clash-for-linux/clashctl

#!/usr/bin/env bash
set -euo pipefail

resolve_project_dir() {
  # 1) 显式指定优先
  if [ -n "${CLASH_INSTALL_DIR:-}" ] && [ -d "${CLASH_INSTALL_DIR:-}" ]; then
    printf '%s\n' "$CLASH_INSTALL_DIR"
    return 0
  fi

  # 2) 解析脚本真实路径（兼容软链/安装到 /usr/local/bin）
  local src dir
  src="${BASH_SOURCE[0]}"

  while [ -L "$src" ]; do
    dir="$(cd -P "$(dirname "$src")" && pwd)"
    src="$(readlink "$src")"
    [[ "$src" != /* ]] && src="$dir/$src"
  done

  dir="$(cd -P "$(dirname "$src")" && pwd)"

  # 如果 clashctl 就在项目根目录
  if [ -f "$dir/scripts/service_lib.sh" ]; then
    printf '%s\n' "$dir"
    return 0
  fi

  # 3) 常见安装目录兜底
  for candidate in \
    "/opt/clash-for-linux" \
    "$HOME/clash-for-linux" \
    "/root/clash-for-linux"
  do
    if [ -f "$candidate/scripts/service_lib.sh" ]; then
      printf '%s\n' "$candidate"
      return 0
    fi
  done

  echo "[ERROR] Unable to locate project directory" >&2
  exit 1
}

PROJECT_DIR="$(resolve_project_dir)"
SERVICE_NAME="clash-for-linux.service"
PROFILED_FILE="/etc/profile.d/clash-for-linux.sh"
ENV_FILE="$PROJECT_DIR/.env"
RUNTIME_DIR="$PROJECT_DIR/runtime"
RUNTIME_CONFIG="$RUNTIME_DIR/config.yaml"
STATE_FILE="$RUNTIME_DIR/state.env"
LOG_FILE="$PROJECT_DIR/logs/clash.log"

# shellcheck disable=SC1091
source "$PROJECT_DIR/scripts/service_lib.sh"

log()   { printf "%b\n" "$*"; }
info()  { log "\033[36m[INFO]\033[0m $*"; }
ok()    { log "\033[32m[OK]\033[0m $*"; }
warn()  { log "\033[33m[WARN]\033[0m $*"; }
err()   { log "\033[31m[ERROR]\033[0m $*"; }

usage() {
  cat <<'EOF'
Usage:
  clashctl COMMAND [OPTIONS]

Core Commands:
  on                     开启当前终端代理
  off                    关闭当前终端代理
  start                  启动 Clash
  stop                   停止 Clash
  restart                重新生成配置并重启
  status                 查看当前状态
  update                 git pull + 生成配置 + 重启
  generate               仅生成配置，不启动
  mode                   查看当前运行模式（systemd/script/none）

Utility Commands:
  ui                     输出 Dashboard 地址
  secret                 输出当前 secret
  sub show               查看订阅地址
  sub update             重新生成配置并重启
  tun status|on|off      查看/启用/关闭 Tun
  mixin status|on|off    查看/启用/关闭 Mixin
  doctor                 健康检查
  logs [-f] [-n 100]     查看日志

Options:
  --from-systemd         内部使用，避免 stop 递归调用 systemctl
  -h, --help             显示帮助信息

Examples:
  clashctl on
  clashctl off
  clashctl start
  clashctl stop
  clashctl restart
  clashctl status
  clashctl update
  clashctl generate
  clashctl ui
  clashctl secret
  clashctl sub show
  clashctl tun on
EOF
}

require_profiled() {
  if [ ! -f "$PROFILED_FILE" ]; then
    err "未安装 Shell 代理快捷命令：$PROFILED_FILE"
    exit 1
  fi
}

read_runtime_config_value() {
  local key="$1"
  [ -f "$RUNTIME_CONFIG" ] || return 1

  sed -nE "s/^[[:space:]]*${key}:[[:space:]]*//p" "$RUNTIME_CONFIG" \
    | head -n 1 \
    | tr -d '\r' \
    | sed -E 's/^"(.*)"$/\1/; s/^'\''(.*)'\''$/\1/'
}

write_env_bool() {
  local key="$1"
  local value="$2"

  if [ ! -f "$ENV_FILE" ]; then
    err "未找到 .env: $ENV_FILE"
    exit 1
  fi

  if grep -qE "^[[:space:]]*(export[[:space:]]+)?${key}=" "$ENV_FILE"; then
    sed -i -E "s|^[[:space:]]*(export[[:space:]]+)?${key}=.*$|export ${key}=\"${value}\"|g" "$ENV_FILE"
  else
    echo "export ${key}=\"${value}\"" >> "$ENV_FILE"
  fi
}

read_state_value() {
  local key="$1"
  [ -f "$STATE_FILE" ] || return 1
  sed -nE "s/^${key}=(.*)$/\1/p" "$STATE_FILE" | head -n 1
}

cmd_on() {
  require_profiled
  # shellcheck disable=SC1090
  source "$PROFILED_FILE"
  proxy_on
}

cmd_off() {
  require_profiled
  # shellcheck disable=SC1090
  source "$PROFILED_FILE"
  proxy_off
}

cmd_mode() {
  detect_mode
}

cmd_start() {
	local mode
	mode="$(detect_mode)"

	case "$mode" in
	systemd|systemd-installed)
		start_via_systemd
		ok "Clash started via systemd"
		;;
	script|none)
		start_via_script
		;;
	*)
		err "未知模式: $mode"
		exit 1
		;;
	esac
}

cmd_stop() {
  local from_systemd="${1:-false}"
  local mode
  mode="$(detect_mode)"

  case "$mode" in
    systemd)
      if [ "$from_systemd" = "true" ]; then
        # 被 systemd ExecStop 调用时，不能再反向 systemctl stop 自己
        ok "Stop requested from systemd, skip recursive systemctl stop"
        exit 0
      fi
      stop_via_systemd
      ok "Clash stopped via systemd"
      ;;
    script)
      stop_via_script
      ok "Clash stopped via script mode"
      ;;
    none)
      info "Clash is not running"
      ;;
    *)
      err "未知模式: $mode"
      exit 1
      ;;
  esac
}

cmd_generate() {
  "$PROJECT_DIR/scripts/generate_config.sh"
  ok "Config generated"
}

cmd_restart() {
	"$PROJECT_DIR/scripts/generate_config.sh"

	local mode
	mode="$(detect_mode)"

	case "$mode" in
	systemd|systemd-installed)
		restart_via_systemd
		ok "Clash restarted via systemd"
		;;
	script|none)
		restart_via_script
		ok "Clash restarted via script mode"
		;;
	*)
		err "未知模式: $mode"
		exit 1
		;;
	esac
}

cmd_update() {
  git -C "$PROJECT_DIR" pull
  "$PROJECT_DIR/scripts/generate_config.sh"

  local mode
  mode="$(detect_mode)"

  case "$mode" in
    systemd)
      restart_via_systemd
      ok "Project updated and restarted via systemd"
      ;;
    script|none)
      restart_via_script
      ok "Project updated and restarted via script mode"
      ;;
    *)
      err "未知模式: $mode"
      exit 1
      ;;
  esac
}

cmd_status() {
  local mode running="no"

  mode="$(detect_mode)"

  case "$mode" in
    systemd)
      if systemctl is-active --quiet "$SERVICE_NAME"; then
        running="yes"
      fi
      ;;
    script)
      if is_script_running; then
        running="yes"
      fi
      ;;
    none)
      running="no"
      ;;
  esac

  echo "=== Clash Status ==="
  echo "Mode       : $mode"
  echo "Running    : $running"
  echo "Config     : $RUNTIME_CONFIG"

  if [ "$mode" = "systemd" ] && service_unit_exists; then
    echo "Service    : installed"
    echo "Active     : $(systemctl is-active "$SERVICE_NAME" 2>/dev/null || true)"
    echo "Enabled    : $(systemctl is-enabled "$SERVICE_NAME" 2>/dev/null || true)"
  fi

  if [ "$mode" = "script" ]; then
    local pid
    pid="$(read_pid 2>/dev/null || true)"
    echo "PID        : ${pid:-unknown}"
  fi

  if [ -f "$STATE_FILE" ]; then
    echo "LastStatus : $(read_state_value LAST_GENERATE_STATUS || true)"
    echo "LastReason : $(read_state_value LAST_GENERATE_REASON || true)"
    echo "LastSource : $(read_state_value LAST_CONFIG_SOURCE || true)"
    echo "LastAt     : $(read_state_value LAST_GENERATE_AT || true)"
  fi

  local controller
  controller="$(read_runtime_config_value "external-controller" || true)"
  if [ -n "${controller:-}" ]; then
    echo "Dashboard  : $(cmd_ui --raw)"
  fi
}

doctor_ok() {
  printf "\033[32m[OK]\033[0m %s\n" "$*"
}

doctor_warn() {
  printf "\033[33m[WARN]\033[0m %s\n" "$*"
}

doctor_err() {
  printf "\033[31m[ERROR]\033[0m %s\n" "$*"
}

command_exists() {
  command -v "$1" >/dev/null 2>&1
}

port_from_controller() {
  local controller
  controller="$(read_runtime_config_value "external-controller" || true)"
  if [ -n "${controller:-}" ]; then
    printf '%s\n' "${controller##*:}"
  else
    printf '9090\n'
  fi
}

http_port_from_config() {
  local v

  v="$(read_runtime_config_value "mixed-port" || true)"
  if [ -n "${v:-}" ]; then
    printf '%s\n' "$v"
    return 0
  fi

  v="$(read_runtime_config_value "port" || true)"
  if [ -n "${v:-}" ]; then
    printf '%s\n' "$v"
    return 0
  fi

  printf '7890\n'
}

check_port_listening() {
  local port="$1"

  if command_exists ss; then
    ss -lnt 2>/dev/null | awk '{print $4}' | grep -Eq "[:.]${port}$"
    return $?
  elif command_exists netstat; then
    netstat -lnt 2>/dev/null | awk '{print $4}' | grep -Eq "[:.]${port}$"
    return $?
  fi

  return 2
}

check_dashboard_http() {
  local url="$1"

  if command_exists curl; then
    curl -fsS --max-time 3 "$url" >/dev/null 2>&1
    return $?
  elif command_exists wget; then
    wget -q -T 3 -O /dev/null "$url" >/dev/null 2>&1
    return $?
  fi

  return 2
}

cmd_ui() {
  local raw="${1:-}"
  local controller host port

  controller="$(read_runtime_config_value "external-controller" || true)"
  [ -n "${controller:-}" ] || controller="127.0.0.1:9090"

  host="${controller%:*}"
  port="${controller##*:}"

  case "$host" in
    0.0.0.0|::|localhost)
      host="$(hostname -I 2>/dev/null | awk '{print $1}')"
      [ -n "${host:-}" ] || host="127.0.0.1"
      ;;
  esac

  if [ "$raw" = "--raw" ]; then
    printf 'http://%s:%s/ui\n' "$host" "$port"
    return 0
  fi

  echo "Dashboard URL:"
  printf 'http://%s:%s/ui\n' "$host" "$port"
}

cmd_secret() {
  local secret
  secret="$(read_runtime_config_value "secret" || true)"
  if [ -n "${secret:-}" ]; then
    echo "$secret"
  else
    err "未读取到 secret"
    exit 1
  fi
}

cmd_sub() {
  local subcmd="${1:-show}"

  case "$subcmd" in
    show)
      if [ -f "$ENV_FILE" ]; then
        grep -E '^[[:space:]]*(export[[:space:]]+)?CLASH_URL=' "$ENV_FILE" || echo "CLASH_URL=未配置"
      else
        err "未找到 .env"
        exit 1
      fi
      ;;
    update)
      cmd_restart
      ;;
    *)
      err "未知 sub 子命令: $subcmd"
      echo "用法: clashctl sub [show|update]"
      exit 1
      ;;
  esac
}

cmd_tun() {
  local subcmd="${1:-status}"

  case "$subcmd" in
    status)
      if [ -f "$ENV_FILE" ]; then
        grep -E '^[[:space:]]*(export[[:space:]]+)?CLASH_TUN=' "$ENV_FILE" || echo 'CLASH_TUN=未配置'
      else
        err "未找到 .env"
        exit 1
      fi
      ;;
    on)
      write_env_bool "CLASH_TUN" "true"
      ok "已写入 CLASH_TUN=true"
      ;;
    off)
      write_env_bool "CLASH_TUN" "false"
      ok "已写入 CLASH_TUN=false"
      ;;
    *)
      err "未知 tun 子命令: $subcmd"
      echo "用法: clashctl tun [status|on|off]"
      exit 1
      ;;
  esac
}

cmd_mixin() {
  local subcmd="${1:-status}"

  case "$subcmd" in
    status)
      if [ -f "$ENV_FILE" ]; then
        grep -E '^[[:space:]]*(export[[:space:]]+)?CLASH_MIXIN=' "$ENV_FILE" || echo 'CLASH_MIXIN=未配置'
      else
        err "未找到 .env"
        exit 1
      fi
      ;;
    on)
      write_env_bool "CLASH_MIXIN" "true"
      ok "已写入 CLASH_MIXIN=true"
      ;;
    off)
      write_env_bool "CLASH_MIXIN" "false"
      ok "已写入 CLASH_MIXIN=false"
      ;;
    *)
      err "未知 mixin 子命令: $subcmd"
      echo "用法: clashctl mixin [status|on|off]"
      exit 1
      ;;
  esac
}

cmd_doctor() {
  local mode running="no"
  local failed=0
  local warned=0

  local controller dashboard_url dashboard_port
  local http_port
  local secret
  local last_generate_status last_generate_reason last_config_source

  mode="$(detect_mode)"

  echo "=== Clash Doctor ==="
  echo "Project    : $PROJECT_DIR"
  echo "Mode       : $mode"
  echo "Config     : $RUNTIME_CONFIG"
  echo

  # 1. 检查运行配置是否存在
  if [ -s "$RUNTIME_CONFIG" ]; then
    doctor_ok "runtime config exists: $RUNTIME_CONFIG"
  else
    doctor_err "runtime config missing or empty: $RUNTIME_CONFIG"
    failed=1
  fi

  # 2. 检查配置里是否还有未渲染占位符
  if [ -f "$RUNTIME_CONFIG" ]; then
    if grep -q '\${' "$RUNTIME_CONFIG"; then
      doctor_err "runtime config contains unresolved placeholders"
      failed=1
    else
      doctor_ok "runtime config has no unresolved placeholders"
    fi
  fi

  # 3. 检查 state.env
  if [ -f "$STATE_FILE" ]; then
    doctor_ok "state file exists: $STATE_FILE"

    last_generate_status="$(read_state_value LAST_GENERATE_STATUS || true)"
    last_generate_reason="$(read_state_value LAST_GENERATE_REASON || true)"
    last_config_source="$(read_state_value LAST_CONFIG_SOURCE || true)"

    if [ -n "${last_generate_status:-}" ]; then
      if [ "$last_generate_status" = "success" ]; then
        doctor_ok "last generate status: success (${last_generate_reason:-unknown})"
      else
        doctor_warn "last generate status: ${last_generate_status:-unknown} (${last_generate_reason:-unknown})"
        warned=1
      fi
    else
      doctor_warn "state file exists but LAST_GENERATE_STATUS is empty"
      warned=1
    fi

    if [ -n "${last_config_source:-}" ]; then
      doctor_ok "config source: $last_config_source"
    fi
  else
    doctor_warn "state file missing: $STATE_FILE"
    warned=1
  fi

  # 4. 检查运行模式 / 进程状态
  case "$mode" in
    systemd)
      if systemctl is-active --quiet "$SERVICE_NAME"; then
        running="yes"
        doctor_ok "systemd service is active"
      else
        doctor_err "systemd service is installed but not active"
        failed=1
      fi
      ;;
    script)
      if is_script_running; then
        running="yes"
        doctor_ok "script mode process is running (pid=$(read_pid 2>/dev/null || echo unknown))"
      else
        doctor_err "script mode detected but PID is not running"
        failed=1
      fi
      ;;
    systemd-installed)
      doctor_warn "systemd unit exists but service is not running"
      warned=1
      ;;
    none)
      doctor_warn "no running instance detected"
      warned=1
      ;;
    *)
      doctor_err "unknown mode: $mode"
      failed=1
      ;;
  esac

  # 5. 检查 dashboard 地址
  dashboard_url="$(cmd_ui --raw 2>/dev/null || true)"
  controller="$(read_runtime_config_value "external-controller" || true)"
  dashboard_port="$(port_from_controller)"

  if [ -n "${controller:-}" ]; then
    doctor_ok "external-controller configured: $controller"
  else
    doctor_warn "external-controller not found in runtime config, fallback assumed: 127.0.0.1:9090"
    warned=1
  fi

  if [ -n "${dashboard_url:-}" ]; then
    doctor_ok "dashboard url: $dashboard_url"
  else
    doctor_warn "dashboard url could not be derived"
    warned=1
  fi

  # 6. 检查 HTTP 代理端口
  http_port="$(http_port_from_config)"
  if check_port_listening "$http_port"; then
    doctor_ok "proxy port is listening: $http_port"
  else
    rc=$?
    if [ "$rc" -eq 2 ]; then
      doctor_warn "cannot verify proxy port (ss/netstat not available)"
      warned=1
    else
      if [ "$running" = "yes" ]; then
        doctor_err "proxy port is not listening: $http_port"
        failed=1
      else
        doctor_warn "proxy port is not listening: $http_port"
        warned=1
      fi
    fi
  fi

  # 7. 检查 dashboard 端口
  if check_port_listening "$dashboard_port"; then
    doctor_ok "dashboard port is listening: $dashboard_port"
  else
    rc=$?
    if [ "$rc" -eq 2 ]; then
      doctor_warn "cannot verify dashboard port (ss/netstat not available)"
      warned=1
    else
      if [ "$running" = "yes" ]; then
        doctor_err "dashboard port is not listening: $dashboard_port"
        failed=1
      else
        doctor_warn "dashboard port is not listening: $dashboard_port"
        warned=1
      fi
    fi
  fi

  # 8. 检查 dashboard HTTP 可访问性
  if [ -n "${dashboard_url:-}" ]; then
    if check_dashboard_http "$dashboard_url"; then
      doctor_ok "dashboard http reachable"
    else
      rc=$?
      if [ "$rc" -eq 2 ]; then
        doctor_warn "cannot verify dashboard http (curl/wget not available)"
        warned=1
      else
        doctor_warn "dashboard http not reachable: $dashboard_url"
        warned=1
      fi
    fi
  fi

  # 9. 检查 secret
  secret="$(read_runtime_config_value "secret" || true)"
  if [ -n "${secret:-}" ]; then
    doctor_ok "secret exists in runtime config"
  else
    doctor_warn "secret missing in runtime config"
    warned=1
  fi

  # 10. 检查 clashctl 安装位置（可选）
  if command_exists clashctl; then
    doctor_ok "clashctl command available: $(command -v clashctl)"
  else
    doctor_warn "clashctl command not found in PATH"
    warned=1
  fi

  # 11. 检查代理快捷函数文件
  if [ -f "$PROFILED_FILE" ]; then
    doctor_ok "shell proxy helper exists: $PROFILED_FILE"
  else
    doctor_warn "shell proxy helper missing: $PROFILED_FILE"
    warned=1
  fi

  echo
  if [ "$failed" -ne 0 ]; then
    doctor_err "doctor result: FAILED"
    return 1
  fi

  if [ "$warned" -ne 0 ]; then
    doctor_warn "doctor result: WARN"
    return 0
  fi

  doctor_ok "doctor result: HEALTHY"
  return 0
}

cmd_logs() {
  local follow="false"
  local lines="50"
  local mode
  local arg

  shift || true

  while [ $# -gt 0 ]; do
    arg="$1"
    case "$arg" in
      -f|--follow)
        follow="true"
        ;;
      -n|--lines)
        shift || true
        if [ $# -eq 0 ]; then
          err "logs: -n/--lines 需要一个数字参数"
          exit 1
        fi
        lines="$1"
        ;;
      *)
        err "未知 logs 参数: $arg"
        echo "用法: clashctl logs [-f] [-n 100]"
        exit 1
        ;;
    esac
    shift || true
  done

  mode="$(detect_mode)"

  case "$mode" in
    systemd|systemd-installed)
      if ! command -v journalctl >/dev/null 2>&1; then
        err "未找到 journalctl，无法读取 systemd 日志"
        exit 1
      fi

      if [ "$follow" = "true" ]; then
        journalctl -u "$SERVICE_NAME" -n "$lines" -f
      else
        journalctl -u "$SERVICE_NAME" -n "$lines" --no-pager
      fi
      ;;
    script|none)
      if [ ! -f "$LOG_FILE" ]; then
        warn "未找到日志文件: $LOG_FILE"
        exit 0
      fi

      if [ "$follow" = "true" ]; then
        tail -n "$lines" -f "$LOG_FILE"
      else
        tail -n "$lines" "$LOG_FILE"
      fi
      ;;
    *)
      err "未知模式: $mode"
      exit 1
      ;;
  esac
}

main() {
  local from_systemd="false"

  if [ "${1:-}" = "--from-systemd" ]; then
    from_systemd="true"
    shift
  fi

  case "${1:-}" in
    on)
      cmd_on
      ;;
    off)
      cmd_off
      ;;
    start)
      cmd_start
      ;;
    stop)
      cmd_stop "$from_systemd"
      ;;
    restart)
      cmd_restart
      ;;
    status)
      cmd_status
      ;;
    update)
      cmd_update
      ;;
    generate)
      cmd_generate
      ;;
    mode)
      cmd_mode
      ;;
    ui)
      shift || true
      cmd_ui "${1:-}"
      ;;
    secret)
      cmd_secret
      ;;
    sub)
      shift || true
      cmd_sub "${1:-show}"
      ;;
    tun)
      shift || true
      cmd_tun "${1:-status}"
      ;;
    mixin)
      shift || true
      cmd_mixin "${1:-status}"
      ;;
	doctor)
      cmd_doctor
      ;;
	logs)
      cmd_logs "$@"
      ;;
    ""|-h|--help)
      usage
      ;;
    *)
      err "未知命令: ${1:-}"
      usage
      exit 1
      ;;
  esac
}

main "$@"