graph TD
    subgraph Layer1["🔑 第一层：账号身份（Account Identity）"]
        AUTH["Authorization / x-api-key"]
        ACCT["account_uuid"]
        ORG["organization_uuid"]
        EMAIL["email"]
    end
    subgraph Layer2["💻 第二层：设备身份（Device Identity）"]
        DID["device_id"]
        UID["user.id (OTel)"]
        GBID["GrowthBook id / deviceID"]
        DDBUCKET["Datadog userBucket"]
    end
    subgraph Layer3["🔄 第三层：会话身份（Session Identity）"]
        SID["session_id"]
        XSID["X-Claude-Code-Session-Id"]
        GBSID["GrowthBook sessionId"]
        OTELSID["OTel session.id"]
    end
    PERSIST["getOrCreateUserID()"] --> DID
    PERSIST --> UID
    PERSIST --> GBID
    PERSIST -.->|SHA256 slice| DDBUCKET
    OAUTH["getOauthAccountInfo()"] --> ACCT
    OAUTH --> ORG
    OAUTH --> EMAIL
    SESSINIT["getSessionId() → randomUUID()"] --> SID
    SESSINIT --> XSID
    SESSINIT --> GBSID
    SESSINIT --> OTELSID
    style Layer1 fill:#1a1a2e,stroke:#e94560,color:#eee
    style Layer2 fill:#1a1a2e,stroke:#0f3460,color:#eee
    style Layer3 fill:#1a1a2e,stroke:#16213e,color:#eee

flowchart LR
    subgraph Source["源头"]
        S1["getOrCreateUserID()"]
        S2["getOauthAccountInfo()"]
        S3["getSessionId()"]
        S4["getAttributionHeader()"]
        S5["getUserAgent()"]
    end
    subgraph Sinks["上传终点"]
        S1 --> D1["device_id"]
        S1 --> D2["metadata.user_id.device_id"]
        S1 --> D3["GrowthBook id/deviceID"]
        S1 --> D4["OTel user.id"]
        S1 -.->|SHA256 truncate| D5["Datadog userBucket"]
        S2 --> A1["account_uuid"]
        S2 --> A2["organization_uuid"]
        S2 --> A3["email"]
        S2 --> A4["OTel user.account_uuid"]
        S2 --> A5["GrowthBook accountUUID/orgUUID"]
        S2 --> A6["OTel organization.id"]
        S3 --> SE1["session_id"]
        S3 --> SE2["X-Claude-Code-Session-Id"]
        S3 --> SE3["GrowthBook sessionId"]
        S3 --> SE4["OTel session.id"]
        S3 --> SE5["1P event session_id"]
        S4 --> AT1["x-anthropic-billing-header"]
        S4 --> AT2["cc_version / cc_entrypoint"]
        S4 --> AT3["cc_workload"]
        S4 --> AT4["cch attestation"]
        S5 --> UA1["User-Agent"]
        S5 --> UA2["x-app"]
        S5 --> UA3["x-client-app"]
    end
    style Source fill:#0d1117,stroke:#58a6ff,color:#c9d1d9
    style Sinks fill:#0d1117,stroke:#3fb950,color:#c9d1d9

graph TB
    subgraph Line1["🛡️ 第一防线：客户端真伪校验"]
        CCH["cch attestation<br/>服务端验证令牌"]
        BILLING["x-anthropic-billing-header<br/>归因文本块"]
        UA["User-Agent<br/>客户端画像串"]
    end
    subgraph Line2["🔍 第二防线：会话行为关联"]
        SESS["session_id 链路<br/>跨服务串联"]
        REQ["x-client-request-id<br/>单请求追踪"]
    end
    subgraph Line3["🌍 第三防线：环境异常检测"]
        REMOTE["remote-container-id<br/>remote-session-id"]
        ENV["platform / terminal<br/>arch / node_version"]
        PROXY["apiBaseUrlHost<br/>代理/网关识别"]
    end
    subgraph Line4["📊 第四防线：行为画像"]
        PROJ["project_file_count<br/>项目规模"]
        TOOLS["MCP tools/servers<br/>工具生态"]
        MODE["permissionMode<br/>thinkingType"]
        RH["rh (repo hash)<br/>仓库指纹"]
    end
    Line1 --> Line2 --> Line3 --> Line4
    style Line1 fill:#1a1a2e,stroke:#e94560,color:#eee
    style Line2 fill:#1a1a2e,stroke:#f39c12,color:#eee
    style Line3 fill:#1a1a2e,stroke:#3498db,color:#eee
    style Line4 fill:#1a1a2e,stroke:#2ecc71,color:#eee

flowchart TD
    CLIENT["Claude Code Client"]
    CLIENT --> P1["📡 管线 1: 主 API 请求<br/>(messages endpoint)"]
    CLIENT --> P2["📊 管线 2: 1P 事件日志<br/>(First-Party Event Logger)"]
    CLIENT --> P3["🧪 管线 3: GrowthBook<br/>(实验分流 + 事件)"]
    CLIENT --> P4["📈 管线 4: Standard OTel<br/>(Metrics / Logs / Traces)"]
    CLIENT --> P5["🔬 管线 5: Beta Tracing<br/>(Enhanced Telemetry)"]
    P1 --> T1["Anthropic API Server"]
    P2 --> T2["Anthropic 1P Backend"]
    P3 --> T3["GrowthBook Service"]
    P4 --> T4["Customer OTLP Endpoint"]
    P5 --> T5["BETA_TRACING_ENDPOINT"]
    P2 -.-> DD["Datadog (fanout sink)"]
    P2 -.-> BQ["BigQuery Metrics"]
    style P1 fill:#e94560,stroke:#e94560,color:#fff
    style P2 fill:#f39c12,stroke:#f39c12,color:#fff
    style P3 fill:#2ecc71,stroke:#2ecc71,color:#fff
    style P4 fill:#3498db,stroke:#3498db,color:#fff
    style P5 fill:#9b59b6,stroke:#9b59b6,color:#fff

quadrantChart
    title 字段可控性 vs 身份关联强度
    x-axis "低身份关联" --> "高身份关联"
    y-axis "不可关闭" --> "可关闭"
    "project_file_count": [0.15, 0.75]
    "mcp_tools_count": [0.2, 0.7]
    "userBucket": [0.3, 0.8]
    "attribution header": [0.45, 0.85]
    "cch attestation": [0.5, 0.8]
    "1P event logging": [0.55, 0.75]
    "GrowthBook events": [0.5, 0.7]
    "session.id (OTel)": [0.6, 0.65]
    "User-Agent": [0.4, 0.15]
    "x-app": [0.35, 0.1]
    "X-Claude-Code-Session-Id": [0.65, 0.12]
    "user.id": [0.75, 0.1]
    "Authorization": [0.95, 0.05]
    "account_uuid": [0.9, 0.08]
    "device_id": [0.85, 0.1]
    "messages body": [0.7, 0.05]

# 用户以为关闭了遥测，但实际没生效：
export CLAUDE_CODE_ENABLE_TELEMETRY=""    # ❌ 空字符串不算"关闭"
export CLAUDE_CODE_ENABLE_TELEMETRY=0     # ❌ "0"不算 truthy，但这里本来就是 opt-in
# 用户以为关闭了归因头，但实际没生效：
export CLAUDE_CODE_ATTRIBUTION_HEADER=""  # ❌ 空字符串不满足 isEnvDefinedFalsy
# 正确的关闭方式：
export DISABLE_TELEMETRY=1               # ✅ 非空即生效，关闭 1P/Datadog/GrowthBook
export CLAUDE_CODE_ATTRIBUTION_HEADER=0   # ✅ isEnvDefinedFalsy 匹配

sequenceDiagram
    participant Client as Claude Code Client
    participant Cache as 磁盘缓存
    participant Server as Anthropic Server
    participant BQ as BigQuery
    Client->>Cache: 检查 metrics_enabled 缓存
    alt 缓存命中且未过期
        Cache-->>Client: enabled: true (即使你刚设了 DISABLE)
        Client->>BQ: 继续上报 ⚠️
    else 缓存未命中或已过期
        Client->>Server: GET /api/claude_code/organizations/metrics_enabled
        Server-->>Client: enabled: false
        Client->>Cache: 写入 enabled: false
        Client->>BQ: 停止上报 ✅
    end

graph LR
    subgraph WHO["谁在用？"]
        W1["Authorization"]
        W2["x-api-key"]
        W3["account_uuid"]
        W4["organization_uuid"]
        W5["email"]
    end
    subgraph WHAT_DEVICE["哪台设备？"]
        D1["device_id"]
        D2["user.id"]
        D3["GrowthBook id"]
    end
    subgraph WHAT_SESSION["哪次会话？"]
        S1["session_id"]
        S2["X-Claude-Code-Session-Id"]
    end
    subgraph IS_LEGIT["是否合法客户端？"]
        L1["cch attestation"]
        L2["x-anthropic-billing-header"]
        L3["User-Agent"]
        L4["x-app / x-client-app"]
    end
    subgraph WHERE["运行环境？"]
        E1["apiBaseUrlHost"]
        E2["remote-container-id"]
        E3["platform / arch"]
        E4["rh (repo hash)"]
    end
    WHO ---|关联| WHAT_DEVICE
    WHAT_DEVICE ---|关联| WHAT_SESSION
    IS_LEGIT ---|辅助| WHO
    WHERE ---|辅助| WHAT_DEVICE
    style WHO fill:#e94560,stroke:#e94560,color:#fff
    style WHAT_DEVICE fill:#0f3460,stroke:#0f3460,color:#fff
    style WHAT_SESSION fill:#16213e,stroke:#16213e,color:#fff
    style IS_LEGIT fill:#f39c12,stroke:#f39c12,color:#fff
    style WHERE fill:#2ecc71,stroke:#2ecc71,color:#fff

# 1. 关闭内部分析链路（1P / Datadog / GrowthBook）
export DISABLE_TELEMETRY=1
# 2. 关闭非必要网络流量（更强的一层）
export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1
# 3. 关闭归因头（包括 cch）
export CLAUDE_CODE_ATTRIBUTION_HEADER=0
# 4. 确保 Standard OTel 不被启用
# （默认关闭，但如果之前开启过需要显式关）
unset CLAUDE_CODE_ENABLE_TELEMETRY
# 5. 确保 Beta Tracing 不被启用
unset ENABLE_BETA_TRACING_DETAILED
unset BETA_TRACING_ENDPOINT
# 6. 如果开启了 OTel，确保不上传正文
export OTEL_LOG_USER_PROMPTS=0
export OTEL_LOG_TOOL_DETAILS=0
export OTEL_LOG_TOOL_CONTENT=0