@highstate/wireguard 0.4.2

package/dist/config/index.js

@@ -0,0 +1,16 @@
+import { wireguard } from '@highstate/library';
+import { forUnit } from '@highstate/pulumi';
+import { b as generateIdentityConfig } from '../shared-RypNC0-F.js';
+import '@noble/curves/ed25519';
+
+const { inputs, outputs } = forUnit(wireguard.config);
+var index = outputs({
+  $representation: {
+    showQRCode: true,
+    content: inputs.apply(({ identity, peers }) => {
+      return generateIdentityConfig(identity, peers);
+    })
+  }
+});
+
+export { index as default };

package/dist/identity/index.js

@@ -0,0 +1,32 @@
+import { wireguard } from '@highstate/library';
+import { forUnit, getOrCreateSecret } from '@highstate/pulumi';
+import { g as generateKey, a as generatePresharedKey, c as convertPrivateKeyToPublicKey } from '../shared-RypNC0-F.js';
+import '@noble/curves/ed25519';
+
+const { name, args, inputs, secrets, outputs } = forUnit(wireguard.identity);
+const privateKey = getOrCreateSecret(secrets, "privateKey", generateKey);
+const presharedKeyPart = getOrCreateSecret(secrets, "presharedKeyPart", () => {
+  return inputs.network.apply((network) => {
+    return network?.presharedKeyMode === "secure" ? generatePresharedKey() : undefined;
+  });
+});
+var index = outputs({
+  identity: {
+    name: args.peerName ?? name,
+    network: inputs.network,
+    address: args.address,
+    privateKey,
+    presharedKeyPart
+  },
+  peer: {
+    name: args.peerName ?? name,
+    network: inputs.network,
+    address: args.address,
+    publicKey: privateKey.apply(convertPrivateKeyToPublicKey),
+    allowedIps: args.allowedIps ?? [args.address],
+    endpoint: args.endpoint,
+    presharedKeyPart
+  }
+});
+
+export { index as default };

package/dist/network/index.js

@@ -0,0 +1,13 @@
+import { wireguard } from '@highstate/library';
+import { forUnit } from '@highstate/pulumi';
+
+const { args, secrets, outputs } = forUnit(wireguard.network);
+var index = outputs({
+  network: {
+    backend: args.backend ?? "wireguard",
+    presharedKeyMode: args.presharedKeyMode ?? "none",
+    globalPresharedKey: secrets.globalPresharedKey
+  }
+});
+
+export { index as default };

package/dist/shared-RypNC0-F.js

@@ -0,0 +1,86 @@
+import { ed25519 } from '@noble/curves/ed25519';
+
+const crypto = typeof globalThis === 'object' && 'crypto' in globalThis ? globalThis.crypto : undefined;
+
+/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
+/**
+ * Utilities for hex, bytes, CSPRNG.
+ * @module
+ */
+// We use WebCrypto aka globalThis.crypto, which exists in browsers and node.js 16+.
+// node.js versions earlier than v19 don't declare it in global scope.
+// For node.js, package.json#exports field mapping rewrites import
+// from `crypto` to `cryptoNode`, which imports native module.
+// Makes the utils un-importable in browsers without a bundler.
+// Once node.js 18 is deprecated (2025-04-30), we can just drop the import.
+/**
+ * Secure PRNG. Uses `crypto.getRandomValues`, which defers to OS.
+ */
+function randomBytes(bytesLength = 32) {
+    if (crypto && typeof crypto.getRandomValues === 'function') {
+        return crypto.getRandomValues(new Uint8Array(bytesLength));
+    }
+    // Legacy Node.js compatibility
+    if (crypto && typeof crypto.randomBytes === 'function') {
+        return crypto.randomBytes(bytesLength);
+    }
+    throw new Error('crypto.getRandomValues must be defined');
+}
+
+function generateKey() {
+  const key = ed25519.utils.randomPrivateKey();
+  return Buffer.from(key).toString("base64");
+}
+function convertPrivateKeyToPublicKey(privateKey) {
+  const key = Buffer.from(privateKey, "base64");
+  return Buffer.from(ed25519.getPublicKey(key)).toString("base64");
+}
+function generatePresharedKey() {
+  const key = randomBytes(32);
+  return Buffer.from(key).toString("base64");
+}
+function combinePresharedKeyParts(part1, part2) {
+  const key1 = Buffer.from(part1, "base64");
+  const key2 = Buffer.from(part2, "base64");
+  const result = new Uint8Array(32);
+  for (let i = 0; i < 32; i++) {
+    result[i] = key1[i] ^ key2[i];
+  }
+  return Buffer.from(result).toString("base64");
+}
+function generatePeerConfig(identity, peer) {
+  const lines = [
+    "[Peer]",
+    `# ${peer.name}`,
+    `PublicKey = ${peer.publicKey}`,
+    `AllowedIPs = ${peer.allowedIps.join(", ")}`
+  ];
+  if (peer.endpoint) {
+    lines.push(`Endpoint = ${peer.endpoint}`);
+  }
+  if (identity.presharedKeyPart && peer.presharedKeyPart) {
+    const presharedKey = combinePresharedKeyParts(identity.presharedKeyPart, peer.presharedKeyPart);
+    lines.push(`PresharedKey = ${presharedKey}`);
+  } else if (identity.network?.globalPresharedKey) {
+    if (identity.network.globalPresharedKey !== peer.network?.globalPresharedKey) {
+      throw new Error("The global preshared key must be the same for all peers.");
+    }
+    lines.push(`PresharedKey = ${identity.network.globalPresharedKey}`);
+  }
+  return lines.join("\n");
+}
+function generateIdentityConfig(identity, peers) {
+  const lines = [
+    "[Interface]",
+    `# ${identity.name}`,
+    `Address = ${identity.address}`,
+    `PrivateKey = ${identity.privateKey}`
+  ];
+  for (const peer of peers) {
+    lines.push("");
+    lines.push(generatePeerConfig(identity, peer));
+  }
+  return lines.join("\n");
+}
+
+export { generatePresharedKey as a, generateIdentityConfig as b, convertPrivateKeyToPublicKey as c, generateKey as g };

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@highstate/wireguard",
+  "version": "0.4.2",
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    "./network": "./dist/network/index.js",
+    "./identity": "./dist/identity/index.js",
+    "./config": "./dist/config/index.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "pkgroll --tsconfig=tsconfig.build.json"
+  },
+  "dependencies": {
+    "@highstate/pulumi": "^0.4.2",
+    "@noble/curves": "^1.8.0",
+    "@pulumi/command": "^1.0.1"
+  },
+  "peerDependencies": {
+    "@highstate/library": "workspace:^"
+  },
+  "devDependencies": {
+    "pkgroll": "^2.5.1"
+  },
+  "gitHead": "e88c7c588267cf028c054f694d402902dc057919"
+}