@echo off
setlocal

rem ---------------------------------------------------------------------------
rem setup-windows-7-test-env.bat - prepare a Windows 7 VM as a test target for
rem native Windows software driven from the host by VBoxManage guestcontrol.
rem
rem Copy this file into the guest and run it there. It is idempotent: run it
rem again after a rollback, or after any snapshot restore, to get the same box.
rem
rem Split in two halves, like the other provisioning scripts here:
rem   - the per-user half runs as you and needs no UAC prompt
rem   - the machine-wide half needs elevation and is SKIPPED (with a notice)
rem     when this runs unelevated, so an unattended run never blocks on a prompt
rem
rem That split matters more than usual here: a guestcontrol-launched process gets
rem a UAC-filtered token even for an account in Administrators, so the elevated
rem half can only be done by running this from an interactive Administrator
rem prompt inside the guest. Everything the host harness actually needs is in
rem the per-user half.
rem ---------------------------------------------------------------------------

echo(
echo ============================================================
echo  Windows 7 test-target setup
echo ============================================================

rem --- Are we elevated? "net session" is the cheapest reliable probe. ---
set "ELEVATED=0"
net session >nul 2>&1
if "%ERRORLEVEL%"=="0" set "ELEVATED=1"

rem === PER-USER HALF (no UAC needed) =========================================

echo(
echo [user] Suppressing crash/hard-error dialogs
rem A modal Windows Error Reporting dialog in the guest blocks a guestcontrol
rem call until its timeout: the run looks like a hang, and a harness that scores
rem a timeout as a failure will invent bugs that are not there. DontShowUI makes
rem a crashing test process die immediately and return its exit code instead.
reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v DontShowUI /t REG_DWORD /d 1 /f >nul
if errorlevel 1 echo   WARN: could not set DontShowUI

echo [user] Disabling the screen saver and monitor blanking
rem The host watches this VM's screen with "VBoxManage controlvm screenshotpng".
rem A blanked screen makes every screenshot useless.
reg add "HKCU\Control Panel\Desktop" /v ScreenSaveActive /t REG_SZ /d 0 /f >nul
reg add "HKCU\Control Panel\Desktop" /v ScreenSaverIsSecure /t REG_SZ /d 0 /f >nul
reg add "HKCU\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d "" /f >nul 2>&1

echo [user] Creating the staging directory C:\bb
if not exist "C:\bb" mkdir "C:\bb"
if not exist "C:\bb" echo   WARN: could not create C:\bb

echo [user] Mapping Z: to the VirtualBox shared folder "Downloads"
rem Bulk file transfer over a shared folder is far faster than a copyto per file.
rem The mapping is per-user and must be re-made in each new interactive session,
rem which is exactly why it lives in this script rather than in a host-side note.
if exist Z:\ goto :zdone
net use Z: \vboxsvr\Downloads /persistent:yes >nul 2>&1
if errorlevel 1 echo   WARN: could not map Z: - is the shared folder attached to this VM?
:zdone

rem === MACHINE-WIDE HALF (needs elevation) ===================================

if "%ELEVATED%"=="0" goto :skipadmin

echo(
echo [admin] Suppressing the system hard-error dialog (ErrorMode=2)
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Windows" /v ErrorMode /t REG_DWORD /d 2 /f >nul
if errorlevel 1 echo   WARN: could not set ErrorMode

echo [admin] Disabling sleep and monitor timeout on AC
powercfg -change -monitor-timeout-ac 0 >nul 2>&1
powercfg -change -standby-timeout-ac 0 >nul 2>&1
powercfg -change -disk-timeout-ac 0 >nul 2>&1
powercfg -change -hibernate-timeout-ac 0 >nul 2>&1

echo [admin] Turning off Windows Update automatic install
rem An update reboot in the middle of a test run destroys the run and, worse,
rem silently changes the system under test between two comparable results.
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 1 /f >nul 2>&1
goto :adminend

:skipadmin
echo(
echo [admin] SKIPPED - this process is not elevated.
echo         Run this script from an Administrator prompt INSIDE the guest to
echo         apply: ErrorMode=2, sleep/monitor timeouts, Windows Update policy.
echo         A guestcontrol-launched process cannot elevate itself, so these
echo         cannot be done from the host harness.
:adminend

rem === READINESS REPORT ======================================================
rem Everything below only reports. A test that silently runs against a box
rem missing a device reads as "the software under test refused" when the truth is
rem "this VM never had one" - so the harness must know, up front, what is here.

echo(
echo ============================================================
echo  Readiness
echo ============================================================
echo(
echo -- OS --
ver
echo arch=%PROCESSOR_ARCHITECTURE%  user=%USERNAME%  elevated=%ELEVATED%

echo(
echo -- Desktop Window Manager composition --
rem SetWindowDisplayAffinity requires DWM composition. With composition OFF it
rem fails with error 8 for every value, so any screen-capture protection under
rem test is a silent no-op and its checks fail for a reason that has nothing to
rem do with the code. Windows 7 runs the Basic theme (composition off) whenever
rem the install is not activated.
rem
rem Ask the API, not a proxy for it. Two plausible-looking shortcuts are both
rem WRONG on this box, measured: dwm.exe keeps running with composition off, and
rem HKCU\...\DWM\Composition is the stored preference, not the live state. Both
rem say ENABLED while DwmIsCompositionEnabled returns false.
rem
rem Two shapes to keep, both learned the hard way against guestcontrol:
rem   - PowerShell PRINTS the verdict; the batch does not capture it. Redirecting
rem     its stdout to a file, or capturing through for /f, hangs the whole run
rem     until the host's timeout fires.
rem   - the if/else is ONE line. Split across two, PowerShell treats the file as
rem     an incomplete command, waits on stdin and never exits. The <nul below is
rem     belt and braces for that whole class of hang.
set "DWMPS=%TEMP%\w7env-dwm.ps1"
> "%DWMPS%" echo Add-Type -TypeDefinition @^"
>>"%DWMPS%" echo using System;
>>"%DWMPS%" echo using System.Runtime.InteropServices;
>>"%DWMPS%" echo public class D { [DllImport("dwmapi.dll")] public static extern int DwmIsCompositionEnabled(out bool e); }
>>"%DWMPS%" echo ^"@
>>"%DWMPS%" echo $e = $false
>>"%DWMPS%" echo [void][D]::DwmIsCompositionEnabled([ref]$e)
>>"%DWMPS%" echo if ($e) { "  composition = ENABLED - screen-capture affinity is testable." } else { "  composition = DISABLED - SetWindowDisplayAffinity fails with error 8 for every value, so a screen-capture-protection test here is testing nothing. Windows 7 forces the Basic theme while the install is not activated; activate it to test that path." }
powershell -NoProfile -ExecutionPolicy Bypass -File "%DWMPS%" <nul
del "%DWMPS%" >nul 2>&1

echo(
echo -- Printers (a print test needs at least one) --
rem wmic, not PowerShell: no quoting to get wrong, and it is in the base install.
wmic printer get Name,Default /format:table 2>nul | findstr /R /V "^$"
if errorlevel 1 echo   NONE - print tests will report "could not create a printer DC"

echo(
echo -- Audio capture devices (a microphone test needs at least one) --
wmic sounddev get Name,Status /format:table 2>nul | findstr /R /V "^$"
if errorlevel 1 echo   NONE - enable audio for this VM in its VirtualBox settings

echo(
echo -- Shared folder --
if exist Z:\ (echo   Z: mapped) else (echo   Z: NOT mapped)

echo(
echo -- Staging directory --
if exist C:\bb (echo   C:\bb present) else (echo   C:\bb MISSING)

echo(
echo ============================================================
echo  Done. Re-run this after any snapshot restore.
echo ============================================================
endlocal