Function cli_ensure_windows_user_path

src/cli/cli.c:5982–6074

Persist the current-user PATH while the activation lease is held. The * installer script may update only its process-local PATH after this returns; * it must not perform a second persistent mutation outside coordination. */

 * installer script may update only its process-local PATH after this returns;
 * it must not perform a second persistent mutation outside coordination. */
static int cli_ensure_windows_user_path(const char *bin_dir, bool dry_run) {
    wchar_t *wide_dir = cli_windows_utf8_to_wide(bin_dir);
    HKEY environment = NULL;
    if (!wide_dir || cli_windows_open_user_path_key(&environment) != CLI_OK) {
        free(wide_dir);
        return CLI_ERR;
    }

    DWORD type = REG_EXPAND_SZ;
    DWORD bytes = 0;
    LONG queried = RegQueryValueExW(environment, L"Path", NULL, &type, NULL, &bytes);
    bool missing = queried == ERROR_FILE_NOT_FOUND;
    if ((!missing && queried != ERROR_SUCCESS) ||
        (!missing && type != REG_SZ && type != REG_EXPAND_SZ)) {
        RegCloseKey(environment);
        free(wide_dir);
        return CLI_ERR;
    }
    size_t existing_capacity = missing ? 1U : (size_t)bytes / sizeof(wchar_t) + 1U;
    wchar_t *existing = calloc(existing_capacity, sizeof(*existing));
    if (!existing) {
        RegCloseKey(environment);
        free(wide_dir);
        return CLI_ERR;
    }
    if (!missing) {
        DWORD read_bytes = bytes;
        if (RegQueryValueExW(environment, L"Path", NULL, &type, (BYTE *)existing, &read_bytes) !=
            ERROR_SUCCESS) {
            RegCloseKey(environment);
            free(existing);
            free(wide_dir);
            return CLI_ERR;
        }
        existing[existing_capacity - 1U] = L'\0';
    }

    bool present = false;
    const wchar_t *cursor = existing;
    while (!present && *cursor) {
        const wchar_t *separator = wcschr(cursor, L';');
        size_t length = separator ? (size_t)(separator - cursor) : wcslen(cursor);
        present = cli_windows_path_segment_equal(cursor, length, wide_dir);
        cursor = separator ? separator + 1 : cursor + length;
    }
    if (present || dry_run) {
        RegCloseKey(environment);
        free(existing);
        free(wide_dir);
        return present ? CLI_TRUE : CLI_OK;
    }

    size_t existing_length = wcslen(existing);
    size_t directory_length = wcslen(wide_dir);
    bool separator_needed = existing_length > 0 && existing[existing_length - 1U] != L';';
    if (existing_length > SIZE_MAX - directory_length - 2U) {
        RegCloseKey(environment);
        free(existing);