import assert from "node:assert/strict";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";
import test from "node:test";

process.env.APP_MODE = "client";
process.env.DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "vpn-proxy-test-"));
process.env.SING_BOX_CACHE = path.join(process.env.DATA_DIR, "cache.db");

const { buildGatewayConfig } = await import(
  `../../src/server/singbox.js?client-mode=${Date.now()}`
);
const clientSettingsPath = path.join(process.env.DATA_DIR, "client-settings.json");

const subscriptionConfig = {
  outbounds: [
    {
      type: "vless",
      tag: "test-vpn",
      server: "vpn.example.test",
      server_port: 443,
      uuid: "00000000-0000-4000-8000-000000000000",
      tls: { enabled: true },
    },
  ],
  customRules: [],
};

test("client mode exposes only the local mixed proxy inbound", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  const config = buildGatewayConfig(subscriptionConfig, "test-vpn");

  assert.deepEqual(
    config.inbounds.map((inbound) => inbound.tag),
    ["mixed-in"],
  );
  assert.equal(config.inbounds[0].type, "mixed");
  assert.equal(config.inbounds[0].listen_port, 8080);
});

test("client mode routes mixed proxy fallback to the selected VPN", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  const config = buildGatewayConfig(subscriptionConfig, "test-vpn");

  assert.deepEqual(config.route.rule_set, []);
  assert.equal(config.route.auto_detect_interface, undefined);
  assert.deepEqual(config.route.rules, [
    { inbound: ["mixed-in"], outbound: "test-vpn" },
  ]);
});

test("client home bypass routes the local proxy directly", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  fs.writeFileSync(
    clientSettingsPath,
    JSON.stringify({ homeBypassEnabled: true }),
  );

  const config = buildGatewayConfig(subscriptionConfig, "test-vpn");

  assert.deepEqual(config.route.rule_set, []);
  assert.deepEqual(config.route.rules, [
    { inbound: ["mixed-in"], outbound: "direct" },
  ]);
});

test("client home bypass can build direct proxy without local VPN", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  fs.writeFileSync(
    clientSettingsPath,
    JSON.stringify({ homeBypassEnabled: true }),
  );

  const config = buildGatewayConfig({ outbounds: [], customRules: [] }, "");

  assert.deepEqual(config.outbounds, [
    { type: "direct", tag: "direct" },
    { type: "block", tag: "block" },
  ]);
  assert.deepEqual(config.route.rules, [
    { inbound: ["mixed-in"], outbound: "direct" },
  ]);
});

test("client mode ignores saved proxy port outside the published single port", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  fs.writeFileSync(
    clientSettingsPath,
    JSON.stringify({ proxyPort: 8085 }),
  );

  const config = buildGatewayConfig(subscriptionConfig, "test-vpn");

  assert.equal(config.inbounds[0].listen_port, 8080);
  assert.deepEqual(config.route.rules, [
    { inbound: ["mixed-in"], outbound: "test-vpn" },
  ]);
});

test("client shared proxy mode routes local proxy to gateway socks outbound", () => {
  fs.rmSync(clientSettingsPath, { force: true });
  fs.writeFileSync(
    clientSettingsPath,
    JSON.stringify({
      sharedProxyEnabled: true,
      sharedProxy: {
        host: "192.168.50.111",
        port: 8080,
        protocol: "socks5",
      },
    }),
  );

  const config = buildGatewayConfig({ outbounds: [], customRules: [] }, "");

  assert.deepEqual(config.inbounds.map((inbound) => inbound.tag), ["mixed-in"]);
  assert.deepEqual(
    config.outbounds.find((outbound) => outbound.tag === "shared-proxy"),
    {
      type: "socks",
      tag: "shared-proxy",
      server: "192.168.50.111",
      server_port: 8080,
      version: "5",
    },
  );
  assert.deepEqual(config.route.rules, [
    { inbound: ["mixed-in"], outbound: "shared-proxy" },
  ]);
});
