op-packages/luci-app-substore/tests/ss_plugin_test.lua

-- ss_plugin_test.lua — shadowsocks SIP003 插件全链路回归测试
-- 用法：lua5.1 tests/ss_plugin_test.lua
--
-- 缺陷：`plugin` 能被解析、能通过 node.normalize 存活，但三个输出模块全都
-- 静默丢掉它 —— 带 obfs / v2ray-plugin 的 ss 节点导出后，客户端以明文 SS
-- 去连只接受带插件握手的服务端，必然失败且不报错。表单侧同样致命：
-- plugin 不在 node.PROTO_FIELDS.shadowsocks 里，用户在界面上编辑一次
-- 该节点，core.merge_form_node 就会把插件配置清空。
--
-- 上游依据（均已核对，非推测）：
--   * SIP002  SS-URI = "ss://" userinfo "@" host ":" port [ "/" ] [ "?" plugin ] [ "#" tag ]
--             plugin 的取值整体做百分号编码
--   * sing-box shadowsocks 出站：plugin（字符串，仅支持 obfs-local / v2ray-plugin）
--             与 plugin_opts（SIP003 原始参数串，原样透传）
--   * mihomo  shadowsocks 出站：plugin（obfs / v2ray-plugin / …）、
--             plugin-opts 是**映射**；obfs 的 mode 必须 ∈ {tls,http}，
--             v2ray-plugin 的 mode 必须是 websocket，否则整个 outbound 构造失败，
--             mihomo 拒绝加载整份配置

package.path = "./root/usr/share/?.lua;" .. package.path

local util = require("substore.util")
local node = require("substore.node")
local core = require("substore.core")
local parser = require("substore.parser")
local clash_meta = require("substore.output_clash_meta")
local singbox = require("substore.output_singbox")
local uri_mod = require("substore.output_uri")

local passed, failed = 0, 0

local function check(name, cond)
	if cond then
		passed = passed + 1
		print("PASS " .. name)
	else
		failed = failed + 1
		print("FAIL " .. name)
	end
end

local function line_with(text, pattern)
	for l in text:gmatch("[^\n]+") do
		if l:find(pattern) then return l end
	end
	return nil
end

-- SIP002 规范里的示例 URI
local SPEC_URI = "ss://YWVzLTI1Ni1nY206cGFzcw==@192.168.100.1:8888/"
	.. "?plugin=obfs-local%3Bobfs%3Dhttp%3Bobfs-host%3Dwww.baidu.com#Example2"
local SPEC_PLUGIN = "obfs-local;obfs=http;obfs-host=www.baidu.com"

-- ---------- util.parse_sip003_plugin ----------
-- 取一个本地引用：修复前 util 里没有这个函数，直接调用会让整个文件在第 55 行
-- 崩掉，后面的断言一条都跑不到，反向验证就失去了意义。
local parse_plugin = util.parse_sip003_plugin or function() return nil end
local name, opts_str, opts_map = parse_plugin(SPEC_PLUGIN)
opts_map = opts_map or {}
check("parse plugin name", name == "obfs-local")
check("parse plugin opts string", opts_str == "obfs=http;obfs-host=www.baidu.com")
check("parse plugin opts map obfs", opts_map.obfs == "http")
check("parse plugin opts map obfs-host", opts_map["obfs-host"] == "www.baidu.com")
check("parse empty plugin returns nil", parse_plugin("") == nil)
check("parse nil plugin returns nil", parse_plugin(nil) == nil)
-- SIP003 规定分号、等号、反斜杠可用反斜杠转义
local esc_name, _, esc_map = parse_plugin("obfs-local;obfs=http\\;x")
esc_map = esc_map or {}
check("parse escaped semicolon name", esc_name == "obfs-local")
check("parse escaped semicolon kept", esc_map and esc_map.obfs == "http\\;x")

-- ---------- 解析：ss:// URI 的 plugin 必须落到模型 ----------
local parsed = parser.parse(SPEC_URI)
check("uri parsed", parsed ~= nil and #parsed.nodes == 1)
local n = parsed.nodes[1]
check("plugin parsed from uri", n.plugin == SPEC_PLUGIN)
check("plugin survives normalize", node.normalize(n).plugin == SPEC_PLUGIN)

-- ---------- mihomo（clashmeta） ----------
local d = node.normalize(n)
local yaml = clash_meta.generate({ d })
check("clashmeta emits plugin: obfs", yaml:find("    plugin: obfs\n", 1, true) ~= nil)
check("clashmeta emits plugin-opts", yaml:find("    plugin-opts:\n", 1, true) ~= nil)
check("clashmeta obfs mode", yaml:find("      mode: http\n", 1, true) ~= nil)
check("clashmeta obfs host", yaml:find("      host: www.baidu.com\n", 1, true) ~= nil)
-- plugin-opts 的子键必须缩进在它之下
local po = line_with(yaml, "plugin%-opts:")
local mode_line = line_with(yaml, "mode: http")
check("clashmeta plugin-opts children nested",
	po ~= nil and mode_line ~= nil
	and #mode_line:match("^(%s*)") > #po:match("^(%s*)"))

local function ss(plugin)
	return node.normalize({ proto = "shadowsocks", name = "S", server = "1.2.3.4",
		port = 8388, method = "aes-256-gcm", password = "p", plugin = plugin })
end

-- simple-obfs 是 obfs-local 的历史别名，mihomo 只认 obfs
local simple = clash_meta.generate({ ss("simple-obfs;obfs=tls;obfs-host=h.com") })
check("clashmeta simple-obfs mapped to obfs",
	simple:find("    plugin: obfs\n", 1, true) ~= nil)
check("clashmeta simple-obfs mode tls", simple:find("      mode: tls\n", 1, true) ~= nil)

-- v2ray-plugin：mode 必须是 websocket
local v2 = clash_meta.generate({ ss("v2ray-plugin;mode=websocket;host=h.com;path=/ws;tls") })
check("clashmeta v2ray-plugin name",
	v2:find("    plugin: v2ray-plugin\n", 1, true) ~= nil)
check("clashmeta v2ray-plugin mode",
	v2:find("      mode: websocket\n", 1, true) ~= nil)
check("clashmeta v2ray-plugin host", v2:find("      host: h.com\n", 1, true) ~= nil)
check("clashmeta v2ray-plugin path", v2:find("      path: /ws\n", 1, true) ~= nil)
check("clashmeta v2ray-plugin tls", v2:find("      tls: true\n", 1, true) ~= nil)

-- 参数非法时必须**整个不输出**插件：mihomo 对这两类插件是强校验的，
-- 输出一个必然被拒绝的组合会让整份配置加载失败，一个坏节点废掉整个订阅。
local bad_obfs = clash_meta.generate({ ss("obfs-local") })
check("clashmeta obfs without mode omitted",
	bad_obfs:find("plugin:", 1, true) == nil)
local bad_obfs2 = clash_meta.generate({ ss("obfs-local;obfs=bogus") })
check("clashmeta obfs invalid mode omitted",
	bad_obfs2:find("plugin:", 1, true) == nil)
local bad_v2 = clash_meta.generate({ ss("v2ray-plugin;mode=quic") })
check("clashmeta v2ray-plugin invalid mode omitted",
	bad_v2:find("plugin:", 1, true) == nil)
-- 未知插件名：mihomo 的 plugin 分支没有收尾 else，未知名字本来就静默跳过
local unknown = clash_meta.generate({ ss("kcptun;key=abc") })
check("clashmeta unknown plugin omitted",
	unknown:find("plugin:", 1, true) == nil)
-- 无插件的普通 ss 节点不得凭空多出 plugin 字段
local plain = clash_meta.generate({ ss(nil) })
check("clashmeta plain ss has no plugin", plain:find("plugin", 1, true) == nil)

-- ---------- sing-box ----------
local sbox = singbox.generate({ d })
check("singbox emits plugin", sbox:find('"plugin":"obfs-local"', 1, true) ~= nil)
check("singbox plugin_opts is raw SIP003 string",
	sbox:find('"plugin_opts":"obfs=http;obfs-host=www.baidu.com"', 1, true) ~= nil)
-- sing-box 只支持这两个插件名，其余会拒绝加载整份配置
check("singbox unknown plugin omitted",
	singbox.generate({ ss("kcptun;key=abc") }):find('"plugin"', 1, true) == nil)
check("singbox v2ray-plugin kept",
	singbox.generate({ ss("v2ray-plugin;mode=websocket") }):find('"plugin":"v2ray-plugin"', 1, true) ~= nil)
check("singbox plain ss has no plugin",
	singbox.generate({ ss(nil) }):find('"plugin"', 1, true) == nil)

-- ---------- 分享链接回写（SIP002） ----------
local out_uri = uri_mod.to_share_uri(d)
check("uri keeps plugin query",
	out_uri:find("/?plugin=", 1, true) ~= nil)
check("uri percent-encodes plugin",
	out_uri:find("plugin=obfs-local%3Bobfs%3Dhttp%3Bobfs-host%3Dwww.baidu.com", 1, true) ~= nil)
-- 往返：导出 → 再解析，插件配置必须一字不差
local back = parser.parse(out_uri)
check("uri round-trip re-parses", back ~= nil and #back.nodes == 1)
check("uri round-trip plugin preserved",
	back.nodes[1].plugin == SPEC_PLUGIN)
-- 无插件时不得多出 `/?plugin=`
check("uri plain ss has no plugin query",
	uri_mod.to_share_uri(ss(nil)):find("plugin", 1, true) == nil)

-- ---------- 表单：字段清单与合并 ----------
local ss_fields = node.PROTO_FIELDS.shadowsocks
local has_plugin = false
for _, k in ipairs(ss_fields) do if k == "plugin" then has_plugin = true end end
check("PROTO_FIELDS.shadowsocks has plugin", has_plugin)
-- 表单渲染 plugin 后，清空输入框必须能真的删掉它
local cleared = core.merge_form_node(d, { proto = "shadowsocks", name = "S",
	server = "1.2.3.4", port = 8388, method = "aes-256-gcm", password = "p", plugin = "" })
check("merge_form_node clears plugin", cleared.plugin == "" or cleared.plugin == nil)
-- 表单提交了新值时必须生效
local updated = core.merge_form_node(d, { proto = "shadowsocks", name = "S",
	server = "1.2.3.4", port = 8388, method = "aes-256-gcm", password = "p",
	plugin = "v2ray-plugin;mode=websocket" })
check("merge_form_node applies plugin", updated.plugin == "v2ray-plugin;mode=websocket")

-- ---------- 结果 ----------
print(string.format("\n%d passed, %d failed", passed, failed))
os.exit(failed == 0 and 0 or 1)