Third-party vendored dependencies

wireguard-android (required git submodule)

Listed in .gitmodules like libvpx/opus/speex. Required for Gradle — :tunnel is always included. Initialize after clone:

bash scripts/init-third-party-submodules.sh
# wireguard only:
bash scripts/init-wireguard-submodule.sh

rebuild.sh and scripts/ci-build.sh run the init script automatically.

Build links the :tunnel module via gradle/wireguard-tunnel/ (sources from this submodule):

Submodule path: third-party/wireguard-android/
Gradle module: third-party/wireguard-android/tunnel
License: MIT / Apache-2.0 (see upstream COPYING)

WireGuardVpnEngine (in :vpn process) links GoBackend from :tunnel (native libwg-go.so built from this tree); main app uses VpnServiceClient AIDL.