@highstate/library 0.26.0 → 0.27.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/library",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "type": "module",
   "highstate": {
     "type": "library"
@@ -30,12 +30,12 @@
     "biome:check": "biome check --error-on-warnings"
   },
   "dependencies": {
-    "@highstate/contract": "0.26.0",
+    "@highstate/contract": "0.27.0",
     "remeda": "^2.21.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.2.0",
-    "@highstate/cli": "0.26.0",
+    "@biomejs/biome": "2.5.0",
+    "@highstate/cli": "0.27.0",
     "@typescript/native-preview": "^7.0.0-dev.20250920.1",
     "type-fest": "^4.41.0"
   },

package/src/k8s/apps/etcd.ts

@@ -1,4 +1,4 @@
-import { defineUnit } from "@highstate/contract"
+import { defineUnit, z } from "@highstate/contract"
 import { pick } from "remeda"
 import { connectionEntity } from "../../databases/etcd"
 import {
@@ -19,6 +19,16 @@ export const etcd = defineUnit({
   args: {
     ...appName("etcd"),
     ...pick(sharedArgs, ["external", "values", "patches", "service", "scheduling"]),
+
+    /**
+     * The odd number of etcd members to deploy.
+     */
+    replicas: z
+      .number()
+      .int()
+      .positive()
+      .refine(replicas => replicas % 2 === 1, "etcd replicas must be odd")
+      .default(1),
   },
 
   secrets: {

package/src/k8s/apps/wg-feed-server.ts

@@ -1,5 +1,6 @@
-import { defineUnit } from "@highstate/contract"
+import { defineUnit, z } from "@highstate/contract"
 import { pick } from "remeda"
+import { folderEntity } from "../../common"
 import { l4EndpointEntity } from "../../network"
 import { appName, sharedArgs, sharedInputs, source } from "./shared"
 
@@ -11,11 +12,28 @@ export const wgFeedServer = defineUnit({
 
   args: {
     ...appName("wg-feed-server"),
-    ...pick(sharedArgs, ["fqdn"]),
+    ...pick(sharedArgs, ["fqdn", "replicas", "scheduling"]),
+
+    /**
+     * The regular expression matching paths served by the WG feed server.
+     *
+     * Must be provided together with `fallbackSite`.
+     */
+    pathPattern: z.string().optional(),
   },
 
   inputs: {
     ...pick(sharedInputs, ["k8sCluster", "accessPoint", "etcd"]),
+
+    /**
+     * The static site served for paths that do not match `pathPattern`.
+     *
+     * Must be provided together with `pathPattern`.
+     */
+    fallbackSite: {
+      entity: folderEntity,
+      required: false,
+    },
   },
 
   outputs: {

package/src/wireguard.ts

@@ -768,6 +768,11 @@ export const nodeK8s = defineUnit({
      */
     external: z.boolean().default(false),
 
+    /**
+     * The NodePort to assign when the node is exposed.
+     */
+    nodePort: z.number().int().min(30000).max(32767).optional(),
+
     /**
      * The policy to use for exposing the WireGuard node.
      *
@@ -779,6 +784,11 @@ export const nodeK8s = defineUnit({
      */
     exposePolicy: nodeExposePolicySchema.default("when-has-endpoint"),
 
+    /**
+     * Whether to include a listen port in the generated WireGuard configuration.
+     */
+    listen: z.boolean().default(true),
+
     /**
      * The extra specification of the container which runs the WireGuard node.
      *