@highstate/library 0.4.1 → 0.4.3

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { defineEntity, defineUnit, text } from '@highstate/contract';
-import { Type } from '@sinclair/typebox';
+import { Type, defineEntity, defineUnit, text, defineComponent } from '@highstate/contract';
+import IPCIDR from 'ip-cidr';
 
 const keyTypeSchema = Type.Union([
   //
@@ -26,44 +26,19 @@ const credentialsSchema = Type.Object({
   user: Type.Optional(Type.String()),
   port: Type.Optional(Type.Number()),
   password: Type.Optional(Type.String()),
-  privateKey: keyPairEntity.schema
+  privateKey: Type.Optional(keyPairEntity.schema)
 });
 const keyPair = defineUnit({
   type: "ssh.key-pair",
-  outputs: {
-    keyPair: keyPairEntity
-  },
-  meta: {
-    displayName: "SSH Key Pair",
-    description: "Generates a new ED25519 SSH key pair.",
-    category: "ssh",
-    primaryIcon: "charm:key",
-    primaryIconColor: "#ffffff",
-    secondaryIcon: "mdi:lock",
-    secondaryIconColor: "#ffffff"
-  },
-  source: {
-    type: "npm",
-    package: "@highstate/ssh"
-  }
-});
-const existingKeyPair = defineUnit({
-  type: "ssh.existing-key-pair",
-  args: {
-    type: {
-      schema: keyTypeSchema,
-      description: "The type of the key pair."
-    }
-  },
   secrets: {
-    privateKey: Type.String()
+    privateKey: Type.Optional(Type.String())
   },
   outputs: {
     keyPair: keyPairEntity
   },
   meta: {
-    displayName: "SSH Existing Key Pair",
-    description: "Uses an existing SSH key pair.",
+    displayName: "SSH Key Pair",
+    description: "Generates a new ED25519 SSH key pair.",
     category: "ssh",
     primaryIcon: "charm:key",
     primaryIconColor: "#ffffff",
@@ -72,7 +47,8 @@ const existingKeyPair = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/ssh"
+    package: "@highstate/common",
+    path: "ssh/key-pair"
   }
 });
 const existingPublicKey = defineUnit({
@@ -101,14 +77,14 @@ const existingPublicKey = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/ssh"
+    package: "@highstate/common",
+    path: "ssh/existing-public-key"
   }
 });
 
 var ssh = /*#__PURE__*/Object.freeze({
   __proto__: null,
   credentialsSchema: credentialsSchema,
-  existingKeyPair: existingKeyPair,
   existingPublicKey: existingPublicKey,
   keyPair: keyPair,
   keyPairEntity: keyPairEntity,
@@ -120,12 +96,33 @@ const serverEntity = defineEntity({
   type: "common.server",
   schema: Type.Object({
     endpoint: Type.String(),
-    sshCredentials: credentialsSchema
+    hostname: Type.String(),
+    sshCredentials: Type.Optional(credentialsSchema)
   }),
   meta: {
     color: "#009688"
   }
 });
+const innerCircuitEntity = defineEntity({
+  type: "common.inner-circuit",
+  schema: Type.Object({
+    interface: Type.String()
+  }),
+  meta: {
+    color: "#2196F3",
+    description: "The inner circuit of a network where the traffic is flowing inside the single kernel."
+  }
+});
+const outerCircuitEntity = defineEntity({
+  type: "common.outer-circuit",
+  schema: Type.Object({
+    interface: Type.String()
+  }),
+  meta: {
+    color: "#FFC107",
+    description: "The outer circuit of a network which traffic will be routed to another network."
+  }
+});
 const gatewayEntity = defineEntity({
   type: "common.gateway",
   schema: Type.Object({
@@ -176,7 +173,33 @@ const accessPoint = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/common"
+    package: "@highstate/common",
+    path: "access-point"
+  }
+});
+const existingServer = defineUnit({
+  type: "common.existing-server",
+  args: {
+    endpoint: Type.String(),
+    sshUser: Type.Optional(Type.String({ default: "root" })),
+    sshPort: Type.Optional(Type.Number({ default: 22 }))
+  },
+  secrets: {
+    sshPassword: Type.Optional(Type.String())
+  },
+  outputs: {
+    server: serverEntity
+  },
+  meta: {
+    displayName: "Existing Server",
+    description: "An existing server that can be used in the configuration.",
+    primaryIcon: "mdi:server",
+    defaultNamePrefix: "server"
+  },
+  source: {
+    type: "npm",
+    package: "@highstate/common",
+    path: "existing-server"
   }
 });
 
@@ -185,12 +208,15 @@ var common = /*#__PURE__*/Object.freeze({
   accessPoint: accessPoint,
   accessPointEntity: accessPointEntity,
   dnsProviderEntity: dnsProviderEntity,
+  existingServer: existingServer,
   gatewayEntity: gatewayEntity,
+  innerCircuitEntity: innerCircuitEntity,
+  outerCircuitEntity: outerCircuitEntity,
   serverEntity: serverEntity,
   tlsIssuerEntity: tlsIssuerEntity
 });
 
-const clusterEntity$1 = defineEntity({
+const clusterEntity$2 = defineEntity({
   type: "proxmox.cluster",
   schema: Type.Object({
     endpoint: Type.String(),
@@ -228,7 +254,7 @@ const connection$1 = defineUnit({
     apiToken: Type.Optional(Type.String())
   },
   outputs: {
-    proxmoxCluster: clusterEntity$1
+    proxmoxCluster: clusterEntity$2
   },
   meta: {
     displayName: "Proxmox Connection",
@@ -240,7 +266,8 @@ const connection$1 = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/proxmox"
+    package: "@highstate/proxmox",
+    path: "connection"
   }
 });
 const image = defineUnit({
@@ -252,7 +279,7 @@ const image = defineUnit({
     datastoreId: Type.Optional(Type.String())
   },
   inputs: {
-    proxmoxCluster: clusterEntity$1
+    proxmoxCluster: clusterEntity$2
   },
   outputs: {
     image: imageEntity
@@ -267,7 +294,8 @@ const image = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/proxmox"
+    package: "@highstate/proxmox",
+    path: "image"
   }
 });
 const existingImage = defineUnit({
@@ -288,7 +316,8 @@ const existingImage = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/proxmox"
+    package: "@highstate/proxmox",
+    path: "existing-image"
   }
 });
 const virtualMachine = defineUnit({
@@ -306,7 +335,7 @@ const virtualMachine = defineUnit({
     bridge: Type.Optional(Type.String())
   },
   inputs: {
-    proxmoxCluster: clusterEntity$1,
+    proxmoxCluster: clusterEntity$2,
     image: imageEntity,
     sshPublicKey: {
       entity: publicKeyEntity,
@@ -330,13 +359,14 @@ const virtualMachine = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/proxmox"
+    package: "@highstate/proxmox",
+    path: "virtual-machine"
   }
 });
 
 var proxmox = /*#__PURE__*/Object.freeze({
   __proto__: null,
-  clusterEntity: clusterEntity$1,
+  clusterEntity: clusterEntity$2,
   connection: connection$1,
   existingImage: existingImage,
   image: image,
@@ -344,8 +374,9 @@ var proxmox = /*#__PURE__*/Object.freeze({
   virtualMachine: virtualMachine
 });
 
-const clusterEntity = defineEntity({
+const clusterEntity$1 = defineEntity({
   type: "k8s.cluster",
+  sensitive: true,
   schema: Type.Object({
     kubeconfig: Type.String()
   }),
@@ -365,7 +396,7 @@ const routeEntity = defineEntity({
 const traefikGateway = defineUnit({
   type: "k8s.traefik-gateway",
   inputs: {
-    k8sCluster: clusterEntity,
+    k8sCluster: clusterEntity$1,
     ingress: routeEntity
   },
   outputs: {
@@ -378,13 +409,14 @@ const traefikGateway = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/k8s"
+    package: "@highstate/apps",
+    path: "traefik"
   }
 });
 const certManager = defineUnit({
   type: "k8s.cert-manager",
   inputs: {
-    k8sCluster: clusterEntity,
+    k8sCluster: clusterEntity$1,
     dnsProvider: dnsProviderEntity
   },
   outputs: {
@@ -397,13 +429,14 @@ const certManager = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/k8s"
+    package: "@highstate/apps",
+    path: "cert-manager"
   }
 });
 const coredns = defineUnit({
   type: "k8s.coredns",
   inputs: {
-    k8sCluster: clusterEntity
+    k8sCluster: clusterEntity$1
   },
   outputs: {
     dnsProvider: dnsProviderEntity
@@ -415,20 +448,32 @@ const coredns = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/k8s"
+    package: "@highstate/apps",
+    path: "coredns"
   }
 });
 
 var k8s = /*#__PURE__*/Object.freeze({
   __proto__: null,
   certManager: certManager,
-  clusterEntity: clusterEntity,
+  clusterEntity: clusterEntity$1,
   coredns: coredns,
   routeEntity: routeEntity,
   traefikGateway: traefikGateway
 });
 
-const cluster = defineUnit({
+const clusterEntity = defineEntity({
+  type: "talos.cluster",
+  sensitive: true,
+  schema: Type.Object({
+    clientConfiguration: Type.String(),
+    machineSecrets: Type.String()
+  }),
+  meta: {
+    color: "#2d2d2d"
+  }
+});
+const cluster$1 = defineUnit({
   type: "talos.cluster",
   args: {
     scheduleOnMasters: {
@@ -437,6 +482,41 @@ const cluster = defineUnit({
         Allow scheduling workloads on the master nodes.
         By default, "true" if no worker nodes are provided.
       `
+    },
+    endpoint: {
+      schema: Type.Optional(Type.String()),
+      description: text`
+        The endpoint of the cluster.
+        By default, the first master node's endpoint is used.
+      `
+    },
+    clusterName: {
+      schema: Type.Optional(Type.String()),
+      description: text`
+        The name of the cluster.
+        By default, the name of the instance is used.
+      `
+    },
+    sharedConfigPatch: {
+      schema: Type.Optional(Type.Record(Type.String(), Type.Any())),
+      description: text`
+        The shared configuration patch.
+        It will be applied to all nodes.
+      `
+    },
+    masterConfigPatch: {
+      schema: Type.Optional(Type.Record(Type.String(), Type.Any())),
+      description: text`
+        The master configuration patch.
+        It will be applied to all master nodes.
+      `
+    },
+    workerConfigPatch: {
+      schema: Type.Optional(Type.Record(Type.String(), Type.Any())),
+      description: text`
+        The worker configuration patch.
+        It will be applied to all worker nodes.
+      `
     }
   },
   inputs: {
@@ -451,7 +531,8 @@ const cluster = defineUnit({
     }
   },
   outputs: {
-    k8sCluster: clusterEntity,
+    k8sCluster: clusterEntity$1,
+    talosCluster: clusterEntity,
     egress: routeEntity
   },
   meta: {
@@ -464,31 +545,43 @@ const cluster = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/talos"
+    package: "@highstate/talos",
+    path: "cluster"
   }
 });
 
 var talos = /*#__PURE__*/Object.freeze({
   __proto__: null,
-  cluster: cluster
+  cluster: cluster$1,
+  clusterEntity: clusterEntity
 });
 
-const backendSchema = Type.Union([Type.Literal("wireguard"), Type.Literal("amneziawg")], {
-  default: "wireguard"
-});
+const backendSchema = Type.Union([
+  //
+  Type.Literal("wireguard"),
+  Type.Literal("amneziawg")
+]);
+const presharedKeyModeSchema = Type.Union([
+  Type.Literal("none"),
+  Type.Literal("global"),
+  Type.Literal("secure")
+]);
 const networkEntity = defineEntity({
   type: "wireguard.network",
   schema: Type.Object({
     backend: Type.Optional(backendSchema),
-    preSharedKey: Type.Optional(Type.String())
+    presharedKeyMode: presharedKeyModeSchema,
+    globalPresharedKey: Type.Optional(Type.String())
   })
 });
 const identityEntity = defineEntity({
   type: "wireguard.identity",
   schema: Type.Object({
-    network: Type.String(),
+    name: Type.String(),
+    network: Type.Optional(networkEntity.schema),
     address: Type.String(),
-    privateKey: Type.String()
+    privateKey: Type.String(),
+    presharedKeyPart: Type.Optional(Type.String())
   }),
   meta: {
     color: "#F44336"
@@ -497,10 +590,13 @@ const identityEntity = defineEntity({
 const peerEntity = defineEntity({
   type: "wireguard.peer",
   schema: Type.Object({
-    network: Type.String(),
-    address: Type.String(),
+    name: Type.String(),
+    network: Type.Optional(networkEntity.schema),
     publicKey: Type.String(),
-    endpoint: Type.Optional(Type.String())
+    address: Type.String(),
+    allowedIps: Type.Array(Type.String()),
+    endpoint: Type.Optional(Type.String()),
+    presharedKeyPart: Type.Optional(Type.String())
   }),
   meta: {
     color: "#673AB7"
@@ -511,7 +607,6 @@ const k8sNodeEntity = defineEntity({
   schema: Type.Object({
     network: Type.String(),
     address: Type.String(),
-    allowedIps: Type.Array(Type.String()),
     endpoint: Type.Optional(Type.String()),
     peers: Type.Array(Type.String())
   })
@@ -519,8 +614,39 @@ const k8sNodeEntity = defineEntity({
 const network = defineUnit({
   type: "wireguard.network",
   args: {
-    backend: Type.Optional(backendSchema),
-    preSharedKey: Type.Optional(Type.String())
+    /**
+     * The backend to use for the WireGuard network.
+     *
+     * Possible values are:
+     * 1. `wireguard` - The default backend.
+     * 2. `amneziawg` - The censorship-resistant fork of WireGuard.
+     *
+     * By default, the `wireguard` backend is used.
+     */
+    backend: backendSchema,
+    /**
+     * The option which defines how to handle pre-shared keys between peers.
+     *
+     * 1. `none` - No pre-shared keys will be used.
+     * 2. `global` - A single pre-shared key will be used for all peer pairs in the network.
+     * 3. `secure` - Each peer pair will have its own pre-shared key.
+     * In this case, each identity generates `presharedKeyPart` and the actual pre-shared key
+     * for each peer pair will be computed as `xor(peer1.presharedKeyPart, peer2.presharedKeyPart)`.
+     *
+     * If the whole network is managed by the HighState, the `secure` mode is recommended.
+     *
+     * By default, the `none` mode is used.
+     */
+    presharedKeyMode: Type.Optional(presharedKeyModeSchema)
+  },
+  secrets: {
+    /**
+     * The global pre-shared key to use for all peer pairs in the network.
+     *
+     * Will be used only if `presharedKeyMode` is set to `global`.
+     * Will be generated automatically if not provided.
+     */
+    globalPresharedKey: Type.Optional(Type.String())
   },
   outputs: {
     network: networkEntity
@@ -533,17 +659,70 @@ const network = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/wireguard"
+    package: "@highstate/wireguard",
+    path: "network"
   }
 });
 const identity = defineUnit({
   type: "wireguard.identity",
   args: {
+    /**
+     * The name of the WireGuard identity.
+     *
+     * If not provided, the identity will be named after the unit.
+     */
+    peerName: Type.Optional(Type.String()),
+    /**
+     * The address of the WireGuard interface.
+     *
+     * The address may be any IPv4 or IPv6 address. CIDR notation is also supported.
+     */
     address: Type.String(),
-    endpoint: Type.Optional(Type.String())
+    /**
+     * The endpoint of the WireGuard peer.
+     *
+     * Does not affect node which implements the identity, but is used in the peer configuration of other nodes.
+     */
+    endpoint: Type.Optional(Type.String()),
+    /**
+     * The list of allowed IPs for the peer.
+     *
+     * Does not affect node which implements the identity, but is used in the peer configuration of other nodes.
+     *
+     * If not provided, the `address` will be used.
+     */
+    allowedIps: Type.Optional(Type.Array(Type.String())),
+    /**
+     * Whether the node should be used as an exit node.
+     *
+     * Just an alias for the `allowedIps` with the value of `0.0.0.0/0, ::/0`.
+     */
+    exitNode: Type.Optional(Type.Boolean())
+  },
+  secrets: {
+    /**
+     * The private key of the WireGuard identity.
+     *
+     * If not provided, the key will be generated automatically.
+     */
+    privateKey: Type.Optional(Type.String()),
+    /**
+     * The part of the pre-shared of the WireGuard identity.
+     *
+     * Will be generated automatically if not provided.
+     */
+    presharedKeyPart: Type.Optional(Type.String())
   },
   inputs: {
-    network: networkEntity
+    /**
+     * The network to use for the WireGuard identity.
+     *
+     * If not provided, the identity will use default network configuration.
+     */
+    network: {
+      entity: networkEntity,
+      required: false
+    }
   },
   outputs: {
     identity: identityEntity,
@@ -557,13 +736,13 @@ const identity = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/wireguard"
+    package: "@highstate/wireguard",
+    path: "identity"
   }
 });
 const node = defineUnit({
-  type: "wireguard.node-k8s",
+  type: "wireguard.node",
   args: {
-    allowedIps: Type.Optional(Type.Array(Type.String())),
     listenPort: Type.Optional(Type.Number()),
     externalIp: Type.Optional(Type.String()),
     serviceType: Type.Optional(
@@ -577,17 +756,16 @@ const node = defineUnit({
   inputs: {
     identity: identityEntity,
     k8sCluster: {
-      entity: clusterEntity,
+      entity: clusterEntity$1,
       required: false
     },
     peers: {
       entity: peerEntity,
       multiple: true,
       required: false
-    }
-  },
-  outputs: {
-    egress: routeEntity
+    },
+    innerCircuit: innerCircuitEntity,
+    outerCircuit: outerCircuitEntity
   },
   meta: {
     description: "The WireGuard node running on the Kubernetes.",
@@ -597,7 +775,8 @@ const node = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/wireguard"
+    package: "@highstate/wireguard",
+    path: "node"
   }
 });
 const config = defineUnit({
@@ -618,7 +797,56 @@ const config = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/wireguard"
+    package: "@highstate/wireguard",
+    path: "config"
+  }
+});
+const generator = defineComponent({
+  type: "wireguard.generator",
+  args: {
+    clientNames: Type.Array(Type.String()),
+    cidr: Type.String()
+  },
+  inputs: {
+    network: networkEntity,
+    peer: peerEntity
+  },
+  outputs: {
+    peers: {
+      entity: peerEntity,
+      multiple: true
+    }
+  },
+  meta: {
+    description: "Bulk generate the WireGuard identities and peers.",
+    primaryIcon: "simple-icons:wireguard",
+    primaryIconColor: "#88171a",
+    secondaryIcon: "mdi:accounts"
+  },
+  create({ name, args, inputs }) {
+    const cidr = new IPCIDR(args.cidr);
+    const peers = [];
+    for (const [index, client] of args.clientNames.entries()) {
+      const fullName = `${name}.${client}`;
+      const { identity: wgIdentity, peer: wgPeer } = identity({
+        name: fullName,
+        args: {
+          address: cidr.start({ from: index, type: "addressObject" }).address
+        },
+        inputs: {
+          network: inputs.network
+        }
+      });
+      peers.push(wgPeer);
+      config({
+        name: fullName,
+        inputs: {
+          identity: wgIdentity,
+          peers: [inputs.peer]
+        }
+      });
+    }
+    return { peers };
   }
 });
 
@@ -626,13 +854,15 @@ var wireguard = /*#__PURE__*/Object.freeze({
   __proto__: null,
   backendSchema: backendSchema,
   config: config,
+  generator: generator,
   identity: identity,
   identityEntity: identityEntity,
   k8sNodeEntity: k8sNodeEntity,
   network: network,
   networkEntity: networkEntity,
   node: node,
-  peerEntity: peerEntity
+  peerEntity: peerEntity,
+  presharedKeyModeSchema: presharedKeyModeSchema
 });
 
 const mariadbEntity = defineEntity({
@@ -657,12 +887,11 @@ const postgresqlEntity = defineEntity({
 });
 const mariadb = defineUnit({
   type: "apps.mariadb",
-  args: {
-    rootPassword: Type.String(),
-    databases: Type.Array(Type.String())
+  secrets: {
+    rootPassword: Type.String()
   },
   inputs: {
-    k8sCluster: clusterEntity
+    k8sCluster: clusterEntity$1
   },
   outputs: {
     mariadb: {
@@ -678,17 +907,17 @@ const mariadb = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/apps"
+    package: "@highstate/apps",
+    path: "mariadb"
   }
 });
 const postgresql = defineUnit({
   type: "apps.postgresql",
-  args: {
-    rootPassword: Type.String(),
-    databases: Type.Array(Type.String())
+  secrets: {
+    rootPassword: Type.String()
   },
   inputs: {
-    k8sCluster: clusterEntity
+    k8sCluster: clusterEntity$1
   },
   outputs: {
     postgresql: {
@@ -704,7 +933,8 @@ const postgresql = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/apps"
+    package: "@highstate/apps",
+    path: "postgresql"
   }
 });
 const vaultwarden = defineUnit({
@@ -726,7 +956,8 @@ const vaultwarden = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/apps"
+    package: "@highstate/apps",
+    path: "vaultwarden"
   }
 });
 const gitea = defineUnit({
@@ -748,7 +979,8 @@ const gitea = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/apps"
+    package: "@highstate/apps",
+    path: "gitea"
   }
 });
 const zitadel = defineUnit({
@@ -770,7 +1002,8 @@ const zitadel = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/apps"
+    package: "@highstate/apps",
+    path: "zitadel"
   }
 });
 
@@ -796,11 +1029,8 @@ const connectionEntity = defineEntity({
 });
 const connection = defineUnit({
   type: "cloudflare.connection",
-  args: {
-    apiKey: {
-      schema: Type.String(),
-      secret: true
-    }
+  secrets: {
+    apiKey: Type.String()
   },
   outputs: {
     connection: connectionEntity
@@ -812,7 +1042,8 @@ const connection = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/cloudflare"
+    package: "@highstate/cloudflare",
+    path: "connection"
   }
 });
 const zone = defineUnit({
@@ -835,7 +1066,8 @@ const zone = defineUnit({
   },
   source: {
     type: "npm",
-    package: "@highstate/cloudflare"
+    package: "@highstate/cloudflare",
+    path: "zone"
   }
 });
 
@@ -846,4 +1078,77 @@ var cloudflare = /*#__PURE__*/Object.freeze({
   zone: zone
 });
 
-export { apps, cloudflare, common, k8s, proxmox, ssh, talos, wireguard };
+const cluster = defineUnit({
+  type: "k3s.cluster",
+  inputs: {
+    server: serverEntity
+  },
+  outputs: {
+    k8sCluster: clusterEntity$1
+  },
+  meta: {
+    displayName: "K3s Cluster",
+    description: "The K3s cluster created on top of the server.",
+    category: "k3s",
+    primaryIcon: "devicon:k3s",
+    secondaryIcon: "devicon:kubernetes"
+  },
+  source: {
+    type: "npm",
+    package: "@highstate/k3s",
+    path: "cluster"
+  }
+});
+
+var k3s = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  cluster: cluster
+});
+
+const channelEntity = defineEntity({
+  type: "xt-wgobfs.target",
+  schema: Type.Object({
+    endpoint: Type.String()
+  })
+});
+const obfuscatorNode = defineUnit({
+  type: "xt-wgobfs.obfuscator",
+  outputs: {
+    outerCircuit: outerCircuitEntity,
+    channel: channelEntity
+  },
+  source: {
+    type: "npm",
+    package: "@highstate/xt-wgobfs",
+    path: "target-node"
+  },
+  meta: {
+    displayName: "xt-wgobfs Deobfuscator"
+  }
+});
+const deobfuscatorNode = defineUnit({
+  type: "xt-wgobfs.deobfuscator",
+  inputs: {
+    channel: channelEntity
+  },
+  outputs: {
+    outerCircuit: outerCircuitEntity
+  },
+  source: {
+    type: "npm",
+    package: "@highstate/xt-wgobfs",
+    path: "source-node"
+  },
+  meta: {
+    displayName: "xt-wgobfs Obfuscator"
+  }
+});
+
+var xtWgobfs = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  channelEntity: channelEntity,
+  deobfuscatorNode: deobfuscatorNode,
+  obfuscatorNode: obfuscatorNode
+});
+
+export { apps, cloudflare, common, k3s, k8s, proxmox, ssh, talos, wireguard, xtWgobfs };