CodexPortable.bat.bak

@echo off
setlocal enabledelayedexpansion
chcp 65001 >nul 2>&1
title Codex CLI Portable + CC Switch

REM Clear conflicting env vars from inherited environment
set "OPENAI_API_KEY="
set "OPENAI_BASE_URL="

REM Enable ANSI escape codes
for /F %%a in ('echo prompt $E ^| cmd') do set "ESC=%%a"

echo.
echo %ESC%[38;5;45m   ██████╗ ██████╗ ██████╗ ███████╗██╗  ██╗%ESC%[0m
echo %ESC%[38;5;45m  ██╔════╝██╔═══██╗██╔══██╗██╔════╝╚██╗██╔╝%ESC%[0m
echo %ESC%[38;5;33m  ██║     ██║   ██║██║  ██║█████╗   ╚███╔╝%ESC%[0m
echo %ESC%[38;5;33m  ██║     ██║   ██║██║  ██║██╔══╝   ██╔██╗%ESC%[0m
echo %ESC%[38;5;240m  ╚██████╗╚██████╔╝██████╔╝███████╗██╔╝ ██╗%ESC%[0m
echo %ESC%[38;5;240m   ╚═════╝ ╚═════╝ ╚═════╝ ╚══════╝╚═╝  ╚═╝%ESC%[0m
echo.
echo      Codex CLI Portable
echo.

set "SCRIPT_DIR=%~dp0"
set "BIN_DIR=%SCRIPT_DIR%bin\windows-x64"
set "PORTABLE_DATA=%SCRIPT_DIR%data"
set "PORTABLE_CCS=%PORTABLE_DATA%\.cc-switch"
set "PORTABLE_CODEX=%PORTABLE_DATA%\.codex"
set "LIB_DIR=%SCRIPT_DIR%lib"
set "LOCK_FILE=%PORTABLE_DATA%\.lock"
set "LOCK_FILE2=%PORTABLE_CCS%\.bind"
set "RUN_LOCK=%PORTABLE_DATA%\.running"

set "SCRIPT_DIR_PS=%SCRIPT_DIR%"
if "%SCRIPT_DIR_PS:~-1%"=="\" set "SCRIPT_DIR_PS=%SCRIPT_DIR_PS:~0,-1%"

set "SYS_CCS=%USERPROFILE%\.cc-switch"
set "SYS_CODEX=%USERPROFILE%\.codex"

if not exist "%BIN_DIR%\codex.exe" (
  echo [ERROR] Codex CLI not found: %BIN_DIR%\codex.exe
  pause
  exit /b 1
)

:: Handle --unlock
if /i "%~1"=="--unlock" goto :do_unlock
goto :after_unlock

:do_unlock
if exist "%LOCK_FILE%" del /f /q "%LOCK_FILE%" >nul 2>&1
if exist "%LOCK_FILE2%" del /f /q "%LOCK_FILE2%" >nul 2>&1
echo   [ok] Unlock complete. Next run will rebind to current location.
pause
exit /b 0

:after_unlock

:: Single-instance check (atomic via mkdir)
if not exist "%PORTABLE_DATA%" mkdir "%PORTABLE_DATA%" >nul 2>&1
if exist "%RUN_LOCK%" (
  set "PREV_PID="
  if exist "%RUN_LOCK%\pid" (
    for /f "usebackq delims=" %%P in ("%RUN_LOCK%\pid") do if not defined PREV_PID set "PREV_PID=%%P"
  )
  if defined PREV_PID (
    tasklist /fi "PID eq !PREV_PID!" 2>nul | find "!PREV_PID!" >nul
    if !errorlevel! EQU 0 (
      echo   [info] Another instance is already running (PID !PREV_PID!).
      timeout /t 5 >nul 2>&1
      exit /b 1
    )
  )
  rd /s /q "%RUN_LOCK%" >nul 2>&1
)
mkdir "%RUN_LOCK%" 2>nul
if !errorlevel! NEQ 0 (
  echo   [info] Another instance is already running (concurrent start).
  timeout /t 5 >nul 2>&1
  exit /b 1
)

:: Drive binding check (validate BOTH locks; any mismatch denies)
set "LOCK_PRESENT=0"
if exist "%LOCK_FILE%" set "LOCK_PRESENT=1"
if exist "%LOCK_FILE2%" set "LOCK_PRESENT=1"
if "!LOCK_PRESENT!"=="0" goto :binding_done
if not exist "%LIB_DIR%\binding.ps1" goto :binding_done

set "BIND_FAILED=0"
set "BIND_WARNED=0"
for %%L in ("%LOCK_FILE%" "%LOCK_FILE2%") do (
  if exist "%%~L" (
    powershell -NoProfile -ExecutionPolicy Bypass -File "%LIB_DIR%\binding.ps1" check "%SCRIPT_DIR_PS%" "%%~L" >nul 2>&1
    set "EC=!errorlevel!"
    if "!EC!"=="1" set "BIND_FAILED=1"
    if "!EC!"=="3" set "BIND_WARNED=1"
  )
)
if "!BIND_FAILED!"=="1" goto :binding_failed
if "!BIND_WARNED!"=="1" echo   [warn] Could not verify drive binding (continuing).
goto :binding_done

:binding_failed
echo.
echo   ============================================================
echo   [ERROR] This portable is locked to its original USB drive.
echo   ============================================================
echo.
echo   Original owner can unbind with:
echo     CodexPortable.bat --unlock
echo.
pause
exit /b 1

:binding_done

:: Kill any existing cc-switch (only if we own it from a previous run)
set "WE_STARTED_CCS=0"
set "CC_SWITCH_PID="
if exist "%RUN_LOCK%\pid" (
  for /f "usebackq delims=" %%P in ("%RUN_LOCK%\pid") do if not defined PREV_CCS_PID set "PREV_CCS_PID=%%P"
)

:: Setup portable directories
if not exist "%PORTABLE_CCS%" mkdir "%PORTABLE_CCS%"
if not exist "%PORTABLE_CODEX%" mkdir "%PORTABLE_CODEX%"

:: ensure_link handles migration in a single pass (copies when portable
:: empty, backs up otherwise). The previous standalone xcopy left both
:: system + portable populated, forcing ensure_link into a destructive
:: branch. Removed.

:: Create junctions
call :ensure_link "%SYS_CCS%" "%PORTABLE_CCS%"
if !errorlevel! NEQ 0 (
  echo   [ERROR] Cannot create link for .cc-switch
  echo   Try enabling Developer Mode in Windows Settings.
  pause
  exit /b 1
)
call :ensure_link "%SYS_CODEX%" "%PORTABLE_CODEX%"
if !errorlevel! NEQ 0 (
  echo   [ERROR] Cannot create link for .codex
  pause
  exit /b 1
)

:: Write run-lock (cmd's PID via PowerShell parent lookup; wmic was
:: removed in Win11 24H2+, and %~1 is the first CLI arg not the PID)
for /f "delims=" %%P in ('powershell -NoProfile -Command "(Get-CimInstance Win32_Process -Filter ('ProcessId = ' + $PID)).ParentProcessId" 2^>nul') do set "MY_PID=%%P"
if not defined MY_PID set "MY_PID=%RANDOM%%RANDOM%%RANDOM%"
echo !MY_PID! > "%RUN_LOCK%\pid"

:: Check config
call :check_config
if "!HAS_CONFIG!"=="1" goto :launch_codex

:: First-run: open CC Switch and wait
echo.
echo =====================================
echo   First Run - Configure API
echo =====================================
echo.
if exist "%BIN_DIR%\cc-switch.exe" (
  echo   Opening CC Switch GUI...
  echo   Add a Codex provider and save.
  echo.
  for /f "delims=" %%P in ('powershell -NoProfile -Command "Start-Process -FilePath '%BIN_DIR%\cc-switch.exe' -PassThru | Select-Object -ExpandProperty Id" 2^>nul') do set "CC_SWITCH_PID=%%P"
  if not defined CC_SWITCH_PID (
    start "" "%BIN_DIR%\cc-switch.exe"
  )
  set "WE_STARTED_CCS=1"
) else (
  echo   [warn] cc-switch GUI not found. Configure manually:
  echo     %PORTABLE_CODEX%\auth.json    -^> {"OPENAI_API_KEY": "..."}
  echo     %PORTABLE_CODEX%\config.toml  -^> [model_providers.xxx] ...
)

echo   Waiting for configuration...
set "WAIT_COUNT=0"
:wait_config
timeout /t 2 >nul 2>&1
set /a WAIT_COUNT+=1
call :check_config
if "!HAS_CONFIG!"=="1" goto :config_ready
if "!WE_STARTED_CCS!"=="1" (
  if defined CC_SWITCH_PID (
    tasklist /fi "PID eq !CC_SWITCH_PID!" 2>nul | find "!CC_SWITCH_PID!" >nul
    if !errorlevel! NEQ 0 (
      echo   [!] CC Switch exited before config saved. Re-run to retry.
      goto :error_cleanup
    )
  ) else (
    tasklist /fi "ImageName eq cc-switch.exe" 2>nul | find /i "cc-switch.exe" >nul
    if !errorlevel! NEQ 0 (
      echo   [!] CC Switch exited before config saved. Re-run to retry.
      goto :error_cleanup
    )
  )
)
if !WAIT_COUNT! GEQ 150 (
  echo   [!] Timeout waiting for configuration.
  goto :error_cleanup
)
goto :wait_config

:config_ready
echo   [ok] Configuration detected.
timeout /t 1 >nul 2>&1

:launch_codex
:: Create binding lock
if not exist "%LIB_DIR%\binding.ps1" goto :binding_create_done
if exist "%LOCK_FILE%" goto :create_mirror
powershell -NoProfile -ExecutionPolicy Bypass -File "%LIB_DIR%\binding.ps1" create "%SCRIPT_DIR_PS%" "%LOCK_FILE%" >nul 2>&1
if exist "%LOCK_FILE%" echo   [ok] Bound to current drive.
:create_mirror
if exist "%LOCK_FILE2%" goto :binding_create_done
powershell -NoProfile -ExecutionPolicy Bypass -File "%LIB_DIR%\binding.ps1" create "%SCRIPT_DIR_PS%" "%LOCK_FILE2%" >nul 2>&1
:binding_create_done

:: Set CODEX_HOME and launch
echo   Mode: Direct ^| Data: portable folder
echo.
set "CODEX_HOME=%PORTABLE_CODEX%"
"%BIN_DIR%\codex.exe" %*
goto :final_cleanup

:error_cleanup
call :do_cleanup
pause
exit /b 1

:final_cleanup
call :do_cleanup
exit /b 0

:do_cleanup
if "!WE_STARTED_CCS!"=="1" (
  if defined CC_SWITCH_PID (
    taskkill /pid !CC_SWITCH_PID! /t >nul 2>&1
    timeout /t 2 >nul 2>&1
    taskkill /f /pid !CC_SWITCH_PID! /t >nul 2>&1
  ) else (
    taskkill /im cc-switch.exe /t >nul 2>&1
    timeout /t 2 >nul 2>&1
    taskkill /f /im cc-switch.exe /t >nul 2>&1
  )
)
call :remove_link "%SYS_CCS%"
call :remove_link "%SYS_CODEX%"
if exist "%RUN_LOCK%" rd /s /q "%RUN_LOCK%" >nul 2>&1
exit /b 0

:check_config
set "HAS_CONFIG=0"
if not exist "%PORTABLE_CODEX%\auth.json" exit /b 0
if exist "%LIB_DIR%\check-config.ps1" (
  powershell -NoProfile -ExecutionPolicy Bypass -File "%LIB_DIR%\check-config.ps1" "%PORTABLE_CODEX%\auth.json" >nul 2>&1
  if !errorlevel! EQU 0 set "HAS_CONFIG=1"
) else (
  for %%F in ("%PORTABLE_CODEX%\auth.json") do if %%~zF GEQ 21 set "HAS_CONFIG=1"
)
exit /b 0

:ensure_link
set "LINK=%~1"
set "TARGET=%~2"
if not exist "%LINK%" (
  mklink /J "%LINK%" "%TARGET%" >nul 2>&1
  if !errorlevel! EQU 0 exit /b 0
  mklink /D "%LINK%" "%TARGET%" >nul 2>&1
  exit /b !errorlevel!
)
fsutil reparsepoint query "%LINK%" >nul 2>&1
if !errorlevel! EQU 0 exit /b 0
REM Real directory (pre-existing system install). NEVER rd /s /q it
REM blindly — migrate into portable first, or back it up. Destroying
REM the user's real ~/.codex or ~/.cc-switch is unacceptable.
if exist "%LINK%\*" (
  set "TARGET_EMPTY=1"
  for /f %%X in ('dir /b /a "%TARGET%" 2^>nul ^| findstr /r ".*"') do set "TARGET_EMPTY=0"
  if "!TARGET_EMPTY!"=="1" (
    echo   [migrate] Moving existing %LINK% into portable folder...
    xcopy /e /i /y /q "%LINK%" "%TARGET%" >nul 2>&1
    if !errorlevel! EQU 0 (
      rd /s /q "%LINK%" 2>nul
    ) else (
      echo   [ERROR] xcopy failed (code !errorlevel!^), keeping %LINK% intact
      exit /b 1
    )
  ) else (
    REM Portable target not empty — back up system dir, don't merge/delete
    for /f "delims=" %%T in ('powershell -NoProfile -Command "Get-Date -Format yyyyMMddHHmmss" 2^>nul') do set "TS=%%T"
    if not defined TS set "TS=%RANDOM%%RANDOM%"
    echo   [warn] Portable target not empty, backing up system dir...
    ren "%LINK%" "%~n1.before-portable.!TS!" >nul 2>&1
  )
  if exist "%LINK%" ren "%LINK%" "%~n1.bak.%RANDOM%" >nul 2>&1
)
if exist "%LINK%" rd "%LINK%" 2>nul
mklink /J "%LINK%" "%TARGET%" >nul 2>&1
if !errorlevel! EQU 0 exit /b 0
mklink /D "%LINK%" "%TARGET%" >nul 2>&1
exit /b !errorlevel!

:remove_link
set "LINK=%~1"
if not exist "%LINK%" exit /b 0
fsutil reparsepoint query "%LINK%" >nul 2>&1
if !errorlevel! EQU 0 rd "%LINK%" >nul 2>&1
exit /b 0