@highstate/library 0.20.0 → 0.21.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/library",
-  "version": "0.20.0",
+  "version": "0.21.1",
   "type": "module",
   "highstate": {
     "type": "library"
@@ -23,23 +23,23 @@
       "stdlib"
     ]
   },
+  "scripts": {
+    "build": "highstate build",
+    "typecheck": "tsgo --noEmit --skipLibCheck",
+    "biome": "biome check --write --unsafe --error-on-warnings",
+    "biome:check": "biome check --error-on-warnings"
+  },
   "dependencies": {
-    "remeda": "^2.21.0",
-    "@highstate/contract": "0.20.0"
+    "@highstate/contract": "0.20.0",
+    "remeda": "^2.21.0"
   },
   "devDependencies": {
     "@biomejs/biome": "2.2.0",
+    "@highstate/cli": "0.20.0",
     "@typescript/native-preview": "^7.0.0-dev.20250920.1",
-    "type-fest": "^4.41.0",
-    "@highstate/cli": "0.20.0"
+    "type-fest": "^4.41.0"
   },
   "repository": {
     "url": "https://github.com/highstate-io/highstate"
-  },
-  "scripts": {
-    "build": "highstate build",
-    "typecheck": "tsgo --noEmit --skipLibCheck",
-    "biome": "biome check --write --unsafe --error-on-warnings",
-    "biome:check": "biome check --error-on-warnings"
   }
-}
+}

package/src/index.ts

@@ -20,3 +20,5 @@ export * as talos from "./talos"
 export * from "./third-party"
 export * from "./utils"
 export * as wireguard from "./wireguard"
+
+// hi234

package/src/network/address-space.ts

@@ -62,6 +62,20 @@ export const addressSpace = defineUnit({
      * The supported formats are the same as in `addresses`.
      */
     excluded: z.string().array().default([]),
+
+    /**
+     * Whether to return IPv4 subnets or filter them out.
+     *
+     * By default, is set to `true`.
+     */
+    ipv4: z.boolean().default(true),
+
+    /**
+     * Whether to return IPv6 subnets or filter them out.
+     *
+     * By default, is set to `true`.
+     */
+    ipv6: z.boolean().default(true),
   },
 
   inputs: {

package/src/wireguard.ts

@@ -733,6 +733,14 @@ export const nodeK8s = defineUnit({
      * By default, is false.
      */
     allowClusterPods: z.boolean().default(false),
+
+    /**
+     * Whether to drop all traffic from the interface using ip rule with priority 100.
+     *
+     * This is useful for preventing the traffic leaks before upstream node is attached via `downstreamInterface` input.
+     * They will add their own ip rule with <100 priority which allows traffic from the interface.
+     */
+    lockdownUpstream: z.boolean().default(false),
   },
 
   inputs: {
@@ -841,6 +849,14 @@ export const nodeFeedK8s = defineUnit({
      */
     forwardRestrictedSubnets: z.string().array().default([]),
 
+    /**
+     * Whether to drop all traffic from the interface using ip rule with priority 100.
+     *
+     * This is useful for preventing the traffic leaks before upstream node is attached via `downstreamInterface` input.
+     * They will add their own ip rule with <100 priority which allows traffic from the interface.
+     */
+    lockdownUpstream: z.boolean().default(false),
+
     /**
      * The extra specification of the container which runs the wg-feed daemon.
      *

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Exeteres
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.