Do i need any extra packages for the firewall?

Installing and Using OpenWrt Network and Wireless Configuration
1

I have it on good authority that I need

kmod-wireguard
wireguard-tools
luci-proto-wireguard

I want to add a simple wireguard client tunnel. Running stock 25.12.4
thank you

2

When you add luci-proto-wireguard, it will install all necessary dependencies automatically.

You don't need to add anything else to the firewall or the system in general (unless you have other needs not mentioned here).

3

See:
WireGuard Client Setup Guide

4

I upgraded to 25.12.5 - destroyed config reset to factory. It removed kmod but left Wireguard status. forewarned

5

Without knowing the process you used for the upgrade and also your device, we cannot say with any certainty why you experienced this.