3x-ui/frontend/src/test/amneziawg-schema-cleared.test.ts

import { describe, expect, it } from 'vitest';

import { AmneziawgServerSchema } from '@/schemas/protocols/inbound/amneziawg';
import { AmneziaWGOutboundSettingsSchema } from '@/schemas/protocols/outbound/amneziawg';

// AntD InputNumber emits null when cleared; a cleared numeric field must
// refill its schema default instead of failing validation and blocking the save.
describe('AmneziawgServerSchema cleared numeric fields', () => {
  it('accepts null for every InputNumber-backed field and refills the default', () => {
    const parsed = AmneziawgServerSchema.parse({
      subnetCidr: null,
      jc: null,
      jmin: null,
      jmax: null,
      s1: null,
      s2: null,
      s3: null,
      s4: null,
    });
    expect(parsed.subnetCidr).toBe(24);
    expect(parsed.jc).toBe(5);
    expect(parsed.jmin).toBe(10);
    expect(parsed.jmax).toBe(50);
    expect(parsed.s1).toBe(30);
    expect(parsed.s2).toBe(45);
    expect(parsed.s3).toBe(10);
    expect(parsed.s4).toBe(5);
  });

  it('keeps absent-key defaults unchanged', () => {
    const parsed = AmneziawgServerSchema.parse({});
    expect(parsed.subnetCidr).toBe(24);
    expect(parsed.jc).toBe(5);
  });
});

// The form must reject what cannot apply or be received: jc/jmin/jmax past uint32 (device/uapi.go),
// S1-S3 past amneziawg-go's 1700-byte iOS receive buffer, S4 past 32 (MTU headroom).
describe('AmneziawgServerSchema obfuscation bounds', () => {
  const overWidth: Array<[string, number]> = [
    ['s1', 1553],
    ['s2', 1609],
    ['s3', 1637],
    ['s4', 33],
    ['jc', 4294967296],
    ['jmin', 4294967296],
    ['jmax', 5000000000],
  ];

  it.each(overWidth)('rejects %s past what amneziawg-go can apply or receive', (field, value) => {
    expect(AmneziawgServerSchema.safeParse({ [field]: value }).success).toBe(false);
  });

  const atLimit: Array<[string, number]> = [
    ['s1', 1552],
    ['s2', 1608],
    ['s3', 1636],
    ['s4', 32],
    ['jc', 4294967295],
  ];

  it.each(atLimit)('accepts %s exactly at its limit', (field, value) => {
    const parsed = AmneziawgServerSchema.safeParse({ [field]: value });
    expect(parsed.success).toBe(true);
  });

  it('still rejects negatives on every junk and padding field', () => {
    for (const field of ['jc', 'jmin', 'jmax', 's1', 's2', 's3', 's4']) {
      expect(AmneziawgServerSchema.safeParse({ [field]: -1 }).success).toBe(false);
    }
  });
});

// An outbound's S values come from the remote server and are received on Linux,
// so only amneziawg-go's uint16 UAPI width bounds them, not the iOS buffer.
describe('AmneziaWGOutboundSettingsSchema padding bounds', () => {
  it.each(['s1', 's2', 's3'])('accepts %s past the inbound iOS cap', (field) => {
    expect(AmneziaWGOutboundSettingsSchema.safeParse({ [field]: 2000 }).success).toBe(true);
  });

  it.each(['s1', 's2', 's3'])('rejects %s past uint16', (field) => {
    expect(AmneziaWGOutboundSettingsSchema.safeParse({ [field]: 65536 }).success).toBe(false);
  });
});