install.sh

#!/bin/bash
# ============================================================
#  硅基API - Claude Code 一键部署脚本
#  用法: curl -fsSL https://raw.githubusercontent.com/SamAISEO/GuijiAPI/main/install.sh | bash
# ============================================================

set -e

API_BASE_URL="https://api.guijiapi.net"
NODE_MIN_VER="16.0.0"

# ── 模型定义 ─────────────────────────────────────────────────
# Anthropic 系列（仅保留）
ANTHROPIC_MODELS=("claude-opus-4-7" "claude-sonnet-4-6" "claude-opus-4-6" "claude-opus-4-5-20251101" "claude-sonnet-4-5-20250929")
ANTHROPIC_DESCS=("最新最强，较慢" "推荐，速度快" "旗舰级" "高性能" "稳定版本")

# API 端点
API_ENDPOINT="/v1/messages"

# ── 颜色 ────────────────────────────────────────────────────
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'
BLUE='\033[0;34m'; CYAN='\033[0;36m'; BOLD='\033[1m'; NC='\033[0m'

info()    { echo -e "${CYAN}${BOLD}[INFO]${NC}  $*"; }
success() { echo -e "${GREEN}${BOLD}[OK]${NC}    $*"; }
warn()    { echo -e "${YELLOW}${BOLD}[WARN]${NC}  $*"; }
error()   { echo -e "${RED}${BOLD}[ERROR]${NC} $*"; exit 1; }
step()    { echo -e "\n${BLUE}${BOLD}▶ $*${NC}"; }
skip()    { echo -e "${GREEN}[跳过]${NC}  $*"; }

# ── Banner ───────────────────────────────────────────────────
echo ""
echo -e "${BOLD}${BLUE}╔══════════════════════════════════════════════════╗${NC}"
echo -e "${BOLD}${BLUE}║     硅基API - Claude Code 一键部署脚本           ║${NC}"
echo -e "${BOLD}${BLUE}╠══════════════════════════════════════════════════╣${NC}"
echo -e "${BOLD}${BLUE}║  本脚本由 硅基API (api.guijiapi.net) 提供        ║${NC}"
echo -e "${BOLD}${BLUE}║  使用专属 API 端点，无需自备 Anthropic 账号      ║${NC}"
echo -e "${BOLD}${BLUE}╚══════════════════════════════════════════════════╝${NC}"
echo ""

# ── 工具函数 ─────────────────────────────────────────────────

# 从 /dev/tty 读输入（兼容管道运行）
read_input() {
  local prompt="$1"
  local answer
  read -r -p "$prompt" answer </dev/tty
  echo "$answer"
}

# 掩码输入
read_secret() {
  local prompt="$1"
  local answer
  stty -echo 2>/dev/null || true
  read -r -p "$prompt" answer </dev/tty
  stty echo 2>/dev/null || true
  printf '\n' >/dev/tty
  printf '%s\n' "$answer"
}

strip_line_breaks() {
  printf '%s' "$1" | tr -d '\r\n'
}

# 版本比较：$1 >= $2 返回 true（兼容 macOS，不依赖 sort -V）
version_gte() {
  awk -v a="$1" -v b="$2" 'BEGIN{
    n=split(a,A,"."); m=split(b,B,".")
    for(i=1;i<=3;i++){
      ai=i<=n?A[i]+0:0; bi=i<=m?B[i]+0:0
      if(ai>bi) exit 0; if(ai<bi) exit 1
    }
    exit 0
  }'
}

is_official_base_url() {
  local url
  url=$(normalize_base_url "$1")
  [ "$url" = "$(normalize_base_url "$API_BASE_URL")" ] || [ "$url" = "https://api.anthropic.com" ]
}

normalize_base_url() {
  local url="$1"
  url="${url%%\?*}"
  url="${url%%\#*}"
  url="${url%/}"
  url="${url%/v1/messages}"
  url="${url%/v1}"
  printf '%s\n' "${url%/}"
}

# 检测认证冲突：ANTHROPIC_AUTH_TOKEN 环境变量或 OAuth 登录凭证
has_auth_conflict() {
  # 检查环境变量
  [ -n "$ANTHROPIC_AUTH_TOKEN" ] && return 0

  # 检查 OAuth 登录凭证文件
  [ -f "$HOME/.claude/.credentials.json" ] && return 0

  # 检查 settings.json 中的 AUTH_TOKEN
  local settings_file="$HOME/.claude/settings.json"
  if [ -f "$settings_file" ]; then
    grep -q 'ANTHROPIC_AUTH_TOKEN' "$settings_file" 2>/dev/null && return 0
  fi

  return 1
}

# 清理认证冲突
cleanup_auth_conflict() {
  warn "检测到认证冲突："

  if [ -n "$ANTHROPIC_AUTH_TOKEN" ]; then
    warn "  - 环境变量 ANTHROPIC_AUTH_TOKEN 已设置"
  fi

  if [ -f "$HOME/.claude/.credentials.json" ]; then
    warn "  - OAuth 登录凭证存在: ~/.claude/.credentials.json"
  fi

  local settings_file="$HOME/.claude/settings.json"
  if [ -f "$settings_file" ] && grep -q 'ANTHROPIC_AUTH_TOKEN' "$settings_file" 2>/dev/null; then
    warn "  - settings.json 中存在 ANTHROPIC_AUTH_TOKEN"
  fi

  warn ""
  warn "⚠ 认证冲突会导致 Claude Code 无法正确使用硅基API"
  warn "建议：执行 'claude /logout' 清除 OAuth 登录凭证"
  warn "       或让本脚本自动清理冲突配置"

  CONFIRM=$(read_input "是否自动清理认证冲突？(Y/n，默认 Y): ")
  CONFIRM="${CONFIRM:-Y}"
  case "$CONFIRM" in
    [Nn]*)
      warn "跳过清理，安装完成后请手动清理："
      warn "  1. 执行 'claude /logout' 清除 OAuth 登录凭证"
      warn "  2. 在终端中执行: unset ANTHROPIC_AUTH_TOKEN"
      warn "  3. 重启 Claude Code"
      return 1
      ;;
  esac

  # 清理 OAuth 凭证
  if [ -f "$HOME/.claude/.credentials.json" ]; then
    info "删除 OAuth 登录凭证..."
    rm -f "$HOME/.claude/.credentials.json"
    success "已删除 ~/.claude/.credentials.json"
  fi

  # 清理环境变量中的 AUTH_TOKEN
  if [ -n "$ANTHROPIC_AUTH_TOKEN" ]; then
    info "清除 ANTHROPIC_AUTH_TOKEN 环境变量..."
    for rc_file in "$HOME/.bashrc" "$HOME/.bash_profile" "$HOME/.profile" "$HOME/.zshrc"; do
      if [ -f "$rc_file" ]; then
        sed -i '/ANTHROPIC_AUTH_TOKEN/d' "$rc_file"
      fi
    done
    unset ANTHROPIC_AUTH_TOKEN 2>/dev/null || true
    success "已清除 ANTHROPIC_AUTH_TOKEN"
  fi

  # 清理 settings.json 中的 AUTH_TOKEN
  if [ -f "$settings_file" ] && command -v python3 &>/dev/null; then
    info "清理 settings.json 中的认证冲突..."
    python3 - "$settings_file" <<'PYEOF'
import json, sys
path = sys.argv[1]
try:
    with open(path) as f:
        d = json.load(f)
    env = d.get('env', {})
    if 'ANTHROPIC_AUTH_TOKEN' in env:
        env.pop('ANTHROPIC_AUTH_TOKEN')
        print("  已移除 env.ANTHROPIC_AUTH_TOKEN")
    if env:
        d['env'] = env
    elif 'env' in d:
        del d['env']
    with open(path, 'w') as f:
        json.dump(d, f, indent=2)
except Exception as e:
    print(f"  处理失败: {e}")
PYEOF
    success "settings.json 已清理"
  fi

  success "认证冲突已清理"
  return 0
}

file_has_non_official_url() {
  local file="$1"
  local pattern="$2"
  local line url

  [ -f "$file" ] || return 1

  while IFS= read -r line; do
    url=$(printf '%s\n' "$line" | grep -oE "https?://[^\"'[:space:]]+" | head -1)
    [ -z "$url" ] && continue
    is_official_base_url "$url" || return 0
  done < <(grep -E "$pattern" "$file" 2>/dev/null || true)

  return 1
}

get_npm_global_bin() {
  local prefix
  prefix=$(npm prefix -g 2>/dev/null || true)
  if [ -n "$prefix" ]; then
    printf '%s/bin\n' "$prefix"
  fi
}

get_existing_claude_url() {
  local cfg="$HOME/.claude-code-router/config.json"
  local claude_json="$HOME/.claude.json"
  local claude_settings="$HOME/.claude/settings.json"
  local claude_settings_local="$HOME/.claude/settings.local.json"
  local url=""

  if [ -f "$cfg" ]; then
    url=$(grep '"api_base_url"' "$cfg" 2>/dev/null | head -1 | grep -oE "https?://[^\"'[:space:]]+" | head -1 || true)
  fi
  if [ -z "$url" ] && [ -f "$claude_json" ]; then
    url=$(grep '"apiBaseUrl"' "$claude_json" 2>/dev/null | head -1 | grep -oE "https?://[^\"'[:space:]]+" | head -1 || true)
  fi
  if [ -z "$url" ] && [ -f "$claude_settings" ]; then
    url=$(grep 'ANTHROPIC_BASE_URL' "$claude_settings" 2>/dev/null | head -1 | grep -oE "https?://[^\"'[:space:]]+" | head -1 || true)
  fi
  if [ -z "$url" ] && [ -f "$claude_settings_local" ]; then
    url=$(grep 'ANTHROPIC_BASE_URL' "$claude_settings_local" 2>/dev/null | head -1 | grep -oE "https?://[^\"'[:space:]]+" | head -1 || true)
  fi

  printf '%s\n' "$url"
}

get_settings_files_to_scan() {
  printf '%s\n' "$HOME/.claude/settings.json"
  printf '%s\n' "$HOME/.claude/settings.local.json"
  if [ "$PWD" != "$HOME" ]; then
    printf '%s\n' "$PWD/.claude/settings.json"
    printf '%s\n' "$PWD/.claude/settings.local.json"
  fi
  printf '%s\n' "/etc/claude-code/managed-settings.json"
}

file_has_auth_override_config() {
  local file="$1"
  [ -f "$file" ] || return 1

  grep -qE '"apiKeyHelper"|"forceLoginMethod"|"forceLoginOrgUUID"|"oauthAccount"|ANTHROPIC_AUTH_TOKEN|ANTHROPIC_CUSTOM_HEADERS' "$file" 2>/dev/null
}

get_detected_third_party_reason() {
  local file

  while IFS= read -r file; do
    [ -f "$file" ] || continue
    if file_has_non_official_url "$file" '"api_base_url"|"apiBaseUrl"|ANTHROPIC_BASE_URL'; then
      printf '检测到第三方 URL 配置: %s\n' "$file"
      return 0
    fi
    if file_has_auth_override_config "$file"; then
      printf '检测到第三方认证覆盖配置: %s\n' "$file"
      return 0
    fi
  done < <(get_settings_files_to_scan)

  if [ -f "$HOME/.claude/.credentials.json" ]; then
    printf '检测到已有 Claude 登录凭证: %s\n' "$HOME/.claude/.credentials.json"
    return 0
  fi

  return 1
}

# 获取全局已安装的 npm 包版本（未安装返回空）
get_installed_npm_version() {
  npm list -g "$1" --depth=0 2>/dev/null \
    | grep -E "── $1@" \
    | sed 's/.*@//' \
    | tr -d ' \r\n'
}

# 获取 npm 最新版本
get_latest_npm_version() {
  npm view "$1" version 2>/dev/null | tr -d ' \r\n'
}

# 检测是否存在第三方的 api_base_url 或 apiBaseUrl
is_third_party_config() {
  local existing_url existing_base
  local rc_file

  existing_url=$(get_existing_claude_url)
  existing_base=$(normalize_base_url "$existing_url")

  if [ -n "$existing_base" ] && [ "$existing_base" != "$(normalize_base_url "$API_BASE_URL")" ]; then
    return 0
  fi

  file_has_non_official_url "$HOME/.claude-code-router/config.json" '"api_base_url"' && return 0
  file_has_non_official_url "$HOME/.claude.json" '"apiBaseUrl"' && return 0

  if get_detected_third_party_reason >/dev/null; then
    return 0
  fi

  for rc_file in "$HOME/.bashrc" "$HOME/.bash_profile" "$HOME/.profile" "$HOME/.zshrc"; do
    file_has_non_official_url "$rc_file" 'ANTHROPIC_BASE_URL' && return 0
  done

  if [ -n "$ANTHROPIC_BASE_URL" ] && ! is_official_base_url "$ANTHROPIC_BASE_URL"; then
    return 0
  fi

  return 1
}

# 清理第三方配置、包、环境变量及 claude 状态
cleanup_third_party() {
  local old_url
  local reason
  old_url=$(get_existing_claude_url)
  reason=$(get_detected_third_party_reason || true)

  warn "检测到第三方中转站配置: ${old_url:-（未知）}"
  [ -n "$reason" ] && warn "$reason"
  warn "将删除旧的 Claude 配置目录和错误 JSON，然后重建。"
  CONFIRM=$(read_input "是否继续清理并重装？(Y/n，默认 Y): ")
  CONFIRM="${CONFIRM:-Y}"
  case "$CONFIRM" in
    [Nn]*) error "用户取消，退出" ;;
  esac

  local _npm_root _sudo_npm
  _npm_root=$(npm root -g 2>/dev/null || echo "")
  if [ -w "$_npm_root" ] || [ -w "$(dirname "$_npm_root")" ]; then
    _sudo_npm="npm"
  else
    _sudo_npm="sudo npm"
  fi

  info "卸载旧 npm 包..."
  $_sudo_npm uninstall -g @anthropic-ai/claude-code 2>/dev/null || true
  $_sudo_npm uninstall -g @musistudio/claude-code-router 2>/dev/null || true
  success "旧 npm 包已卸载"

  info "删除旧配置目录 ~/.claude-code-router ..."
  rm -rf "$HOME/.claude-code-router"
  success "已删除 ~/.claude-code-router"

  info "删除 Claude 配置目录 ~/.claude ..."
  rm -rf "$HOME/.claude"
  success "已删除 ~/.claude"

  if [ "$PWD" != "$HOME" ] && [ -d "$PWD/.claude" ]; then
    info "删除当前目录下的共享 Claude 配置 $PWD/.claude ..."
    rm -rf "$PWD/.claude"
    success "已删除 $PWD/.claude"
  fi

  info "删除错误的 ~/.claude.json ..."
  rm -f "$HOME/.claude.json"
  success "已删除 ~/.claude.json"

  if [ -f "/etc/claude-code/managed-settings.json" ] && [ -w "/etc/claude-code/managed-settings.json" ]; then
    info "删除系统级 Claude managed settings ..."
    rm -f "/etc/claude-code/managed-settings.json"
    success "已删除 /etc/claude-code/managed-settings.json"
  elif [ -f "/etc/claude-code/managed-settings.json" ]; then
    warn "检测到 /etc/claude-code/managed-settings.json，但当前无权限删除"
  fi

  info "清除旧环境变量..."
  for rc_file in "$HOME/.bashrc" "$HOME/.bash_profile" "$HOME/.profile" "$HOME/.zshrc"; do
    if [ -f "$rc_file" ]; then
      sed -i '/ANTHROPIC_AUTH_TOKEN/d' "$rc_file"
      sed -i '/ANTHROPIC_API_KEY/d' "$rc_file"
      sed -i '/ANTHROPIC_BASE_URL/d' "$rc_file"
    fi
  done
  unset ANTHROPIC_AUTH_TOKEN ANTHROPIC_API_KEY ANTHROPIC_BASE_URL 2>/dev/null || true
  success "旧环境变量已清除"
}

# 安装或跳过
install_or_skip_npm_pkg() {
  local PKG="$1"
  local DISPLAY="$2"
  local INSTALLED LATEST

  INSTALLED=$(get_installed_npm_version "$PKG")
  if [ -z "$INSTALLED" ]; then
    info "安装 $DISPLAY..."
    $SUDO_NPM install -g "$PKG" 2>&1 | tail -3
    success "$DISPLAY 安装完成"
  else
    info "检查 $DISPLAY 最新版本..."
    LATEST=$(get_latest_npm_version "$PKG")
    if [ -n "$LATEST" ] && [ "$INSTALLED" = "$LATEST" ]; then
      skip "$DISPLAY $INSTALLED 已是最新版本"
    else
      info "$DISPLAY $INSTALLED → ${LATEST:-最新版}，升级中..."
      $SUDO_NPM install -g "$PKG" 2>&1 | tail -3
      success "$DISPLAY 升级完成"
    fi
  fi
}

# ── 1. 检测并清理第三方配置 ──────────────────────────────────
step "检测现有配置"
if is_third_party_config; then
  cleanup_third_party
  success "清理完成，继续安装..."
else
  skip "未检测到第三方配置，无需清理"
fi

# ── 1.5 检测认证冲突 ────────────────────────────────────────────
step "检测认证冲突"
if has_auth_conflict; then
  cleanup_auth_conflict
else
  skip "未检测到认证冲突"
fi

# ── 2. 检测 Node.js ──────────────────────────────────────────
step "检查 Node.js 环境"

install_node() {
  info "正在自动安装 Node.js LTS..."
  if command -v apt-get &>/dev/null; then
    curl -fsSL https://deb.nodesource.com/setup_lts.x | sudo -E bash - 2>/dev/null
    sudo apt-get install -y nodejs
  elif command -v dnf &>/dev/null; then
    curl -fsSL https://rpm.nodesource.com/setup_lts.x | sudo bash - 2>/dev/null
    sudo dnf install -y nodejs
  elif command -v yum &>/dev/null; then
    curl -fsSL https://rpm.nodesource.com/setup_lts.x | sudo bash - 2>/dev/null
    sudo yum install -y nodejs
  elif command -v apk &>/dev/null; then
    sudo apk add --no-cache nodejs npm
  else
    error "无法自动安装 Node.js，请手动安装后重试: https://nodejs.org/"
  fi
}

if command -v node &>/dev/null; then
  NODE_VER=$(node --version 2>/dev/null | tr -d 'v')
  if version_gte "$NODE_VER" "$NODE_MIN_VER"; then
    skip "Node.js v${NODE_VER} 已安装且版本满足要求"
  else
    warn "Node.js v${NODE_VER} 版本过低（需 >= ${NODE_MIN_VER}），重新安装..."
    install_node
    success "Node.js 已更新"
  fi
else
  install_node
  success "Node.js 安装完成"
fi

if ! command -v npm &>/dev/null; then
  error "npm 未找到，请检查 Node.js 安装"
fi

# ── 3. 检测并安装/升级 claude-code 和 ccr ───────────────────
step "检查 Claude Code 相关工具"

# 判断是否需要 sudo
NPM_GLOBAL_ROOT=$(npm root -g 2>/dev/null || echo "")
if [ -w "$NPM_GLOBAL_ROOT" ] || [ -w "$(dirname "$NPM_GLOBAL_ROOT")" ]; then
  SUDO_NPM="npm"
else
  SUDO_NPM="sudo npm"
fi

install_or_skip_npm_pkg "@anthropic-ai/claude-code" "claude-code"
install_or_skip_npm_pkg "@musistudio/claude-code-router" "claude-code-router"

# 刷新 PATH
if ! command -v claude &>/dev/null; then
  NPM_GLOBAL_BIN=$(get_npm_global_bin)
  if [ -n "$NPM_GLOBAL_BIN" ]; then
    export PATH="${NPM_GLOBAL_BIN}:$PATH"
  fi
fi

# ── 4. 询问 API Key ──────────────────────────────────────────
step "API 配置"
echo -e "${CYAN}请在硅基API官网获取您的 API Key: ${API_BASE_URL}${NC}"
API_KEY=$(read_secret "请输入 API Key（输入时不显示）: ")
API_KEY=$(strip_line_breaks "$API_KEY")
if [ -z "$API_KEY" ]; then
  error "API Key 不能为空"
fi
# 格式校验：至少10个字符，仅含字母、数字、连字符、下划线
if ! printf '%s' "$API_KEY" | grep -qE '^[A-Za-z0-9_-]{10,}$'; then
  warn "API Key 格式可能不正确（含特殊字符或过短），请确认后继续"
fi
success "API Key 已设置"

# ── 5. 选择模型 ──────────────────────────────────────────────
step "选择 Anthropic 模型"

step "选择 Anthropic 模型"
MODEL_COUNT=${#ANTHROPIC_MODELS[@]}
for i in $(seq 0 $((MODEL_COUNT - 1))); do
  marker=""
  if [ $i -eq 0 ]; then marker="（推荐）"; fi
  echo -e "${CYAN}  $((i+1))) ${ANTHROPIC_MODELS[$i]} ${ANTHROPIC_DESCS[$i]} $marker${NC}"
done
echo ""

MODEL_CHOICE=$(read_input "请选择 (1/$MODEL_COUNT，默认 1): ")
MODEL_CHOICE="${MODEL_CHOICE:-1}"
MODEL_INDEX=$((MODEL_CHOICE - 1))
if [ "$MODEL_INDEX" -lt 0 ] || [ "$MODEL_INDEX" -ge "$MODEL_COUNT" ]; then
  MODEL_INDEX=0
fi

MODEL="${ANTHROPIC_MODELS[$MODEL_INDEX]}"
success "已选择模型: $MODEL"

# ── 6. 生成 config.json ──────────────────────────────────────
step "生成配置文件"

CONFIG_DIR="$HOME/.claude-code-router"
CONFIG_FILE="$CONFIG_DIR/config.json"
mkdir -p "$CONFIG_DIR"
chmod 700 "$CONFIG_DIR"

SKIP_CONFIG=false
if [ -f "$CONFIG_FILE" ]; then
  OVERWRITE=$(read_input "配置文件已存在，是否覆盖？(Y/n，默认 Y): ")
  OVERWRITE="${OVERWRITE:-Y}"
  case "$OVERWRITE" in
    [Nn])
      skip "保留现有配置文件，跳过写入"
      SKIP_CONFIG=true
      ;;
  esac
fi

if [ "$SKIP_CONFIG" != "true" ]; then
  # 仅使用 Anthropic provider（/v1/messages 端点）
  API_BASE_URL_WITH_ENDPOINT="${API_BASE_URL}${API_ENDPOINT}"

  # 设置默认 router
  ROUTER_DEFAULT="anthropic,${MODEL}"

  # 使用 python3 生成 JSON（更可靠）
  if command -v python3 &>/dev/null; then
    python3 - "$CONFIG_FILE" "$API_BASE_URL_WITH_ENDPOINT" "$API_KEY" "${ANTHROPIC_MODELS[@]}" "$ROUTER_DEFAULT" <<'PYEOF'
import json, sys
path, api_base_url, api_key = sys.argv[1:4]
router_default = sys.argv[4]
models = sys.argv[5:]

config = {
    "LOG": False,
    "CLAUDE_PATH": "",
    "HOST": "127.0.0.1",
    "PORT": 3456,
    "APIKEY": api_key,
    "API_TIMEOUT_MS": "600000",
    "PROXY_URL": "",
    "Transformers": [],
    "Providers": [
        {
            "name": "anthropic",
            "api_base_url": api_base_url,
            "api_key": api_key,
            "models": models,
            "transformer": {"use": ["Anthropic"]},
        },
    ],
    "Router": {
        "default": router_default,
        "background": router_default,
        "think": router_default,
        "longContext": router_default,
        "longContextThreshold": 60000,
        "webSearch": router_default,
    },
}

with open(path, "w", encoding="utf-8") as f:
    json.dump(config, f, indent=2)
PYEOF
  else
    # 回退方案：直接写入 JSON（API_KEY 中可能有特殊字符）
    cat > "$CONFIG_FILE" <<EOF
{
  "LOG": false,
  "CLAUDE_PATH": "",
  "HOST": "127.0.0.1",
  "PORT": 3456,
  "APIKEY": "${API_KEY}",
  "API_TIMEOUT_MS": "600000",
  "PROXY_URL": "",
  "Transformers": [],
  "Providers": [
    {
      "name": "anthropic",
      "api_base_url": "${API_BASE_URL_WITH_ENDPOINT}",
      "api_key": "${API_KEY}",
      "models": ["$(IFS=, && echo "${ANTHROPIC_MODELS[*]}")"],
      "transformer": { "use": ["Anthropic"] }
    }
  ],
  "Router": {
    "default": "${ROUTER_DEFAULT}",
    "background": "${ROUTER_DEFAULT}",
    "think": "${ROUTER_DEFAULT}",
    "longContext": "${ROUTER_DEFAULT}",
    "longContextThreshold": 60000,
    "webSearch": "${ROUTER_DEFAULT}"
  }
}
EOF
  fi
  chmod 600 "$CONFIG_FILE"
  if command -v python3 &>/dev/null; then
    python3 - "$CONFIG_FILE" <<'PYEOF'
import json, sys
with open(sys.argv[1], encoding="utf-8") as f:
    json.load(f)
PYEOF
  fi
  success "配置文件已写入: $CONFIG_FILE"
  GENERATED_URL=$(grep '"api_base_url"' "$CONFIG_FILE" | head -1 | grep -oE "https?://[^\"'[:space:]]+" | head -1 || true)
  info "已配置 API 端点: ${GENERATED_URL}"
fi

# ── 7. 写入环境变量到 shell RC ─────────────────────────────
step "配置环境变量"

if [ -n "$ZSH_VERSION" ] || [ "$SHELL" = "/bin/zsh" ]; then
  ENV_RC="$HOME/.zshrc"
else
  ENV_RC="$HOME/.bashrc"
fi

# 先从所有 RC 文件删除旧的同名变量行
for _rc in "$HOME/.bashrc" "$HOME/.bash_profile" "$HOME/.profile" "$HOME/.zshrc"; do
  if [ -f "$_rc" ]; then
    if grep -qE 'ANTHROPIC_AUTH_TOKEN|ANTHROPIC_API_KEY|ANTHROPIC_BASE_URL' "$_rc" 2>/dev/null; then
      info "在 $_rc 中发现旧 ANTHROPIC 环境变量，正在清除..."
      sed -i '/ANTHROPIC_AUTH_TOKEN/d' "$_rc"
      sed -i '/ANTHROPIC_API_KEY/d' "$_rc"
      sed -i '/ANTHROPIC_BASE_URL/d' "$_rc"
      success "已清除 $_rc 中的旧变量"
    fi
  fi
done

# 清除 OAuth 登录凭证
CLAUDE_CREDS="$HOME/.claude/.credentials.json"
if [ -f "$CLAUDE_CREDS" ]; then
  info "发现 OAuth 登录凭证 ~/.claude/.credentials.json，正在删除..."
  rm -f "$CLAUDE_CREDS"
  success "已删除 OAuth 登录凭证"
fi

# 清理 ~/.claude/settings.json
CLAUDE_SETTINGS="$HOME/.claude/settings.json"
if [ -f "$CLAUDE_SETTINGS" ] && command -v python3 &>/dev/null; then
  info "正在清理 ~/.claude/settings.json 中的第三方配置..."
  python3 - "$CLAUDE_SETTINGS" <<'PYEOF'
import json, sys
path = sys.argv[1]
try:
    with open(path) as f:
        d = json.load(f)
    env = d.get('env', {})
    removed_env = [k for k in ['ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL', 'ANTHROPIC_API_KEY'] if k in env]
    env.pop('ANTHROPIC_AUTH_TOKEN', None)
    env.pop('ANTHROPIC_BASE_URL', None)
    env.pop('ANTHROPIC_API_KEY', None)
    if env:
        d['env'] = env
    elif 'env' in d:
        del d['env']
    removed_top = [k for k in ['apiKey', 'authToken', 'sessionToken'] if k in d]
    d.pop('apiKey', None)
    d.pop('authToken', None)
    d.pop('sessionToken', None)
    with open(path, 'w') as f:
        json.dump(d, f, indent=2)
    if removed_env:
        print(f"  [settings.json] 已从 env 块移除: {', '.join(removed_env)}")
    if removed_top:
        print(f"  [settings.json] 已从顶层移除: {', '.join(removed_top)}")
except Exception as e:
    print(f"  [settings.json] 解析失败: {e}")
PYEOF
fi

CLAUDE_SETTINGS_LOCAL="$HOME/.claude/settings.local.json"
if [ -f "$CLAUDE_SETTINGS_LOCAL" ] && command -v python3 &>/dev/null; then
  python3 - "$CLAUDE_SETTINGS_LOCAL" <<'PYEOF'
import json, sys
path = sys.argv[1]
try:
    with open(path) as f:
        d = json.load(f)
    env = d.get('env', {})
    removed = [k for k in ['ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL', 'ANTHROPIC_API_KEY'] if k in env]
    for k in removed:
        env.pop(k)
    if env:
        d['env'] = env
    elif 'env' in d:
        del d['env']
    with open(path, 'w') as f:
        json.dump(d, f, indent=2)
except Exception:
    pass
PYEOF
fi

unset ANTHROPIC_AUTH_TOKEN ANTHROPIC_BASE_URL ANTHROPIC_API_KEY 2>/dev/null || true

# 写入新值
echo "export ANTHROPIC_API_KEY=\"${API_KEY}\"" >> "$ENV_RC"
echo "export ANTHROPIC_BASE_URL=\"${API_BASE_URL}\"" >> "$ENV_RC"

export ANTHROPIC_API_KEY="${API_KEY}"
export ANTHROPIC_BASE_URL="${API_BASE_URL}"

success "环境变量已写入 ${ENV_RC}"

# 同步 Claude Code 全局 settings.json
if command -v python3 &>/dev/null; then
  mkdir -p "$HOME/.claude"
  python3 - "$HOME/.claude/settings.json" "$API_KEY" "$API_BASE_URL" "$MODEL" <<'PYEOF'
import json, os, sys
path, api_key, base_url, model = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4]
data = {}
if os.path.exists(path):
    try:
        with open(path) as f:
            data = json.load(f)
    except Exception:
        data = {}
env = data.get('env', {})
env['ANTHROPIC_API_KEY'] = api_key
env['ANTHROPIC_BASE_URL'] = base_url
env.pop('ANTHROPIC_AUTH_TOKEN', None)
data['env'] = env
data['model'] = model
for key in ['apiKey', 'authToken', 'sessionToken']:
    data.pop(key, None)
with open(path, 'w') as f:
    json.dump(data, f, indent=2)
PYEOF
  success "已同步 ~/.claude/settings.json"
fi

# ── 8. 写入 ~/.claude.json 跳过 Onboarding ──────────────────
step "初始化 Claude Code 状态"

CLAUDE_JSON="$HOME/.claude.json"
CLAUDE_VERSION=$(claude --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1 || echo "2.1.0")

if [ ! -f "$CLAUDE_JSON" ]; then
  cat > "$CLAUDE_JSON" <<CLAUDEJSON
{
  "hasCompletedOnboarding": true,
  "lastOnboardingVersion": "${CLAUDE_VERSION}",
  "primaryApiKey": "${API_KEY}"
}
CLAUDEJSON
  success "已创建 ~/.claude.json"
else
  if command -v python3 &>/dev/null; then
    python3 - "$CLAUDE_JSON" "$CLAUDE_VERSION" "$API_KEY" <<'PYEOF'
import json, sys
path, ver, api_key = sys.argv[1], sys.argv[2], sys.argv[3]
with open(path) as f:
    d = json.load(f)
d['hasCompletedOnboarding'] = True
d['lastOnboardingVersion'] = ver
d['primaryApiKey'] = api_key
d.pop('apiBaseUrl', None)
d.pop('oauthAccount', None)
d.pop('authToken', None)
d.pop('sessionToken', None)
with open(path, 'w') as f:
    json.dump(d, f, indent=2)
PYEOF
    success "已更新 ~/.claude.json"
  else
    cat > "$CLAUDE_JSON" <<CLAUDEJSON
{
  "hasCompletedOnboarding": true,
  "lastOnboardingVersion": "${CLAUDE_VERSION}",
  "primaryApiKey": "${API_KEY}"
}
CLAUDEJSON
    success "已覆盖写入 ~/.claude.json"
  fi
fi
# 限制访问权限，防止 API Key 泄露
chmod 600 "$CLAUDE_JSON"

# ── 9. API 连通性验证 ─────────────────────────────────────────
step "验证 API 连通性"

if command -v curl &>/dev/null; then
  HTTP_CODE=$(curl -sf -o /dev/null -w '%{http_code}' \
    --max-time 10 \
    -H "x-api-key: ${API_KEY}" \
    -H "anthropic-version: 2023-06-01" \
    "${API_BASE_URL}/v1/models" 2>/dev/null || echo "000")
  case "$HTTP_CODE" in
    200) success "API 连通性验证通过 (HTTP ${HTTP_CODE})" ;;
    401) warn "API Key 无效或已过期 (HTTP 401)，请检查 Key 是否正确" ;;
    403) warn "API Key 无权限 (HTTP 403)，请确认账号状态" ;;
    000) warn "连通性检查超时或网络不可达，请手动验证 API Key" ;;
    *)   warn "API 连通性返回 HTTP ${HTTP_CODE}，请检查配置是否正确" ;;
  esac
else
  skip "未找到 curl，跳过连通性验证"
fi

# ── 10. 完成 ──────────────────────────────────────────────────
step "完成"

GLOBAL_BIN=$(get_npm_global_bin)

echo ""
echo -e "${GREEN}${BOLD}✅ Claude Code 部署完成！${NC}"
echo ""
echo -e "${CYAN}使用方法:${NC}"
echo "  claude            # 启动 Claude Code"
echo ""
echo -e "${CYAN}说明:${NC}"
echo "  已写入 ${ENV_RC}，并同步到 ~/.claude/settings.json。"
echo "  如果直接运行 claude 仍提示未登录，请先执行: source ${ENV_RC}"
echo ""

# 检查 PATH
if [ -n "$GLOBAL_BIN" ] && [[ ":$PATH:" != *":$GLOBAL_BIN:"* ]]; then
  if [ -n "$ZSH_VERSION" ] || [ "$SHELL" = "/bin/zsh" ]; then
    SHELL_RC="$HOME/.zshrc"
  else
    SHELL_RC="$HOME/.bashrc"
  fi
  echo -e "${YELLOW}⚠ 如遇到 \"command not found\"，请运行:${NC}"
  echo "  echo 'export PATH=${GLOBAL_BIN}:\$PATH' >> ${SHELL_RC}"
  echo "  source ${SHELL_RC}"
  echo ""
fi

echo -e "${CYAN}${BOLD}── 当前环境变量诊断 ────────────────────────────────${NC}"
_key_display="${ANTHROPIC_API_KEY:0:10}..."
_token_display="${ANTHROPIC_AUTH_TOKEN:-(未设置)}"
echo "  ANTHROPIC_API_KEY  : ${_key_display}"
echo "  ANTHROPIC_BASE_URL : ${ANTHROPIC_BASE_URL}"
echo "  ANTHROPIC_AUTH_TOKEN: ${_token_display}"
if [ -n "$ANTHROPIC_AUTH_TOKEN" ]; then
  warn "⚠ ANTHROPIC_AUTH_TOKEN 仍然存在！请在安装完成后执行: claude /logout"
else
  success "无 Auth Token 冲突，Claude Code 将正确使用硅基API"
fi
# 检查 OAuth 凭证残留
if [ -f "$HOME/.claude/.credentials.json" ]; then
  warn "⚠ OAuth 登录凭证残留！请在安装完成后执行: claude /logout"
fi
echo ""