test(core): add SOCKS5 and HTTPS connectivity integration tests

Add TestConnectivity_SOCKS5 using golang.org/x/net/proxy to verify
SOCKS5 dial through the mixed inbound, and TestConnectivity_HTTPS
using HTTP CONNECT to verify TLS negotiation with gstatic.com.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: mapleafgo

core/connect_test.go

@@ -15,6 +15,8 @@ import (
 	"testing"
 	"time"
 
+	"golang.org/x/net/proxy"
+
 	"github.com/mapleafgo/singcast/translator"
 )
 
@@ -157,6 +159,277 @@ func TestConnectivity_Google(t *testing.T) {
 	}
 }
 
+// TestConnectivity_SOCKS5 verifies that google.com is reachable through the
+// mixed proxy inbound using the SOCKS5 protocol (instead of HTTP CONNECT).
+func TestConnectivity_SOCKS5(t *testing.T) {
+	if _, err := os.Stat(realConfigPath); err != nil {
+		t.Skipf("real config not found: %s", realConfigPath)
+	}
+
+	data, err := os.ReadFile(realConfigPath)
+	if err != nil {
+		t.Fatalf("read config: %v", err)
+	}
+
+	jsonContent, warns, err := translator.Translate(data)
+	if err != nil {
+		t.Fatalf("translate config: %v", err)
+	}
+	for _, w := range warns {
+		t.Logf("WARN: %s", w)
+	}
+
+	mixedPort := extractMixedPort(t, jsonContent)
+	if mixedPort == 0 {
+		t.Fatal("no mixed inbound port found in config")
+	}
+
+	tmpDir := t.TempDir()
+	homeDir := filepath.Join(tmpDir, "home")
+	if err := os.MkdirAll(homeDir, 0o700); err != nil {
+		t.Fatal(err)
+	}
+	configPath := filepath.Join(tmpDir, "config.json")
+	if err := os.WriteFile(configPath, []byte(jsonContent), 0o600); err != nil {
+		t.Fatal(err)
+	}
+
+	if err := Init(homeDir); err != nil {
+		t.Fatalf("Init: %v", err)
+	}
+	defer Close()
+
+	var (
+		connMu      sync.Mutex
+		connEvents  []string
+		gotConnOpen bool
+	)
+	SetOnEvent(func(eventType int, jsonPayload string) {
+		if eventType != EventConnections {
+			return
+		}
+		connMu.Lock()
+		defer connMu.Unlock()
+		connEvents = append(connEvents, jsonPayload)
+		if !gotConnOpen {
+			var msg struct {
+				Reset bool `json:"reset"`
+				Items []struct {
+					Type int    `json:"type"`
+					ID   string `json:"id"`
+				} `json:"items"`
+			}
+			if json.Unmarshal([]byte(jsonPayload), &msg) == nil {
+				for _, item := range msg.Items {
+					if item.Type == 0 {
+						gotConnOpen = true
+						break
+					}
+				}
+			}
+		}
+	})
+
+	if err := Start(configPath); err != nil {
+		t.Fatalf("Start: %v", err)
+	}
+	defer Stop()
+
+	proxyAddr := fmt.Sprintf("127.0.0.1:%d", mixedPort)
+	if !waitForListen(t, proxyAddr, 10*time.Second) {
+		t.Fatalf("proxy %s not listening after 10s", proxyAddr)
+	}
+	t.Logf("proxy listening on %s", proxyAddr)
+
+	time.Sleep(2 * time.Second)
+
+	// Dial through SOCKS5
+	socksDialer, err := proxy.SOCKS5("tcp", proxyAddr, nil, &net.Dialer{Timeout: 10 * time.Second})
+	if err != nil {
+		t.Fatalf("create SOCKS5 dialer: %v", err)
+	}
+
+	transport := &http.Transport{
+		DialContext: func(ctx context.Context, network, addr string) (net.Conn, error) {
+			return socksDialer.Dial(network, addr)
+		},
+		TLSClientConfig:       &tls.Config{MinVersion: tls.VersionTLS12},
+		TLSHandshakeTimeout:   10 * time.Second,
+		ResponseHeaderTimeout: 15 * time.Second,
+	}
+
+	client := &http.Client{
+		Transport: transport,
+		Timeout:   30 * time.Second,
+	}
+
+	reqCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+
+	req, err := http.NewRequestWithContext(reqCtx, http.MethodGet, "https://www.google.com", nil)
+	if err != nil {
+		t.Fatalf("create request: %v", err)
+	}
+	req.Header.Set("User-Agent", "singcast-connectivity-test/1.0")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		t.Fatalf("GET google.com through SOCKS5 proxy: %v", err)
+	}
+	defer resp.Body.Close()
+
+	body, _ := io.ReadAll(io.LimitReader(resp.Body, 4096))
+	t.Logf("Status: %d", resp.StatusCode)
+	t.Logf("Body (first 200 bytes): %.200s", string(body))
+
+	if resp.StatusCode != http.StatusOK {
+		t.Errorf("expected status 200, got %d", resp.StatusCode)
+	}
+
+	connMu.Lock()
+	events := connEvents
+	sawOpen := gotConnOpen
+	connMu.Unlock()
+
+	if !sawOpen {
+		t.Error("no connection open event received — traffic may not have gone through singcast")
+	} else {
+		t.Logf("confirmed: received %d connection events, traffic went through SOCKS5 proxy", len(events))
+	}
+}
+
+// TestConnectivity_HTTPS verifies that an HTTPS site is reachable through the
+// mixed proxy inbound using HTTP CONNECT (the same as TestConnectivity_Google
+// but targets a different HTTPS host to exercise TLS negotiation).
+func TestConnectivity_HTTPS(t *testing.T) {
+	if _, err := os.Stat(realConfigPath); err != nil {
+		t.Skipf("real config not found: %s", realConfigPath)
+	}
+
+	data, err := os.ReadFile(realConfigPath)
+	if err != nil {
+		t.Fatalf("read config: %v", err)
+	}
+
+	jsonContent, warns, err := translator.Translate(data)
+	if err != nil {
+		t.Fatalf("translate config: %v", err)
+	}
+	for _, w := range warns {
+		t.Logf("WARN: %s", w)
+	}
+
+	mixedPort := extractMixedPort(t, jsonContent)
+	if mixedPort == 0 {
+		t.Fatal("no mixed inbound port found in config")
+	}
+
+	tmpDir := t.TempDir()
+	homeDir := filepath.Join(tmpDir, "home")
+	if err := os.MkdirAll(homeDir, 0o700); err != nil {
+		t.Fatal(err)
+	}
+	configPath := filepath.Join(tmpDir, "config.json")
+	if err := os.WriteFile(configPath, []byte(jsonContent), 0o600); err != nil {
+		t.Fatal(err)
+	}
+
+	if err := Init(homeDir); err != nil {
+		t.Fatalf("Init: %v", err)
+	}
+	defer Close()
+
+	var (
+		connMu      sync.Mutex
+		connEvents  []string
+		gotConnOpen bool
+	)
+	SetOnEvent(func(eventType int, jsonPayload string) {
+		if eventType != EventConnections {
+			return
+		}
+		connMu.Lock()
+		defer connMu.Unlock()
+		connEvents = append(connEvents, jsonPayload)
+		if !gotConnOpen {
+			var msg struct {
+				Reset bool `json:"reset"`
+				Items []struct {
+					Type int    `json:"type"`
+					ID   string `json:"id"`
+				} `json:"items"`
+			}
+			if json.Unmarshal([]byte(jsonPayload), &msg) == nil {
+				for _, item := range msg.Items {
+					if item.Type == 0 {
+						gotConnOpen = true
+						break
+					}
+				}
+			}
+		}
+	})
+
+	if err := Start(configPath); err != nil {
+		t.Fatalf("Start: %v", err)
+	}
+	defer Stop()
+
+	proxyAddr := fmt.Sprintf("127.0.0.1:%d", mixedPort)
+	if !waitForListen(t, proxyAddr, 10*time.Second) {
+		t.Fatalf("proxy %s not listening after 10s", proxyAddr)
+	}
+	t.Logf("proxy listening on %s", proxyAddr)
+
+	time.Sleep(2 * time.Second)
+
+	proxyURL, _ := url.Parse(fmt.Sprintf("http://%s", proxyAddr))
+	transport := &http.Transport{
+		Proxy:                  http.ProxyURL(proxyURL),
+		DialContext:            (&net.Dialer{Timeout: 10 * time.Second}).DialContext,
+		TLSHandshakeTimeout:   10 * time.Second,
+		TLSClientConfig:       &tls.Config{MinVersion: tls.VersionTLS12},
+		ResponseHeaderTimeout: 15 * time.Second,
+	}
+
+	client := &http.Client{
+		Transport: transport,
+		Timeout:   30 * time.Second,
+	}
+
+	reqCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+
+	req, err := http.NewRequestWithContext(reqCtx, http.MethodGet, "https://www.gstatic.com/generate_204", nil)
+	if err != nil {
+		t.Fatalf("create request: %v", err)
+	}
+	req.Header.Set("User-Agent", "singcast-connectivity-test/1.0")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		t.Fatalf("GET gstatic.com through proxy: %v", err)
+	}
+	defer resp.Body.Close()
+
+	t.Logf("Status: %d", resp.StatusCode)
+
+	if resp.StatusCode != http.StatusNoContent {
+		t.Errorf("expected status 204, got %d", resp.StatusCode)
+	}
+
+	connMu.Lock()
+	events := connEvents
+	sawOpen := gotConnOpen
+	connMu.Unlock()
+
+	if !sawOpen {
+		t.Error("no connection open event received — traffic may not have gone through singcast")
+	} else {
+		t.Logf("confirmed: received %d connection events, HTTPS traffic went through proxy", len(events))
+	}
+}
+
 // extractMixedPort reads the mixed inbound listen_port from sing-box JSON config.
 func extractMixedPort(t *testing.T, jsonStr string) uint16 {
 	t.Helper()

go.mod

@@ -7,6 +7,7 @@ require (
 	github.com/urfave/cli/v3 v3.8.0
 	go.yaml.in/yaml/v3 v3.0.4
 	golang.org/x/mobile v0.0.0-20260410095206-2cfb76559b7b
+	golang.org/x/net v0.53.0
 )
 
 require (
@@ -140,7 +141,6 @@ require (
 	golang.org/x/crypto v0.50.0 // indirect
 	golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 // indirect
 	golang.org/x/mod v0.35.0 // indirect
-	golang.org/x/net v0.53.0 // indirect
 	golang.org/x/oauth2 v0.34.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.43.0 // indirect