1.1 KiB
Raw output - separate local WireGuard configuration
The human again noticed the agent had re-reported already committed work without changing the worktree. The agent confirmed the sequencing mistake and moved to the next unimplemented dependency.
git diff HEAD~1..HEAD -- tractor/discovery/_tunnel.py tractor/discovery/__init__.py tests/discovery/test_wg_config.py ai/tpt-backends/03_wg_tunnel_bindspace.md
Added process-local WGInterfaceConfig for private/preshared keys, local interface CIDRs, peer allowed CIDRs, listen port and persistent keepalive. Secrets are redacted from repr and the global ProcessLocal marker blocks default wire encoding.
Removed the unused serialized WGTunnelSpec.maybe_allowed_ips placeholder so maddr-derived declarations retain only public identity, endpoint and interface selection. Added validation for keys, CIDRs, ports and keepalive before future kernel mutation.
Ruff and lock checks passed. Focused WG coverage passed 25 tests; discovery plus message coverage passed 145 tests with 2 xpasses.