feat(wireguard): add WireGuard transport support with management APIs and config generation

ts/smartvpn.classes.vpnserver.ts

@@ -8,6 +8,8 @@ import type {
   IVpnClientInfo,
   IVpnKeypair,
   IVpnClientTelemetry,
+  IWgPeerConfig,
+  IWgPeerInfo,
   TVpnServerCommands,
 } from './smartvpn.interfaces.js';
 
@@ -121,6 +123,35 @@ export class VpnServer extends plugins.events.EventEmitter {
     return this.bridge.sendCommand('getClientTelemetry', { clientId });
   }
 
+  /**
+   * Generate a WireGuard-compatible X25519 keypair.
+   */
+  public async generateWgKeypair(): Promise<IVpnKeypair> {
+    return this.bridge.sendCommand('generateWgKeypair', {} as Record<string, never>);
+  }
+
+  /**
+   * Add a WireGuard peer (server must be running in wireguard mode).
+   */
+  public async addWgPeer(peer: IWgPeerConfig): Promise<void> {
+    await this.bridge.sendCommand('addWgPeer', { peer });
+  }
+
+  /**
+   * Remove a WireGuard peer by public key.
+   */
+  public async removeWgPeer(publicKey: string): Promise<void> {
+    await this.bridge.sendCommand('removeWgPeer', { publicKey });
+  }
+
+  /**
+   * List WireGuard peers with stats.
+   */
+  public async listWgPeers(): Promise<IWgPeerInfo[]> {
+    const result = await this.bridge.sendCommand('listWgPeers', {} as Record<string, never>);
+    return result.peers;
+  }
+
   /**
    * Stop the daemon bridge.
    */