# Third-party vendored dependencies

## wireguard-android (required git submodule)

Listed in `.gitmodules` like libvpx/opus/speex. **Required for Gradle** — `:tunnel` is always included. Initialize after clone:

```bash
bash scripts/init-third-party-submodules.sh
# wireguard only:
bash scripts/init-wireguard-submodule.sh
```

`rebuild.sh` and `scripts/ci-build.sh` run the init script automatically.

Build links the `:tunnel` module via `gradle/wireguard-tunnel/` (sources from this submodule):

- Submodule path: `third-party/wireguard-android/`
- Gradle module: `third-party/wireguard-android/tunnel`
- License: MIT / Apache-2.0 (see upstream `COPYING`)

`WireGuardVpnEngine` (in `:vpn` process) links `GoBackend` from `:tunnel` (native `libwg-go.so` built from this tree); main app uses `VpnServiceClient` AIDL.