1.0 KiB
Raw output - model explicit WireGuard peers
After committing local WG interface configuration, the human selected an explicit peer-list model before interface provisioning.
git diff HEAD~1..HEAD -- tractor/discovery/_tunnel.py tractor/discovery/__init__.py tests/discovery/test_wg_config.py ai/tpt-backends/03_wg_tunnel_bindspace.md
Added process-local WGPeerConfig with public key, allowed CIDRs, optional endpoint, preshared key and keepalive. Refactored WGInterfaceConfig to own a tuple of unique peers beside its private key, local addresses and listen port.
Peer PSKs remain redacted and nested ProcessLocal sentinels prevent default wire encoding. Validation covers keys, routes, endpoints, ports, keepalive and duplicate peers.
Ruff and lock checks passed. Focused peer/config coverage passed 11 tests. A broad unrelated registrar cancellation case timed out after 86 passes and 2 xpasses; its isolated rerun passed.