// src/config/mod.rs
use serde::Deserialize;

#[derive(Debug, Deserialize, Clone)]
pub struct Config {
    /// API Key（可从环境变量读取）
    #[serde(default)]
    pub api_key: Option<String>,
    
    /// 默认 Provider
    #[serde(default = "default_provider")]
    pub default_provider: String,
    
    /// 默认模型
    pub default_model: Option<String>,
    
    /// 记忆配置
    #[serde(default)]
    pub memory: MemoryConfig,
    
    /// 网关配置
    #[serde(default)]
    pub gateway: GatewayConfig,
    
    /// 权限配置
    #[serde(default)]
    pub autonomy: AutonomyConfig,
    
    /// 运行时配置
    #[serde(default)]
    pub runtime: RuntimeConfig,
    
    /// 渠道配置
    #[serde(default)]
    pub channels_config: HashMap<String, ChannelConfig>,
}

fn default_provider() -> String {
    "openrouter".to_string()
}

#[derive(Debug, Deserialize, Clone)]
pub struct MemoryConfig {
    #[serde(default = "default_memory_backend")]
    pub backend: String,
    
    #[serde(default = "true")]
    pub auto_save: bool,
    
    pub embedding_provider: Option<String>,
}

fn default_memory_backend() -> String {
    "sqlite".to_string()
}

#[derive(Debug, Deserialize, Clone)]
pub struct GatewayConfig {
    #[serde(default = "default_host")]
    pub host: String,
    
    #[serde(default = "default_port")]
    pub port: u16,
    
    #[serde(default)]
    pub require_pairing: bool,
    
    #[serde(default)]
    pub allow_public_bind: bool,
}

fn default_host() -> String {
    "127.0.0.1".to_string()
}

fn default_port() -> u16 {
    3000
}

// src/config/loader.rs
use config::{Config, ConfigError, Environment, File};

pub fn load_config(cli_path: Option<&Path>) -> Result<AppConfig, ConfigError> {
    let mut builder = Config::builder();
    
    // 1. 加载默认配置
    builder = builder.set_default("default_provider", "openrouter")?;
    
    // 2. 加载配置文件（优先级：命令行指定 > 默认路径）
    let config_path = cli_path
        .map(|p| p.to_path_buf())
        .or_else(|| dirs::config_dir().map(|d| d.join("zeroclaw/config.toml")));
        
    if let Some(path) = config_path {
        if path.exists() {
            builder = builder.add_source(File::from(path));
        }
    }
    
    // 3. 加载环境变量（ZEROCLAW_ 前缀）
    builder = builder.add_source(
        Environment::with_prefix("ZEROCLAW")
            .separator("_")
            .try_parsing(true)
    );
    
    // 4. 构建配置
    let config = builder.build()?;
    
    // 5. 反序列化为结构体
    config.try_deserialize::<AppConfig>()
}

// 环境变量命名规则
// ZEROCLAW_<SECTION>_<KEY>

// 示例：
ZEROCLAW_API_KEY=sk-xxx
ZEROCLAW_DEFAULT_PROVIDER=openai
ZEROCLAW_MEMORY_BACKEND=postgres
ZEROCLAW_GATEWAY_HOST=0.0.0.0
ZEROCLAW_GATEWAY_PORT=8080

// 数组使用逗号分隔
ZEROCLAW_AUTONOMY_ALLOWED_COMMANDS=git,ls,cat,grep

// src/commands/onboard.rs
pub async fn onboard() -> Result<()> {
    println!("🦀 欢迎使用 ZeroClaw！\n");
    
    // 1. 检查是否已配置
    if config_exists() {
        let overwrite = Confirm::new()
            .with_prompt("配置已存在，是否覆盖？")
            .default(false)
            .interact()?;
            
        if !overwrite {
            println!("保持现有配置");
            return Ok(());
        }
    }
    
    // 2. 配置 API Key
    let api_key = Text::new("请输入 API Key:")
        .with_help_message("可从 OpenRouter 或 OpenAI 获取")
        .with_validator(|input: &str| {
            if input.starts_with("sk-") || input.starts_with("sk-or-") {
                Ok(Validation::Valid)
            } else {
                Ok(Validation::Invalid("API Key 格式不正确".into()))
            }
        })
        .prompt()?;
        
    // 3. 选择 Provider
    let provider = Select::new(
        "选择 Provider:",
        vec!["openrouter", "openai", "anthropic", "ollama"],
    )
    .with_help_message("推荐使用 OpenRouter，支持多模型")
    .prompt()?;
    
    // 4. 测试连接
    print!("🔄 测试连接... ");
    io::stdout().flush()?;
    
    match test_provider_connection(&provider, &api_key).await {
        Ok(_) => {
            println!("✅ 成功！");
        }
        Err(e) => {
            println!("❌ 失败: {}", e);
            let continue_anyway = Confirm::new()
                .with_prompt("是否继续？")
                .default(false)
                .interact()?;
            if !continue_anyway {
                return Ok(());
            }
        }
    }
    
    // 5. 生成配置文件
    let config = format!(
        r#"# ZeroClaw 配置文件
# 生成时间: {}

api_key = "{}"
default_provider = "{}"

[memory]
backend = "sqlite"
auto_save = true
"#,
        Utc::now(),
        api_key,
        provider,
    );
    
    let config_dir = dirs::config_dir()
        .ok_or_else(|| anyhow!("无法找到配置目录"))?
        .join("zeroclaw");
        
    fs::create_dir_all(&config_dir).await?;
    fs::write(config_dir.join("config.toml"), config).await?;
    
    println!("\n✅ 配置完成！");
    println!("配置文件位置: {}", config_dir.join("config.toml").display());
    println!("\n接下来可以运行:");
    println!("  zeroclaw agent -m '你好'  # 测试对话");
    
    Ok(())
}

# /etc/systemd/system/zeroclaw.service
[Unit]
Description=ZeroClaw AI Agent
After=network.target

[Service]
Type=simple
User=zeroclaw
WorkingDirectory=/home/zeroclaw
ExecStart=/usr/local/bin/zeroclaw daemon
Restart=always
RestartSec=10
Environment=ZEROCLAW_CONFIG=/home/zeroclaw/.zeroclaw/config.toml

# 资源限制
MemoryLimit=512M
CPUQuota=50%

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable zeroclaw
sudo systemctl start zeroclaw
sudo systemctl status zeroclaw

# 最小配置 - 快速开始
api_key = "sk-your-api-key"
default_provider = "openrouter"

# 生产环境 - 安全第一
default_provider = "openrouter"
default_model = "anthropic/claude-sonnet-4"
default_temperature = 0.5

[memory]
backend = "sqlite"
auto_save = true
embedding_provider = "openai"

[gateway]
host = "127.0.0.1"
port = 3000
require_pairing = true
allow_public_bind = false

[autonomy]
level = "supervised"
workspace_only = true
allowed_commands = ["git", "ls", "cat", "grep"]

[runtime]
kind = "docker"

[runtime.docker]
image = "alpine:3.20"
network = "none"
memory_limit_mb = 512
read_only_rootfs = true

[secrets]
encrypt = true

# Dockerfile
FROM rust:1.75-alpine AS builder

RUN apk add --no-cache musl-dev openssl-dev

WORKDIR /app
COPY Cargo.toml Cargo.lock ./
COPY src ./src

RUN cargo build --release --target x86_64-unknown-linux-musl

# 运行时镜像
FROM alpine:3.19

RUN apk add --no-cache ca-certificates git

WORKDIR /app

# 复制二进制文件
COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/zeroclaw /usr/local/bin/

# 创建非 root 用户
RUN adduser -D -s /bin/sh zeroclaw
USER zeroclaw

# 工作目录
WORKDIR /home/zeroclaw

EXPOSE 3000

ENTRYPOINT ["zeroclaw"]
CMD ["daemon"]

# docker-compose.yml
version: '3.8'

services:
  zeroclaw:
    build: .
    container_name: zeroclaw
    restart: unless-stopped
    
    volumes:
      - ./config:/home/zeroclaw/.zeroclaw
      - ./workspace:/home/zeroclaw/workspace
      
    environment:
      - ZEROCLAW_API_KEY=${API_KEY}
      - RUST_LOG=info
      
    ports:
      - "127.0.0.1:3000:3000"  # 仅本地访问
      
    # 资源限制
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '1.0'

docker-compose up -d
docker-compose logs -f

# 验证配置文件格式
zeroclaw config validate

# 显示加载的配置（脱敏）
zeroclaw config show

# 测试 Provider 连接
zeroclaw provider test

# 测试渠道连接
zeroclaw channel test telegram

# 设置日志级别
RUST_LOG=debug zeroclaw agent -m "测试"

# 日志级别层次
error: 仅错误
warn:  警告和错误  
info:  一般信息（默认）
debug: 调试信息
trace: 最详细

# 模块特定日志
RUST_LOG=zeroclaw::agent=debug,zeroclaw::tools=trace