@echo off
REM ============================================================================
REM  nodeagent - one-click installer launcher (Windows)
REM
REM  Double-click this file. It will:
REM    1) self-elevate to Administrator (UAC prompt) if not already elevated
REM    2) make sure a pre-shared key exists in PSK.txt (generate one if absent)
REM    3) run install.ps1, which registers the scheduled task, opens the
REM       firewall and starts the agent
REM
REM  Usage:  install.cmd  [port]
REM          port defaults to 8765. Pass a port only when the default is taken.
REM
REM  IMPORTANT - why this file is pure ASCII:
REM    The CMD.exe code page (936/GBK on Chinese Windows) can NOT round-trip
REM    UTF-8 Chinese reliably. Any non-ASCII byte here risks mojibake or a
REM    broken command. All Chinese-facing text is delegated to install.ps1,
REM    which is saved as UTF-8 **with BOM** so Windows PowerShell 5.1 reads
REM    it correctly. Keep this launcher ASCII-only.
REM
REM  NOTE - install.ps1 MUST keep its UTF-8 BOM. PowerShell 5.1 parses
REM    BOM-less .ps1 as ANSI/GBK, and the Chinese comments then break the
REM    string boundaries -> a cascade of bogus syntax errors.
REM ============================================================================
setlocal EnableExtensions

set "HERE=%~dp0"
set "PS1=%HERE%install.ps1"
set "PSKFILE=%HERE%PSK.txt"
set "PORT=%~1"
if not defined PORT set "PORT=8765"

if not exist "%PS1%" (
  echo [x] install.ps1 not found next to this file.
  echo     Folder: "%HERE%"
  echo     Keep install.ps1, node.exe, agent.mjs and this launcher together.
  if not defined CI pause
  exit /b 1
)

REM --- 1) elevate to Administrator -------------------------------------------
REM fltmc is used instead of `net session` because the latter depends on the
REM Server service, which is disabled on some builds - that would make an
REM already-elevated shell look unelevated and trigger a pointless UAC loop.
fltmc >nul 2>&1
if errorlevel 1 (
  echo [*] Requesting Administrator rights...
  echo     A new window will open. Continue there; this one closes by itself.
  REM Start-Process re-launches this .cmd elevated. %PORT% (already resolved to
  REM its default) is forwarded so "install.cmd 18770" survives the elevation.
  powershell -NoProfile -ExecutionPolicy Bypass -Command ^
    "Start-Process -FilePath '%~f0' -ArgumentList '%PORT%' -Verb RunAs" >nul 2>&1
  if errorlevel 1 (
    echo [x] Elevation was declined - cannot register a scheduled task.
    if not defined CI pause
    exit /b 1
  )
  exit /b 0
)

REM --- 2) make sure the pre-shared key exists ---------------------------------
set "PSK="
if exist "%PSKFILE%" (
  REM Read + Trim in one shot: a stray CR from CRLF or an editor-added trailing
  REM space would otherwise end up inside -Key and break authentication.
  for /f "delims=" %%K in ('powershell -NoProfile -ExecutionPolicy Bypass -Command ^
    "if (Test-Path -LiteralPath '%PSKFILE%') { (Get-Content -LiteralPath '%PSKFILE%' -Raw).Trim() }"') do set "PSK=%%K"
)

if not defined PSK (
  echo [*] No usable PSK.txt found - generating a new pre-shared key...
  REM 32 random bytes via .NET, hex-encoded to 64 chars.
  for /f "delims=" %%K in ('powershell -NoProfile -ExecutionPolicy Bypass -Command ^
    "$b=New-Object byte[] 32; [System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($b); ($b ^| ForEach-Object { $_.ToString('x2') }) -join ''"') do set "PSK=%%K"

  if not defined PSK (
    echo [x] Failed to generate a key. Aborting.
    if not defined CI pause
    exit /b 1
  )
  REM Plain hex, no BOM: the file is read with `set /p` / Get-Content, and a
  REM leading U+FEFF would corrupt the first byte of the key.
  >"%PSKFILE%" echo %PSK%
  echo [+] New key written to "%PSKFILE%"
) else (
  echo [+] Using key from PSK.txt
)

REM --- 3) install -------------------------------------------------------------
echo.
echo [*] Installing nodeagent ^(node: %COMPUTERNAME%, port %PORT%, input control ON^)...
echo.

powershell -NoProfile -ExecutionPolicy Bypass -File "%PS1%" -NodeId "%COMPUTERNAME%" -Key "%PSK%" -AllowInput -Port %PORT%
set "RC=%ERRORLEVEL%"

echo.
if "%RC%"=="0" (
  echo [+] Done. The agent now starts automatically at every logon.
  echo     To manage it later, double-click control.cmd in this folder.
) else (
  echo [x] install.ps1 exited with code %RC%.
  echo     If the error mentions a missing file, re-extract the whole package.
  echo     If Windows Firewall or a security suite blocked something, allow it and retry.
)
echo.
REM Keep the window open so the user can read the output. CI sets CI=true,
REM where `pause` would hang forever waiting for a keypress.
if not defined CI pause
exit /b %RC%