Cargo.toml

[workspace]
members = ["."]
resolver = "2"

[package]
name = "wgd"
version = "0.1.0"
edition = "2021"
build = "build.rs"

[lib]
name = "wgd"
path = "src/lib.rs"

[[bin]]
name = "wgd"
path = "src/main.rs"

[dependencies]
# CLI
clap = { version = "4", features = ["derive"] }
# Shell completion. `unstable-dynamic` provides the completion engine that
# introspects the live `clap::Command` at completion time (so completions
# can't drift from `--help`) and lets individual args compute their candidates
# at runtime -- which is what connection ids/names need, since those only
# exist in the privileged daemon's store. The feature is semver-exempt and may
# change on a clap_complete minor bump.
clap_complete = { version = "4", features = ["unstable-dynamic"] }

# Async
tokio = { version = "1", features = ["full"] }

# Serialization
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"

# Logging
log = "0.4"
tracing = "0.1"
tracing-log = "0.2"
tracing-subscriber = { version = "0.3", features = ["fmt", "time"] }
time = { version = "0.3", features = ["macros"] }

# Randomness (instance name suffixes)
rand = "0.8"

# Encoding
base64 = "0.22"

# Error handling
thiserror = "2"
anyhow = "1"

# Connection identity: UUIDv4 connection IDs, config fingerprinting, typed
# addresses. Key *types* (StaticSecret/PublicKey) come from gotatun's own
# re-export (see src/wireguard/connection_config.rs); this direct dependency
# only pins the same resolved version and makes the "zeroize" feature this
# code relies on explicit rather than incidental to gotatun's own choice of
# features -- cargo unifies both onto the single resolved x25519-dalek crate.
uuid = { version = "1", features = ["v4", "serde"] }
sha2 = "0.10"
ipnet = "2"
zeroize = { version = "1", features = ["derive"] }
x25519-dalek = { version = "2.0.1", features = ["zeroize", "static_secrets"] }

[target.'cfg(unix)'.dependencies]
# Process/signal/user lookups for the privileged service and helper management.
nix = { version = "0.29", features = ["fs", "signal", "process", "user"] }

# Daemonization and userspace WireGuard
daemonize = "0.5"
gotatun = { version = "0.9.2", features = ["device", "tun"] }