#!/bin/bash

# 彩色输出函数
color_output() {
    echo -e "$1"
}

# 打印脚本头部，增加美观
print_header() {
    clear
    # 获取系统信息
    local model=$(cat /tmp/sysinfo/model 2>/dev/null || echo "未知设备")
    # 使用更可靠的方式获取 CPU 使用率
    local cpu_usage=$(grep 'cpu ' /proc/stat | awk '{usage=($2+$4)*100/($2+$4+$5)} END {printf "%.1f%%", usage}')
    local mem_total=$(free | grep Mem | awk '{print $2}')
    local mem_used=$(free | grep Mem | awk '{print $3}')
    local mem_usage=$((mem_used * 100 / mem_total))

    color_output "\e[36m━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\e[0m"
    color_output "\e[36m┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓\e[0m"
    color_output "\e[36m┃                                       ┃\e[0m"
    color_output "\e[36m┃        \e[33m欢迎使用 ZeroWrt 配置工具\e[36m      ┃\e[0m"
    color_output "\e[36m┃                                       ┃\e[0m"
    color_output "\e[36m┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛\e[0m"
    color_output "\e[36m━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\e[0m"
    color_output ""
    color_output "\e[34m系统信息\e[0m"
    color_output "----------------------------------------"
    color_output "  设备型号: $model"
    color_output "  CPU 占用: $cpu_usage"
    color_output "  内存占用: ${mem_usage}%"
    color_output "----------------------------------------"
    color_output "\e[32m说明：本工具用于配置 OpenWrt-24.10\e[0m"
    color_output "\e[32m博客：https://www.kejizero.online\e[0m"
    color_output "----------------------------------------"
    echo ""
}

# 显示菜单
show_menu() {
    color_output "\e[36m┏━━━━━━━━━━━━━━━ 功能菜单 ━━━━━━━━━━━━━━━┓\e[0m"
    color_output "\e[36m┃                                        ┃\e[0m"
    color_output "\e[36m┃\e[0m  1. 更改 LAN 口 IP 地址                \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  2. 更改管理员密码                     \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  3. 切换默认主题                       \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  4. 恢复出厂设置                       \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  5. 一键换源                           \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  6. 一键部署                           \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  7. IPv6 开关 (仅适用于主路由)         \e[36m┃\e[0m"  
    color_output "\e[36m┃\e[0m  9. iStoreOS 风格化                    \e[36m┃\e[0m"  
    color_output "\e[36m┃\e[0m  8. 检测更新                           \e[36m┃\e[0m"
    color_output "\e[36m┃\e[0m  0. 退出                               \e[36m┃\e[0m"
    color_output "\e[36m┃                                        ┃\e[0m"
    color_output "\e[36m┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛\e[0m"
    read -p "$(color_output "\e[33m请输入您的选择 [0-8]: \e[0m")" choice
    case "$choice" in
        1) change_ip ;;
        2) change_password ;;
        3) change_theme ;;
        4) reset_config ;;
        5) change_source ;;
        6) install_apps ;;
        7) configure_ipv6 ;;
        8) check_update ;;
        9) istore_style ;;
        0) exit 0 ;;
        *) echo "无效选项，请重新输入"; show_menu ;;
    esac
}

# 1. 更换 LAN 口 IP 地址
change_ip() {
    color_output "\e[34m[更改 LAN 口 IP 地址]\e[0m"
    read -p "请输入新的 LAN 口 IP 地址（如 192.168.1.2）: " new_ip
    if [[ -n "$new_ip" ]]; then
        uci set network.lan.ipaddr="$new_ip"
        uci commit network
        /etc/init.d/network restart
        color_output "\e[32mLAN 口 IP 已成功更改为 $new_ip\e[0m"
    else
        color_output "\e[31m无效的 IP 地址，操作取消。\e[0m"
    fi
    read -p "按 Enter 键返回菜单..." 
    show_menu
}

# 2. 更改管理员密码
change_password() {
    color_output "\e[34m[更改管理员密码]\e[0m"
    read -p "请输入新的管理员密码: " new_password
    if [[ -n "$new_password" ]]; then
        # 使用 openssl 生成密码哈希，使用 -1 参数生成 MD5 格式的密码哈希
        password_hash=$(openssl passwd -1 "$new_password")
        
        # 获取当前 shadow 文件的其他行
        tail -n +2 /etc/shadow > /tmp/shadow.tmp
        
        # 创建新的 root 行
        echo "root:$password_hash:0:0:99999:7:::" > /etc/shadow
        
        # 添加其他行
        cat /tmp/shadow.tmp >> /etc/shadow
        
        # 清理临时文件
        rm -f /tmp/shadow.tmp
        
        color_output "\e[32m管理员密码已成功更改。\e[0m"
    else
        color_output "\e[31m无效的密码，操作取消。\e[0m"
    fi
    read -p "按 Enter 键返回菜单..."
    show_menu
}

# 3. 切换默认主题
change_theme() {
    color_output "\e[34m[切换默认主题]\e[0m"
    uci set luci.main.mediaurlbase='/luci-static/bootstrap'
    uci commit luci
    color_output "\e[32m主题已成功切换为默认主题。\e[0m"
    read -p "按 Enter 键返回菜单..."
    show_menu
}

# 4. 一键重置配置
reset_config() {
    color_output "\e[31m[恢复出厂设置]\e[0m"
    color_output "\e[31m警告：此操作将清除所有设置！\e[0m"
    read -p "确定要继续吗？(y/n): " confirm
    if [[ "$confirm" == "y" || "$confirm" == "Y" ]]; then
        echo "恢复出厂设置中..."
        firstboot -y
        color_output "\e[33m设备将在 5 秒钟后重启...\e[0m"
        sleep 5
        reboot
    else
        color_output "\e[32m操作已取消\e[0m"
        read -p "按 Enter 键返回菜单..."
        show_menu
    fi
}

# 5. 一键换源
change_source() {
    color_output "\e[34m[更换软件源]\e[0m"
    color_output "\e[36m请选择要使用的源：\e[0m"
    color_output "1. 阿里源"
    color_output "2. 清华源"
    color_output "3. 中科大源"
    color_output "4. 官方源"
    color_output "0. 返回"
    read -p "请输入您的选择 [0-4]: " source_choice

    case "$source_choice" in
        1) base_url="https://mirrors.aliyun.com/openwrt/releases/24.10.0-rc5/packages/x86_64" ;;
        2) base_url="https://mirrors.tuna.tsinghua.edu.cn/openwrt/releases/24.10.0-rc5/packages/x86_64" ;;
        3) base_url="https://mirrors.ustc.edu.cn/openwrt/releases/24.10.0-rc5/packages/x86_64" ;;
        4) base_url="https://downloads.openwrt.org/releases/24.10.0-rc5/packages/x86_64" ;;
        0) show_menu ; return ;;
        *) color_output "\e[31m无效选项，返回菜单。\e[0m" ; show_menu ; return ;;
    esac

    cat <<EOF > /etc/opkg/distfeeds.conf
src/gz openwrt_base $base_url/base
src/gz openwrt_luci $base_url/luci
src/gz openwrt_packages $base_url/packages
src/gz openwrt_routing $base_url/routing
src/gz openwrt_telephony $base_url/telephony
EOF

    color_output "\e[32m软件源已成功切换。\e[0m"
    read -p "按 Enter 键返回菜单..."
    show_menu
}

# 6. 一键部署
install_apps() {
    while true; do
        clear
        color_output "\e[34m[一键部署]\e[0m"
        color_output "\e[36m┏━━━━━━━━━━━━━━━ 部署选项 ━━━━━━━━━━━━━━━┓\e[0m"
        color_output "\e[36m┃                                        ┃\e[0m"
        color_output "\e[36m┃\e[0m  1. 部署 ShellClash                    \e[36m┃\e[0m"
        color_output "\e[36m┃\e[0m  2. 部署 小雅 Alist                    \e[36m┃\e[0m"
        color_output "\e[36m┃\e[0m  3. 部署 Subconverter                  \e[36m┃\e[0m"
        color_output "\e[36m┃\e[0m  4. 部署 AdGuardhome                   \e[36m┃\e[0m"     
        color_output "\e[36m┃\e[0m  0. 返回主菜单                         \e[36m┃\e[0m"
        color_output "\e[36m┃                                        ┃\e[0m"
        color_output "\e[36m┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛\e[0m"
        
        read -p "$(color_output "\e[33m请输入您的选择 [0-4]: \e[0m")" app_choice

        case "$app_choice" in
            1)
                color_output "\e[34m[部署 ShellClash]\e[0m"
                color_output "\e[36m请选择 ShellClash 的安装源：\e[0m"
                color_output "1. GitHub 源"
                color_output "2. jsDelivr CDN 源"
                color_output "0. 返回"
                read -p "请输入您的选择 [0-2]: " install_choice

                case "$install_choice" in
                    1) export url='https://raw.githubusercontent.com/juewuy/ShellCrash/master' ;;
                    2) export url='https://fastly.jsdelivr.net/gh/juewuy/ShellCrash@master' ;;
                    0) continue ;;
                    *) 
                        color_output "\e[31m无效选项\e[0m"
                        sleep 2
                        continue 
                        ;;
                esac

                if [ "$install_choice" != "0" ]; then
                    sh -c "$(curl -kfsSl $url/install.sh)" && source /etc/profile &> /dev/null
                    color_output "\e[32mShellClash 已成功安装。\e[0m"
                    read -p "按 Enter 键继续..."
                fi
                ;;

            2)
                color_output "\e[34m[部署小雅 Alist]\e[0m"
                color_output "\e[33m正在部署小雅 Alist...\e[0m"
                bash -c "$(curl --insecure -fsSL https://ddsrem.com/xiaoya_install.sh)"
                color_output "\e[32m小雅 Alist 安装完成。\e[0m"
                read -p "按 Enter 键继续..."
                ;;
            3)
                color_output "\e[34m[部署 Subconverter]\e[0m"
                
                # 检查 Docker 是否已安装
                if ! command -v docker &> /dev/null; then
                    color_output "\e[33m未检测到 Docker，正在安装...\e[0m"
                    opkg update && opkg install docker
                fi
                
                # 检查 Subconverter 是否已运行
                if docker ps | grep -q "subconverter"; then
                    color_output "\e[32mSubconverter 已经在运行\e[0m"
                    
                    # 获取本机 IP 地址
                    local_ip=$(ip addr show br-lan | grep -w inet | awk '{print $2}' | cut -d/ -f1)
                    
                # 显示配置模板选项
                color_output "\e[36m┏━━━━━━━━━━━━━━━ 配置模板 ━━━━━━━━━━━━━━━┓\e[0m"
                color_output "\e[36m┃                                        ┃\e[0m"
                color_output "\e[36m┃\e[0m  1. ACL4SSR_Online_Mini.ini            \e[36m┃\e[0m"
                color_output "\e[36m┃\e[0m  2. ACL4SSR_Online_Full.ini            \e[36m┃\e[0m"
                color_output "\e[36m┃\e[0m  3. ACL4SSR_Online.ini                 \e[36m┃\e[0m"
                color_output "\e[36m┃\e[0m  0. 返回上一级                         \e[36m┃\e[0m"
                color_output "\e[36m┃                                        ┃\e[0m"
                color_output "\e[36m┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛\e[0m"
                read -p "$(color_output "\e[33m请输入选择 [0-3]: \e[0m")" template_choice

                case "$template_choice" in
                1) config_url="https://git.kejizero.online/zhao/rule/raw/branch/main/mihomo/ACL4SSR_Online_Mini.ini" ;;
                2) config_url="https://git.kejizero.online/zhao/rule/raw/branch/main/mihomo/ACL4SSR_Online_Full.ini" ;;
                3) config_url="https://git.kejizero.online/zhao/rule/raw/branch/main/mihomo/ACL4SSR_Online.ini" ;;
                0) continue ;; # 返回上一级
                *) 
                color_output "\e[31m无效选择\e[0m"
                read -p "按 Enter 键继续..."
                continue
                 ;;
                esac
                    
                    # 获取订阅链接
                    read -p "请输入订阅链接: " sub_url
                    
                    if [ -n "$sub_url" ]; then
                        # 生成完整的转换链接
                        convert_url="http://${local_ip}:25500/sub?target=clash&insert=true&new_name=true&scv=true&url=${sub_url}&config=${config_url}"
                        
                        color_output "\e[32m转换链接已生成：\e[0m"
                        color_output "\e[33m${convert_url}\e[0m"
                    else
                        color_output "\e[31m订阅链接不能为空\e[0m"
                    fi
                else
                    color_output "\e[33m正在部署 Subconverter...\e[0m"
                    if docker run -d --restart=always -p 25500:25500 tindy2013/subconverter:latest; then
                        color_output "\e[32mSubconverter 部署成功！\e[0m"
                    else
                        color_output "\e[31mSubconverter 部署失败\e[0m"
                    fi
                fi
                read -p "按 Enter 键返回..."
                ;;
            4)
                color_output "\e[34m[部署 AdGuardHome]\e[0m"
                
                # 检查 Docker 是否已安装
                if ! command -v docker &> /dev/null; then
                    color_output "\e[33m未检测到 Docker，正在安装...\e[0m"
                    opkg update && opkg install docker
                fi
                
                # 获取本机 IP 地址
                local_ip=$(ip addr show br-lan | grep -w inet | awk '{print $2}' | cut -d/ -f1)
                
                # 检查 AdGuardHome 是否已运行
                if docker ps | grep -q "adguardhome"; then
                    color_output "\e[32mAdGuardHome 已经在运行！\e[0m"
                    color_output "\e[33m请使用浏览器访问：\e[0m"
                    color_output "\e[32mhttp://${local_ip}:3000\e[0m"
                else
                    color_output "\e[33m正在部署 AdGuardHome...\e[0m"
                    
                    # 创建配置目录
                    mkdir -p /root/adguardhome/work /root/adguardhome/conf
                    
                    # 部署 AdGuardHome
                    if docker run -d \
                        --name adguardhome \
                        -v /root/adguardhome/work:/opt/adguardhome/work \
                        -v /root/adguardhome/conf:/opt/adguardhome/conf \
                        -p 3000:3000 \
                        --restart always \
                        adguard/adguardhome; then
                        
                        color_output "\e[32m\nAdGuardHome 部署成功！\e[0m"
                        color_output "\e[33m请使用浏览器访问以下地址进行配置：\e[0m"
                        color_output "\e[32mhttp://${local_ip}:3000\e[0m"
                    else
                        color_output "\e[31mAdGuardHome 部署失败\e[0m"
                    fi
                fi
                read -p "按 Enter 键返回..."
                ;;                
            0)
                show_menu
                return
                ;;
            *)
                color_output "\e[31m无效选项，请重新选择\e[0m"
                sleep 2
                ;;
        esac
    done
}

# 7. IPv6 开关
configure_ipv6() {
    color_output "\e[34m[IPv6 设置]\e[0m"
    
    # 检查是否为 PPPoE 模式
    local wan_proto=$(uci -q get network.wan.proto)
    if [ "$wan_proto" != "pppoe" ]; then
        color_output "\e[31m错误: 无法开启 IPv6\e[0m"
        color_output "\e[31m当前上网方式为: $wan_proto\e[0m"
        color_output "\e[31m请先切换为 PPPoE 模式\e[0m"
        read -p "按 Enter 键返回菜单..."
        show_menu
        return
    fi
    
    # 检查当前状态
    local current_ra=$(uci -q get dhcp.lan.ra)
    local current_dhcpv6=$(uci -q get dhcp.lan.dhcpv6)
    local current_ndp=$(uci -q get dhcp.lan.ndp)
    local current_filter_aaaa=$(uci -q get dhcp.@dnsmasq[0].filter_aaaa)
    
    if [ "$current_ra" = "server" ] && [ "$current_dhcpv6" = "server" ]; then
        status_text="已开启"
    else
        status_text="已关闭"
    fi
    
    color_output "\e[36m当前 IPv6 状态: $status_text\e[0m"
    color_output "\e[36m请选择操作：\e[0m"
    color_output "1. 开启 IPv6"
    color_output "2. 关闭 IPv6"
    color_output "0. 返回主菜单"
    
    read -p "请输入选择 [0-2]: " ipv6_choice
    
    case "$ipv6_choice" in
        1)
            # 开启 IPv6
            # RA 服务设置为服务模式
            uci set dhcp.lan.ra='server'
            # DHCPv6 服务设置为服务模式
            uci set dhcp.lan.dhcpv6='server'
            # IPv6 分配长度设置为64
            uci set dhcp.lan.ndp='64'
            # 取消过滤 IPv6 AAAA 记录
            uci set dhcp.@dnsmasq[0].filter_aaaa='0'
            # 保存设置
            uci commit dhcp
            
            # 重启相关服务（重定向输出）
            /etc/init.d/odhcpd restart >/dev/null 2>&1
            /etc/init.d/dnsmasq restart >/dev/null 2>&1
            
            color_output "\e[32mIPv6 已开启！\e[0m"
            color_output "\e[32m- RA 服务: 服务模式\e[0m"
            color_output "\e[32m- DHCPv6 服务: 服务模式\e[0m"
            color_output "\e[32m- IPv6 分配长度: 64\e[0m"
            color_output "\e[32m- IPv6 AAAA 记录过滤: 已关闭\e[0m"
            ;;
            
        2)
            # 关闭 IPv6
            # RA 服务设置为已禁用
            uci set dhcp.lan.ra='disabled'
            # DHCPv6 服务设置为已禁用
            uci set dhcp.lan.dhcpv6='disabled'
            # IPv6 分配长度设置为已禁用
            uci set dhcp.lan.ndp='disabled'
            # 开启过滤 IPv6 AAAA 记录
            uci set dhcp.@dnsmasq[0].filter_aaaa='1'
            # 保存设置
            uci commit dhcp
            
            # 重启相关服务（重定向输出）
            /etc/init.d/odhcpd restart >/dev/null 2>&1
            /etc/init.d/dnsmasq restart >/dev/null 2>&1
            
            color_output "\e[32mIPv6 已关闭！\e[0m"
            color_output "\e[32m- RA 服务: 已禁用\e[0m"
            color_output "\e[32m- DHCPv6 服务: 已禁用\e[0m"
            color_output "\e[32m- IPv6 分配长度: 已禁用\e[0m"
            color_output "\e[32m- IPv6 AAAA 记录过滤: 已开启\e[0m"
            ;;
            
        0)
            show_menu
            return
            ;;
            
        *)
            color_output "\e[31m无效选择\e[0m"
            ;;
    esac
    
    sleep 2
    read -p "按 Enter 键返回菜单..."
    show_menu
}

# 8. IstoreOS 风格化
istore_style() {
    while true; do
        clear
        color_output "\e[34m[IstoreOS 风格化]\e[0m"
        color_output "\e[36m┏━━━━━━━━━━━━━━━ 风格化选项 ━━━━━━━━━━━━━━━┓\e[0m"
        color_output "\e[36m┃                                        ┃\e[0m"
        color_output "\e[36m┃\e[0m  1. 安装 iStore 商店                   \e[36m┃\e[0m"
        color_output "\e[36m┃\e[0m  2. 安装网络向导和首页                 \e[36m┃\e[0m"
        color_output "\e[36m┃\e[0m  0. 返回主菜单                         \e[36m┃\e[0m"
        color_output "\e[36m┃                                        ┃\e[0m"
        color_output "\e[36m┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛\e[0m"
        
        read -p "$(color_output "\e[33m请输入您的选择 [0-2]: \e[0m")" style_choice

        case "$style_choice" in
            1)
                color_output "\e[34m[安装 iStore 商店]\e[0m"
                wget -qO imm.sh https://git.kejizero.online/zhao/files/raw/branch/main/%20Script/iStoreOS/install.sh && chmod +x install.sh && ./install.sh
                color_output "\e[32miStore 商店安装完成\e[0m"
                read -p "按 Enter 键继续..."
                ;;
            2)
                color_output "\e[34m[安装网络向导和首页]\e[0m"
                is-opkg install luci-i18n-quickstart-zh-cn
                color_output "\e[32m网络向导和首页安装完成\e[0m"
                read -p "按 Enter 键继续..."
                ;;
            0)
                show_menu
                return
                ;;
            *)
                color_output "\e[31m无效选项，请重新选择\e[0m"
                sleep 2
                ;;
        esac
    done
}

# 9. 检测更新
check_update() {
    color_output "\e[34m[检测更新]\e[0m"
    color_output "正在检查更新..."
    
    # 检查 wget 是否安装
    if ! command -v wget >/dev/null 2>&1; then
        color_output "\e[33m正在安装 wget...\e[0m"
        opkg update && opkg install wget
    fi
    
    # 创建临时目录
    local temp_dir="/tmp/zerowrt_update"
    mkdir -p "$temp_dir"
    
    # 下载远程版本文件
    if ! wget -q "https://git.kejizero.online/zhao/files/raw/branch/main/bin/version.txt" -O "$temp_dir/version.txt"; then
        color_output "\e[31m无法连接到更新服务器。\e[0m"
        rm -rf "$temp_dir"
        read -p "按 Enter 键返回菜单..."
        show_menu
        return
    fi
    
    # 获取本地版本和远程版本
    local_version=$(cat /root/version.txt 2>/dev/null || echo "0")
    remote_version=$(cat "$temp_dir/version.txt" 2>/dev/null || echo "0")
    
    # 比较版本
    if [ "$local_version" != "$remote_version" ]; then
        color_output "\e[33m发现新版本：$remote_version\e[0m"
        color_output "\e[33m当前版本：$local_version\e[0m"
        read -p "是否更新到最新版本？(y/n): " confirm
        if [[ "$confirm" == "y" || "$confirm" == "Y" ]]; then
            color_output "开始下载更新..."
            
            # 下载新版本到临时文件
            if wget -q "https://git.kejizero.online/zhao/files/raw/branch/main/bin/ZeroWrt" -O "$temp_dir/ZeroWrt.new"; then
                # 检查文件是否为有效的 shell 脚本
                if head -n1 "$temp_dir/ZeroWrt.new" | grep -q "^#!/bin/bash"; then
                    # 备份当前版本
                    cp /bin/ZeroWrt /bin/ZeroWrt.bak 2>/dev/null
                    
                    # 安装新版本
                    mv "$temp_dir/ZeroWrt.new" /bin/ZeroWrt
                    chmod +x /bin/ZeroWrt
                    
                    # 更新版本文件
                    echo "$remote_version" > /root/version.txt
                    
                    color_output "\e[32m更新成功！\e[0m"
                    color_output "\e[32m已备份原版本为 /bin/ZeroWrt.bak\e[0m"
                    color_output "\e[32m请重新运行脚本以应用更新。\e[0m"
                    
                    # 清理并退出
                    rm -rf "$temp_dir"
                    exit 0
                else
                    color_output "\e[31m下载的文件格式不正确。\e[0m"
                fi
            else
                color_output "\e[31m更新下载失败。\e[0m"
            fi
        else
            color_output "\e[32m已取消更新。\e[0m"
        fi
    else
        color_output "\e[32m当前已是最新版本：$local_version\e[0m"
    fi
    
    # 清理临时文件
    rm -rf "$temp_dir"
    read -p "按 Enter 键返回菜单..."
    show_menu
} 

# 启动菜单
print_header
show_menu