#compdef goldcrest

_arguments \
    {--air-6to4,-B}'[Enable IPv6 over IPv4 for AirVPN connection]:options:(on off)' \
    {--air-black-country-list,-X}'[AirVPN black country list]:options:(list)' \
    {--air-black-server-list,-M}'[AirVPN black server list]:options:(list)' \
    {--air-connect,-O}'[Start AirVPN connection]' \
    {--air-country,-Z}'[AirVPN country or continent]:options:(pattern country_ISO_code continent_code)' \
    {--air-info,-I}'[AirVPN info (requires --air-server or --air-country)]' \
    {--air-ipv6,-V}'[IPv6 mode for AirVPN connection]:options:(on off)' \
    {--air-key,-F}'[AirVPN user key]:options:(name)' \
    {--air-key-list,-K}'[AirVPN user key list]' \
    {--air-key-load,-Q}'[Load (use) AirVPN user key from local file]: : _files' \
    '--air-user-info[Show information about an AirVPN user]' \
    {--air-list,-L}'[AirVPN server or country list]:options:(pattern)' \
    '--air-sort[Sort criteria for AirVPN server list]:options:(name location score load users bandwidth maxbandwidth)' \
    '--air-limit[AirVPN server or country list items limit]:options:(number)' \
    {--air-password,-P}'[AirVPN user password]:options:(password)' \
    {--air-save,-W}'[Save an AirVPN server, country profile or user key to local file]: : _files' \
    {--air-server,-S}'[AirVPN server name]:options:(pattern)' \
    {--air-tls-mode,-T}'[TLS mode for AirVPN connection]:options:(auto auth crypt)' \
    {--air-user,-U}'[AirVPN user name]:options:(username)' \
    {--air-vpn-type,-f}'[VPN type for AirVPN connection]:options:(wireguard openvpn)' \
    {--air-white-country-list,-J}'[AirVPN white country list]:options:(list)' \
    {--air-white-server-list,-G}'[AirVPN white server list]:options:(list)' \
    '--air-bootserver-info[List AirVPN boot server information and ranking]' \
    '--async[Enable asynchronous connection for --air-connect option and user VPN profiles]' \
    {--allowuaf,-6}'[Allow unused address families]:options:(yes no default)' \
    {--alt-proxy,-A}'[Enable alternative proxy module]' \
    {--auth-retry,-Y}'[Retry connection on auth failure]' \
    {--auto-sess,-a}'[Request autologin session]' \
    '--bluetit-stats[Show Bluetit connection statistics and exit]' \
    '--bluetit-status[Show Bluetit status and exit]' \
    {--cipher,-C}'[Encrypt packets with specific cipher algorithm]:options:(AES-128-GCM AES-192-GCM AES-256-GCM CHACHA20-POLY1305)' \
    {--compress,-c}'[Compression mode]:options:(yes no asym)' \
    {--def-keydir,-k}'[Default key direction]:options:(bi 0 1)' \
    '--disconnect[Disconnect the VPN session, including Bluetit boot connection]' \
    '--epki-ca[Simulate external PKI certificate supporting intermediate/root certificates]:options:(ca)' \
    '--epki-cert[Simulate external PKI certificate]:options:(cert)' \
    '--epki-key[Simulate external PKI private key]:options:(key)' \
    {--gremlin,-g}'[Gremlin information]:options:(send_delay_ms recv_delay_ms send_drop_prob recv_drop_prob)' \
    {--gui-version,-E}'[Set custom gui version]:options:(text)' \
    {--help,-h}'[Show the help page]' \
    {--ignore-dns-push,-i}'[Ignore DNS push request and use system DNS settings]' \
    {--list-data-ciphers,-D}'[List supported data ciphers]' \
    {--mtu,-r}'[WireGuard MTU]:options:(value)' \
    {--ncp-disable,-n}'[Disable negotiable crypto parameters]' \
    {--network-lock,-N}'[Network filter and lock mode]:options:(on iptables nftables pf off noprivate)' \
    '--allow-private-network[Allow private IPv4 and IPv6 network classes to pass to and from the network filter]:options:(on off)' \
    '--allow-ping[Allow ping to pass to and from the network filter]:options:(on off input output)' \
    '--allow-ipv6ndp[Allow IPv6 NDP to pass to and from the network filter]:options:(on off)' \
    {--no-cert,-x}'[Disable client certificate]' \
    '--pause[Pause the VPN connection, including Bluetit boot connection]' \
    {--peer-info,-e}'[Peer information key/value list in the form K1=V1,K2=V2,...]' \
    {--persist-tun,-j}'[Keep TUN interface open across reconnections]' \
    {--pk-password,-z}'[Private key password]:options:(password)' \
    {--port,-R}'[Port override]:options:(value)' \
    {--proto,-p}'[Protocol override]:options:(udp tcp)' \
    {--proxy-basic,-b}'[Allow HTTP basic auth]' \
    {--proxy-host,-y}'[HTTP proxy]:options:(hostname ip)' \
    {--proxy-password,-w}'[HTTP proxy password]:options:(password)' \
    {--proxy-port,-q}'[HTTP proxy port]:options:(value)' \
    {--proxy-username,-u}'[HTTP proxy username]:options:(username)' \
    '--reconnect[Reconnect the VPN connection, including Bluetit boot connection]' \
    {--recover-network,-H}'[Recover network settings after a crash or unexpected exit]' \
    '--remove-wireguard-device[Remove any existing WireGuard tunnel device after a crash or unexpected exit]' \
    '--resume[Resume a paused VPN connection, including Bluetit boot connection]' \
    {--server,-s}'[Server override]:options:(hostname ip)' \
    '--ssl-debug[SSL debug level]:options:(value)' \
    {--tcp-queue-limit,-l}'[Size of TCP packet queue <1-65535>]:options:(value)' \
    {--tcprof-override,-o}'[tls-cert-profile override]:options:(legacy preferred ...)' \
    {--timeout,-t}'[Connection timeout]:options:(seconds)' \
    {--tvm-override,-m}'[tls-version-min override]:options:(disabled default tls_1_x)' \
    {--version,-v}'[Show version info]' \
    '*::files:_files'
