#!/usr/bin/env bash
# 配置 Higress 三条总入口路由：/llm → LiteLLM，/dify → Dify，/xf → Xinference
set -euo pipefail

CONSOLE="${HIGRESS_CONSOLE:-http://127.0.0.1:8001}"
USER="${HIGRESS_ADMIN_USER:-admin}"
PASS="${HIGRESS_ADMIN_PASS:-Higress207admin!}"
BACKEND_HOST="${HIGRESS_BACKEND_HOST:-192.168.110.207}"
COOKIE="$(mktemp)"
trap 'rm -f "$COOKIE"' EXIT

login() {
  curl -sS -c "$COOKIE" -b "$COOKIE" -X POST "$CONSOLE/session/login" \
    -H "Content-Type: application/json" \
    -d "{\"username\":\"$USER\",\"password\":\"$PASS\"}" | tee /tmp/higress_login.json
  echo
  if ! grep -q '"name"' /tmp/higress_login.json; then
    echo "[FAIL] Console 登录失败（若未初始化，先 POST /system/init）"
    exit 1
  fi
}

put_json() {
  local path="$1" body="$2"
  curl -sS -b "$COOKIE" -X PUT "$CONSOLE$path" \
    -H "Content-Type: application/json" \
    -d "$body"
  echo
}

post_json() {
  local path="$1" body="$2"
  curl -sS -b "$COOKIE" -X POST "$CONSOLE$path" \
    -H "Content-Type: application/json" \
    -d "$body"
  echo
}

ensure_source() {
  local name="$1" domain="$2" port="$3"
  # 已存在则跳过
  if curl -sS -b "$COOKIE" "$CONSOLE/v1/service-sources" | grep -q "\"name\":\"$name\""; then
    echo "[INFO] service-source 已存在: $name"
    return 0
  fi
  echo "[INFO] 创建 service-source: $name → $domain"
  post_json /v1/service-sources "$(cat <<EOF
{
  "name": "$name",
  "type": "static",
  "domain": "$domain",
  "port": $port,
  "protocol": "HTTP",
  "authN": {"enabled": false}
}
EOF
)"
}

ensure_route() {
  local name="$1" prefix="$2" svc="$3" port="$4"
  local body
  body="$(cat <<EOF
{
  "name": "$name",
  "domains": [],
  "path": {
    "matchType": "PRE",
    "matchValue": "$prefix",
    "caseSensitive": false
  },
  "services": [
    {"name": "$svc", "port": $port, "weight": 100}
  ],
  "rewrite": {
    "enabled": true,
    "path": "/"
  },
  "authConfig": {"enabled": false}
}
EOF
)"
  if curl -sS -b "$COOKIE" "$CONSOLE/v1/routes" | grep -q "\"name\":\"$name\""; then
    echo "[INFO] 更新路由: $name"
    put_json "/v1/routes/$name" "$body"
  else
    echo "[INFO] 创建路由: $name ($prefix → $svc)"
    post_json /v1/routes "$body"
  fi
}

echo "[INFO] Console=$CONSOLE backend=$BACKEND_HOST"
login

ensure_source "litellm" "${BACKEND_HOST}:4000" 4000
ensure_source "dify" "${BACKEND_HOST}:80" 80
ensure_source "xinference" "${BACKEND_HOST}:9997" 9997

# LiteLLM / Xinference：路径前缀 + 去前缀 rewrite
ensure_route "llm" "/llm/" "litellm.static" 4000
ensure_route "xf" "/xf/" "xinference.static" 9997
ensure_route "llm-root" "/llm" "litellm.static" 4000
ensure_route "xf-root" "/xf" "xinference.static" 9997

# Dify：Host 路由（子路径会导致前端重定向丢 /dify 前缀）
DIFY_HOST="${DIFY_HOST:-dify.ai.local}"
if curl -sS -b "$COOKIE" "$CONSOLE/v1/domains" | grep -q "\"name\":\"$DIFY_HOST\""; then
  echo "[INFO] 域名已存在: $DIFY_HOST"
else
  echo "[INFO] 创建域名: $DIFY_HOST"
  post_json /v1/domains "{\"name\":\"$DIFY_HOST\",\"enableHttps\":\"off\"}"
fi

DIFY_BODY="$(cat <<EOF
{
  "name": "dify-host",
  "domains": ["$DIFY_HOST"],
  "path": {"matchType": "PRE", "matchValue": "/", "caseSensitive": false},
  "services": [{"name": "dify.static", "port": 80, "weight": 100}],
  "rewrite": {"enabled": false},
  "authConfig": {"enabled": false}
}
EOF
)"
if curl -sS -b "$COOKIE" "$CONSOLE/v1/routes" | grep -q '"name":"dify-host"'; then
  put_json /v1/routes/dify-host "$DIFY_BODY"
else
  post_json /v1/routes "$DIFY_BODY"
fi

# 清理旧的 /dify 路径路由（若存在）
curl -sS -b "$COOKIE" -X DELETE "$CONSOLE/v1/routes/dify" >/dev/null 2>&1 || true
curl -sS -b "$COOKIE" -X DELETE "$CONSOLE/v1/routes/dify-root" >/dev/null 2>&1 || true

echo "[INFO] 请在客户端 hosts 增加: ${BACKEND_HOST}  ${DIFY_HOST}"
echo "[OK] 路由配置完成"