ */
+const WG_PUBKEY_REGEX = /^[A-Za-z0-9+/]{43}=$/;
+const WG_MESH_IP_REGEX = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})\/32$/;
+const WG_ENDPOINT_REGEX = /^(\[[0-9a-fA-F:]+\]|[a-zA-Z0-9][a-zA-Z0-9.-]*):\d{1,5}$/;
+/**
+ * Return the validated peer wg fields, or null if any is malformed or
+ * out-of-range. Callers treat null as "peer not eligible for mesh" — the
+ * peer stays in the federation discovery registry but is excluded from
+ * the wg config and any wg commands.
+ */
+export function readSafePeerWgFields(peer) {
+    const pk = peer.metadata.wgPublicKey;
+    const ip = peer.metadata.wgMeshIP;
+    const ep = peer.metadata.wgEndpoint;
+    if (typeof pk !== 'string' || !WG_PUBKEY_REGEX.test(pk))
+        return null;
+    if (typeof ip !== 'string' || !WG_MESH_IP_REGEX.test(ip))
+        return null;
+    const ipMatch = ip.match(WG_MESH_IP_REGEX);
+    if (!ipMatch || [ipMatch[1], ipMatch[2], ipMatch[3], ipMatch[4]].some(o => Number(o) > 255))
+        return null;
+    if (typeof ep !== 'string' || !WG_ENDPOINT_REGEX.test(ep))
+        return null;
+    const port = Number(ep.split(':').pop());
+    if (port < 1 || port > 65535)
+        return null;
+    return { wgPublicKey: pk, wgMeshIP: ip, wgEndpoint: ep };
+}
+const DEFAULT_INTERFACE = 'ruflo-fed';
+const DEFAULT_LISTEN_PORT = 51820;
+export class WgMeshService {
+    interfaceName;
+    listenPort;
+    meshSubnet;
+    localKey = null;
+    localMeshIP = null;
+    /** Per-peer AllowedIPs after the last applyTrustLevelToAllowedIPs() call. Drives restore from breaker. */
+    lastAppliedAllowedIPs = new Map();
+    /** Peer-pubkey → suspended flag for breaker integration. */
+    suspended = new Set();
+    /** Peer-pubkey → evicted flag. */
+    evicted = new Set();
+    constructor(config = {}) {
+        this.interfaceName = config.interfaceName ?? DEFAULT_INTERFACE;
+        this.listenPort = config.listenPort ?? DEFAULT_LISTEN_PORT;
+        this.meshSubnet = config.meshSubnet ?? DEFAULT_MESH_SUBNET;
+    }
+    /** Bind the local WG identity. Required before buildInterfaceConfig(). */
+    setLocalIdentity(key, meshIP) {
+        this.localKey = key;
+        this.localMeshIP = meshIP;
+    }
+    getInterfaceName() {
+        return this.interfaceName;
+    }
+    getMeshSubnet() {
+        return this.meshSubnet;
+    }
+    /**
+     * Build a `wg-quick`-compatible config string from current peers.
+     *
+     * Peers below WG_MIN_MESH_TRUST (UNTRUSTED) are excluded entirely.
+     * Suspended peers stay in the config but with `AllowedIPs =` empty
+     * (soft-block). Evicted peers are dropped completely.
+     *
+     * Operator writes this to `/etc/wireguard/<interface>.conf` and runs
+     * `wg-quick up <interface>`.
+     */
+    buildInterfaceConfig(peers) {
+        if (!this.localKey || !this.localMeshIP) {
+            throw new Error('WgMeshService.buildInterfaceConfig: local identity not set; call setLocalIdentity() first');
+        }
+        const lines = [];
+        lines.push('# Generated by ruflo federation plugin — ADR-111 Phase 2.');
+        lines.push('# Operator MUST review before `wg-quick up`. Trust-graded port');
+        lines.push('# rules (WG_NETWORK_GATES) are not enforced here — Phase 4 will');
+        lines.push('# project them into nftables/pf. v1 uses mesh-IP isolation only.');
+        lines.push('[Interface]');
+        lines.push(`PrivateKey = ${this.localKey.privateKey}`);
+        lines.push(`Address = ${this.localMeshIP}`);
+        lines.push(`ListenPort = ${this.listenPort}`);
+        lines.push('');
+        for (const peer of peers) {
+            if (peer.trustLevel < WG_MIN_MESH_TRUST)
+                continue;
+            // Security: validate every spliced field. A compromised but-signed
+            // peer can otherwise inject extra [Peer] blocks via newline-laden
+            // wgEndpoint. readSafePeerWgFields enforces base64/CIDR/host:port
+            // regexes; mismatches skip the peer entirely (safer than partial-write).
+            const safe = readSafePeerWgFields(peer);
+            if (!safe)
+                continue;
+            if (this.evicted.has(safe.wgPublicKey))
+                continue;
+            const allowed = this.suspended.has(safe.wgPublicKey)
+                ? ''
+                : this.computeAllowedIPs(peer, safe.wgMeshIP).join(', ');
+            lines.push(`# Peer ${peer.nodeId} — trust=${getTrustLevelLabel(peer.trustLevel)}${this.suspended.has(safe.wgPublicKey) ? ' (SUSPENDED)' : ''}`);
+            lines.push('[Peer]');
+            lines.push(`PublicKey = ${safe.wgPublicKey}`);
+            lines.push(`Endpoint = ${safe.wgEndpoint}`);
+            lines.push(`AllowedIPs = ${allowed}`);
+            lines.push('');
+        }
+        return lines.join('\n');
+    }
+    /**
+     * Compute the AllowedIPs slice for a peer at its current trust level.
+     * v1: each peer gets its own /32 mesh IP. Phase 4 will narrow this
+     * further via firewall rules; v1 keeps L3 broad and relies on the app
+     * layer + trust gates for access decisions.
+     */
+    computeAllowedIPs(peer, meshIP) {
+        if (peer.trustLevel === TrustLevel.UNTRUSTED)
+            return [];
+        const ips = [meshIP];
+        this.lastAppliedAllowedIPs.set(peer.nodeId, ips);
+        return ips;
+    }
+    /**
+     * Apply trust level → AllowedIPs as a `wg set` command for an
+     * already-running interface. Used when a peer joins or its trust level
+     * changes without needing a full config rewrite.
+     */
+    applyTrustLevelToAllowedIPs(peer, meshIP, pubkey) {
+        const ips = this.computeAllowedIPs(peer, meshIP);
+        return {
+            verb: 'set-allowed-ips',
+            peerPublicKey: pubkey,
+            cmd: this.formatCmd(`peer ${pubkey} allowed-ips ${ips.join(',')}`),
+            rationale: `apply AllowedIPs for ${peer.nodeId} at trust=${getTrustLevelLabel(peer.trustLevel)}`,
+        };
+    }
+    /**
+     * Phase 3 hook — peer SUSPENDED. Clear AllowedIPs (soft-block: keeps
+     * the peer's public key registered with the interface but blocks all
+     * routing to/from it).
+     */
+    removeAllowedIPs(peer, pubkey, reason) {
+        this.suspended.add(pubkey);
+        return {
+            verb: 'remove-allowed-ips',
+            peerPublicKey: pubkey,
+            cmd: this.formatCmd(`peer ${pubkey} allowed-ips ""`),
+            rationale: `SUSPEND ${peer.nodeId}${reason ? ` (${reason})` : ''} — clear AllowedIPs (soft-block)`,
+        };
+    }
+    /**
+     * Phase 3 hook — peer reactivated. Restore the AllowedIPs slice that
+     * was active before suspension. Returns null if the peer was never
+     * suspended (idempotent).
+     */
+    restoreAllowedIPs(peer, meshIP, pubkey) {
+        if (!this.suspended.has(pubkey))
+            return null;
+        this.suspended.delete(pubkey);
+        const previous = this.lastAppliedAllowedIPs.get(peer.nodeId);
+        const ips = previous && previous.length > 0 ? previous : this.computeAllowedIPs(peer, meshIP);
+        return {
+            verb: 'set-allowed-ips',
+            peerPublicKey: pubkey,
+            cmd: this.formatCmd(`peer ${pubkey} allowed-ips ${ips.join(',')}`),
+            rationale: `REACTIVATE ${peer.nodeId} — restore AllowedIPs ${ips.join(',')}`,
+        };
+    }
+    /**
+     * Phase 3 hook — peer EVICTED. Terminal removal from the mesh; the
+     * peer's `[Peer]` block is dropped on next config rebuild and an
+     * immediate `wg set <iface> peer <pk> remove` is emitted to flush
+     * runtime state without a config reload.
+     */
+    removePeer(peer, pubkey, reason) {
+        this.evicted.add(pubkey);
+        this.suspended.delete(pubkey);
+        this.lastAppliedAllowedIPs.delete(peer.nodeId);
+        return {
+            verb: 'remove-peer',
+            peerPublicKey: pubkey,
+            cmd: this.formatCmd(`peer ${pubkey} remove`),
+            rationale: `EVICT ${peer.nodeId}${reason ? ` (${reason})` : ''} — drop from mesh`,
+        };
+    }
+    /** Summarize the mesh state for `federation_wg_status` (Phase 6) and audit. */
+    summarize(peers) {
+        return peers
+            .filter(p => p.trustLevel >= WG_MIN_MESH_TRUST)
+            .map(peer => {
+            // Security: same validation as buildInterfaceConfig. If a peer
+            // published unsafe wg fields they get reported with empty strings —
+            // visible in operator status without becoming an injection vector.
+            const safe = readSafePeerWgFields(peer);
+            const meshIP = safe?.wgMeshIP ?? '';
+            const pubkey = safe?.wgPublicKey ?? '';
+            const endpoint = safe?.wgEndpoint ?? '';
+            let state = 'active';
+            if (pubkey && this.evicted.has(pubkey))
+                state = 'evicted';
+            else if (pubkey && this.suspended.has(pubkey))
+                state = 'suspended';
+            return {
+                nodeId: peer.nodeId,
+                trustLevel: peer.trustLevel,
+                trustLabel: getTrustLevelLabel(peer.trustLevel),
+                meshIP,
+                endpoint,
+                publicKey: pubkey,
+                state,
+                allowedIPs: safe && state === 'active' ? this.computeAllowedIPs(peer, safe.wgMeshIP) : [],
+            };
+        });
+    }
+    /**
+     * Defense-in-depth: validate that all bits we splice into a shell
+     * command are alphanumeric / base64 / WG-allowed chars. Refuses the
+     * command rather than ship a substring that might escape its slot.
+     */
+    formatCmd(args) {
+        // Allow: base64 pubkey chars [A-Za-z0-9+/=], IPv4 mesh chars
+        // [0-9./], plus a handful of fixed verbs. Reject everything else.
+        if (!/^[A-Za-z0-9+/=., "/-]*$/.test(args)) {
+            throw new Error(`WgMeshService.formatCmd: refusing arg with unsafe chars: ${JSON.stringify(args)}`);
+        }
+        return `wg set ${this.interfaceName} ${args}`;
+    }
+}
+//# sourceMappingURL=wg-mesh-service.js.map

package/dist/domain/services/wg-mesh-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wg-mesh-service.js","sourceRoot":"","sources":["../../../src/domain/services/wg-mesh-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAQpE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8C;IACzE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE;IAC1B,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QACrB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;KAC7B;IACD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;QACrB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;KAC1C;IACD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QACpB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;QACzC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAC1B,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;KACvC;IACD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;QACvB,EAAE,KAAK,EAAE,KAAK,EAAE;KACjB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,UAAU,CAAC,QAAQ,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAC5E,MAAM,iBAAiB,GAAG,yDAAyD,CAAC;AAQpF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACpC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzG,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC;AAWD,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AA4BlC,MAAM,OAAO,aAAa;IACP,aAAa,CAAS;IACtB,UAAU,CAAS;IACnB,UAAU,CAAS;IAC5B,QAAQ,GAAsB,IAAI,CAAC;IACnC,WAAW,GAAkB,IAAI,CAAC;IAC1C,0GAA0G;IACzF,qBAAqB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC9E,4DAA4D;IAC3C,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,kCAAkC;IACjB,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,iBAAiB,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,CAAC;IAED,0EAA0E;IAC1E,gBAAgB,CAAC,GAAe,EAAE,MAAc;QAC9C,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;;OASG;IACH,oBAAoB,CAAC,KAAgC;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,GAAG,iBAAiB;gBAAE,SAAS;YAClD,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,yEAAyE;YACzE,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,SAAS;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;gBAClD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,YAAY,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChJ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,IAAoB,EAAE,MAAc;QACpD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,2BAA2B,CAAC,IAAoB,EAAE,MAAc,EAAE,MAAc;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,SAAS,EAAE,wBAAwB,IAAI,CAAC,MAAM,aAAa,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;SACjG,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,IAAoB,EAAE,MAAc,EAAE,MAAe;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,aAAa,EAAE,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,MAAM,iBAAiB,CAAC;YACpD,SAAS,EAAE,WAAW,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,kCAAkC;SACnG,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,IAAoB,EAAE,MAAc,EAAE,MAAc;QACpE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9F,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,SAAS,EAAE,cAAc,IAAI,CAAC,MAAM,yBAAyB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC7E,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAoB,EAAE,MAAc,EAAE,MAAe;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,MAAM,SAAS,CAAC;YAC5C,SAAS,EAAE,SAAS,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,mBAAmB;SAClF,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,SAAS,CAAC,KAAgC;QACxC,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,iBAAiB,CAAC;aAC9C,GAAG,CAAC,IAAI,CAAC,EAAE;YACV,+DAA+D;YAC/D,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;YACxC,IAAI,KAAK,GAAuC,QAAQ,CAAC;YACzD,IAAI,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,KAAK,GAAG,SAAS,CAAC;iBACrD,IAAI,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,KAAK,GAAG,WAAW,CAAC;YACnE,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC/C,MAAM;gBACN,QAAQ;gBACR,SAAS,EAAE,MAAM;gBACjB,KAAK;gBACL,UAAU,EAAE,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;aAC1F,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACK,SAAS,CAAC,IAAY;QAC5B,6DAA6D;QAC7D,kEAAkE;QAClE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/domain/services/wg-witness-service.d.ts

@@ -0,0 +1,98 @@
+/**
+ * ADR-111 Phase 5 — Witness attestation chain for WG mesh mutations.
+ *
+ * Every coordination change (peer added/suspended/evicted/reactivated,
+ * keypair rotated) appends a signed entry to an append-only log
+ * `.claude-flow/federation/wg-changes.log`. The signature is over a
+ * canonical JSON encoding of the entry's content fields, using the
+ * operator's federation Ed25519 key — the same identity that signs
+ * federation manifests, so anyone who already trusts the manifest chain
+ * automatically trusts the WG change chain.
+ *
+ * Append-only via O_APPEND open + entries chained by prevHash (sha256 of
+ * the previous entry's canonical bytes). Tampering with history requires
+ * forging a chain of signatures with the operator's key.
+ *
+ * The periodic ruflo witness regen (plugins/ruflo-core/scripts/witness/)
+ * includes wg-changes.log as one of its watched artifacts (operator wires
+ * this via witness-fixes.json).
+ *
+ * Pure service: emits the canonical bytes and the signature to write.
+ * Caller does the I/O so this stays unit-testable without fs mocks.
+ */
+import type { WgCommand } from './wg-mesh-service.js';
+export type WgWitnessEventType = 'peer-added' | 'peer-removed-suspended' | 'peer-restored' | 'peer-evicted' | 'key-rotated' | 'interface-config-applied';
+/**
+ * Canonical fields of a witness entry. The hash + signature are computed
+ * over these in a stable JSON encoding (sorted keys, no whitespace).
+ */
+export interface WgWitnessContent {
+    readonly version: '1';
+    readonly type: WgWitnessEventType;
+    readonly timestamp: string;
+    readonly nodeId: string;
+    /** Public key of the affected peer, if any. */
+    readonly peerPublicKey?: string;
+    /** Mesh IP affected, if any. */
+    readonly meshIP?: string;
+    /** wg command that was emitted, if any. */
+    readonly wgCommand?: string;
+    /** Human-readable rationale for the audit log. */
+    readonly rationale: string;
+    /** Hash of the previous entry in the chain (sha256 hex), or empty for the genesis entry. */
+    readonly prevHash: string;
+}
+/**
+ * Full witness entry as it appears on disk — content + the operator's
+ * Ed25519 signature over the canonical encoding of content.
+ */
+export interface WgWitnessEntry {
+    readonly content: WgWitnessContent;
+    readonly hash: string;
+    readonly signature: string;
+}
+export interface WgWitnessSigner {
+    /** Returns an Ed25519 signature (base64) over the given canonical bytes. */
+    sign(bytes: Buffer): Promise<string>;
+}
+/**
+ * Stable JSON serialization for hashing/signing. Keys are sorted; no
+ * whitespace; undefined fields omitted. Same shape on every host so
+ * cross-host verifiers produce identical hashes.
+ */
+export declare function canonicalizeContent(content: WgWitnessContent): Buffer;
+export declare function hashContent(content: WgWitnessContent): string;
+export declare class WgWitnessService {
+    private readonly nodeId;
+    private readonly signer;
+    private lastHash;
+    constructor(nodeId: string, signer: WgWitnessSigner);
+    /**
+     * Override the previous-hash pointer (used when resuming from an existing
+     * log on disk). Caller reads the last entry from `wg-changes.log` and
+     * passes its `hash` here before appending more.
+     */
+    setLastHash(hash: string): void;
+    /** Build + sign an entry. Caller is responsible for the actual append-write. */
+    build(type: WgWitnessEventType, fields: Omit<WgWitnessContent, 'version' | 'type' | 'timestamp' | 'nodeId' | 'prevHash'>): Promise<WgWitnessEntry>;
+    /**
+     * Convenience: take a WgCommand emitted by WgMeshService Phase 2/3 and
+     * produce a witness entry of the right type. Maps verb → eventType.
+     */
+    attestWgCommand(cmd: WgCommand, meshIP?: string): Promise<WgWitnessEntry>;
+}
+/**
+ * Verify a single entry's signature + hash. Caller verifies the chain by
+ * iterating entries and confirming each entry's `prevHash` equals the
+ * preceding entry's `hash`.
+ */
+export declare function verifyWitnessEntry(entry: WgWitnessEntry, verify: (bytes: Buffer, signature: string) => Promise<boolean>): Promise<boolean>;
+/**
+ * Verify a full chain — every entry valid + chain link unbroken.
+ */
+export declare function verifyWitnessChain(entries: readonly WgWitnessEntry[], verify: (bytes: Buffer, signature: string) => Promise<boolean>): Promise<{
+    ok: boolean;
+    failedAt?: number;
+    reason?: string;
+}>;
+//# sourceMappingURL=wg-witness-service.d.ts.map

package/dist/domain/services/wg-witness-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wg-witness-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/wg-witness-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,wBAAwB,GACxB,eAAe,GACf,cAAc,GACd,aAAa,GACb,0BAA0B,CAAC;AAE/B;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gCAAgC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAOrE;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAc;gBAElB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe;IAKnD;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI/B,gFAAgF;IAC1E,KAAK,CACT,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC,GACvF,OAAO,CAAC,cAAc,CAAC;IAgB1B;;;OAGG;IACG,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAchF;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC7D,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC7D,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAc9D"}

package/dist/domain/services/wg-witness-service.js

@@ -0,0 +1,122 @@
+/**
+ * ADR-111 Phase 5 — Witness attestation chain for WG mesh mutations.
+ *
+ * Every coordination change (peer added/suspended/evicted/reactivated,
+ * keypair rotated) appends a signed entry to an append-only log
+ * `.claude-flow/federation/wg-changes.log`. The signature is over a
+ * canonical JSON encoding of the entry's content fields, using the
+ * operator's federation Ed25519 key — the same identity that signs
+ * federation manifests, so anyone who already trusts the manifest chain
+ * automatically trusts the WG change chain.
+ *
+ * Append-only via O_APPEND open + entries chained by prevHash (sha256 of
+ * the previous entry's canonical bytes). Tampering with history requires
+ * forging a chain of signatures with the operator's key.
+ *
+ * The periodic ruflo witness regen (plugins/ruflo-core/scripts/witness/)
+ * includes wg-changes.log as one of its watched artifacts (operator wires
+ * this via witness-fixes.json).
+ *
+ * Pure service: emits the canonical bytes and the signature to write.
+ * Caller does the I/O so this stays unit-testable without fs mocks.
+ */
+import { createHash } from 'node:crypto';
+/**
+ * Stable JSON serialization for hashing/signing. Keys are sorted; no
+ * whitespace; undefined fields omitted. Same shape on every host so
+ * cross-host verifiers produce identical hashes.
+ */
+export function canonicalizeContent(content) {
+    const keys = Object.keys(content).sort();
+    const ordered = {};
+    for (const k of keys) {
+        if (content[k] !== undefined)
+            ordered[k] = content[k];
+    }
+    return Buffer.from(JSON.stringify(ordered), 'utf-8');
+}
+export function hashContent(content) {
+    return createHash('sha256').update(canonicalizeContent(content)).digest('hex');
+}
+export class WgWitnessService {
+    nodeId;
+    signer;
+    lastHash = '';
+    constructor(nodeId, signer) {
+        this.nodeId = nodeId;
+        this.signer = signer;
+    }
+    /**
+     * Override the previous-hash pointer (used when resuming from an existing
+     * log on disk). Caller reads the last entry from `wg-changes.log` and
+     * passes its `hash` here before appending more.
+     */
+    setLastHash(hash) {
+        this.lastHash = hash;
+    }
+    /** Build + sign an entry. Caller is responsible for the actual append-write. */
+    async build(type, fields) {
+        const content = {
+            version: '1',
+            type,
+            timestamp: new Date().toISOString(),
+            nodeId: this.nodeId,
+            prevHash: this.lastHash,
+            ...fields,
+        };
+        const canonical = canonicalizeContent(content);
+        const hash = createHash('sha256').update(canonical).digest('hex');
+        const signature = await this.signer.sign(canonical);
+        this.lastHash = hash;
+        return { content, hash, signature };
+    }
+    /**
+     * Convenience: take a WgCommand emitted by WgMeshService Phase 2/3 and
+     * produce a witness entry of the right type. Maps verb → eventType.
+     */
+    async attestWgCommand(cmd, meshIP) {
+        const typeMap = {
+            'add-peer': 'peer-added',
+            'set-allowed-ips': 'peer-restored',
+            'remove-allowed-ips': 'peer-removed-suspended',
+            'remove-peer': 'peer-evicted',
+        };
+        return this.build(typeMap[cmd.verb], {
+            peerPublicKey: cmd.peerPublicKey,
+            meshIP,
+            wgCommand: cmd.cmd,
+            rationale: cmd.rationale,
+        });
+    }
+}
+/**
+ * Verify a single entry's signature + hash. Caller verifies the chain by
+ * iterating entries and confirming each entry's `prevHash` equals the
+ * preceding entry's `hash`.
+ */
+export async function verifyWitnessEntry(entry, verify) {
+    const canonical = canonicalizeContent(entry.content);
+    const expectedHash = createHash('sha256').update(canonical).digest('hex');
+    if (entry.hash !== expectedHash)
+        return false;
+    return verify(canonical, entry.signature);
+}
+/**
+ * Verify a full chain — every entry valid + chain link unbroken.
+ */
+export async function verifyWitnessChain(entries, verify) {
+    let prevHash = '';
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        if (e.content.prevHash !== prevHash) {
+            return { ok: false, failedAt: i, reason: 'broken-chain-link' };
+        }
+        const validEntry = await verifyWitnessEntry(e, verify);
+        if (!validEntry) {
+            return { ok: false, failedAt: i, reason: 'invalid-signature-or-hash' };
+        }
+        prevHash = e.hash;
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=wg-witness-service.js.map

package/dist/domain/services/wg-witness-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wg-witness-service.js","sourceRoot":"","sources":["../../../src/domain/services/wg-witness-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA+CzC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAmC,CAAC;IAC1E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAyB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAS;IACf,MAAM,CAAkB;IACjC,QAAQ,GAAW,EAAE,CAAC;IAE9B,YAAY,MAAc,EAAE,MAAuB;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,IAAY;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,KAAK,CACT,IAAwB,EACxB,MAAwF;QAExF,MAAM,OAAO,GAAqB;YAChC,OAAO,EAAE,GAAG;YACZ,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,MAAM;SACV,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,GAAc,EAAE,MAAe;QACnD,MAAM,OAAO,GAAkD;YAC7D,UAAU,EAAE,YAAY;YACxB,iBAAiB,EAAE,eAAe;YAClC,oBAAoB,EAAE,wBAAwB;YAC9C,aAAa,EAAE,cAAc;SAC9B,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACnC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAqB,EACrB,MAA8D;IAE9D,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkC,EAClC,MAA8D;IAE9D,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACjE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACzE,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/domain/value-objects/wg-config.d.ts

@@ -0,0 +1,70 @@
+/**
+ * ADR-111 Phase 1 — WireGuard configuration value objects.
+ *
+ * Pure types + deterministic helpers. No I/O, no shell calls. Used by
+ * WgMeshService (Phase 2) and surfaced in FederationManifest (Phase 1) so
+ * peers can publish their WG identity inside the same Ed25519-signed
+ * manifest that already carries their federation identity.
+ */
+/**
+ * The WG section of a FederationManifest. Optional — present only when
+ * the local node has opted in via `config.wgMesh: true`.
+ *
+ * - publicKey is the X25519 public key in base64 (32-byte raw → 44 chars
+ *   including '=' padding), exactly the format `wg-quick`/`wg setconf`
+ *   accept. Never include the private key in the manifest.
+ * - endpoint is `host:port` reachable on UDP. May be a hostname (resolved
+ *   by the consumer) or an IPv4/v6 literal. The port is WireGuard's, not
+ *   federation's WS port — usually 51820.
+ * - meshIP is the assigned /32 inside the federation mesh subnet
+ *   (10.50.0.0/16 by default). Stored as `a.b.c.d/32`.
+ */
+export interface WgManifestSection {
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly meshIP: string;
+}
+/**
+ * A locally-generated WG keypair. Kept entirely off the wire — `publicKey`
+ * is what gets published in the manifest; `privateKey` stays on disk
+ * (mode 0600) and in this in-memory object.
+ */
+export interface WgLocalKey {
+    readonly publicKey: string;
+    readonly privateKey: string;
+    readonly createdAt: string;
+}
+/**
+ * Default federation mesh subnet. RFC1918 private space outside the
+ * common LAN/k8s ranges and Tailscale's 100.64.0.0/10. Documented in
+ * the ADR. Birthday-collision probability stays under 1% up to ~36
+ * peers and under 50% at ~302 peers — within the v1 ≤50-peer target.
+ */
+export declare const DEFAULT_MESH_SUBNET = "10.50.0.0/16";
+/**
+ * Generate an X25519 keypair in the format WireGuard accepts.
+ *
+ * WireGuard keys are 32 raw bytes encoded base64 (44 chars with '='
+ * padding). Node's `generateKeyPairSync('x25519')` returns PKCS8/SPKI
+ * DER envelopes — we extract the trailing 32 bytes which are the raw
+ * key material (the DER prefix is constant for X25519).
+ *
+ * No new dependencies: Node 18+ has X25519 support in core crypto.
+ */
+export declare function generateWgKeyPair(): WgLocalKey;
+/**
+ * Derive a deterministic mesh IP for `nodeId` inside `subnet`.
+ *
+ * Strategy: sha256(nodeId) → top bytes interpreted as host portion of the
+ * subnet, clamped to avoid the network address (.0) and broadcast (.255)
+ * of any /24 inside the subnet. This is collision-resistant in the
+ * birthday-paradox sense — see ADR for thresholds.
+ *
+ * `usedIPs` (when provided) gives previously-assigned IPs in the mesh.
+ * If the derived IP is already taken, the function probes `nodeId + '\x00'`,
+ * `nodeId + '\x01'`, … until a free slot is found. Bounded to 1024 probes;
+ * exceeding that means the subnet is functionally exhausted and the caller
+ * should jump to a larger range (see ADR `10.50.0.0/12` recommendation).
+ */
+export declare function deriveMeshIP(nodeId: string, subnet?: string, usedIPs?: ReadonlySet<string>): string;
+//# sourceMappingURL=wg-config.d.ts.map

package/dist/domain/value-objects/wg-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wg-config.d.ts","sourceRoot":"","sources":["../../../src/domain/value-objects/wg-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAgB9C;AAuBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAA4B,EACpC,OAAO,GAAE,WAAW,CAAC,MAAM,CAAa,GACvC,MAAM,CAsBR"}