###############################################################################
#                     DO NOT EDIT ANYTHING IN THIS BLOCK
#         ───────────────────────────────────────────────────────────────
#         Structural code, logic, functions, registry handling, etc.
#         Only edit below the "USER SETTINGS START HERE" line
###############################################################################

$upn = whoami /upn

# Basic UPN validation
if ($upn -notmatch '^[\w\.\-]+@[\w\-]+\.[\w\-\.]+$') {
    Write-Warning "UPN does not appear to be a valid email address: $upn"
    exit 0
}

Write-Output "Valid UPN detected: $upn"

$baseRegPath = "HKCU:\Software\Microsoft\Office\Outlook\wpsecure\signature"

# ────────────────────────────────────────────────────────────────
#  Helper function — creates key if missing and sets a property
# ────────────────────────────────────────────────────────────────
function Set-SignatureCustomValue {
    param(
        [string]$KeyPath,
        [string]$ValueName,
        [string]$ValueData
    )

    if (-not (Test-Path $KeyPath)) {
        try {
            $null = New-Item -Path $KeyPath -Force | Out-Null
            Write-Output "Created registry key: $KeyPath"
        }
        catch {
            Write-Warning "Failed to create key: $KeyPath ── $($_.Exception.Message)"
            return $false
        }
    }

    try {
        Set-ItemProperty -Path $KeyPath -Name $ValueName -Value $ValueData -Force
        Write-Output "Set '$ValueName' in $KeyPath"
        return $true
    }
    catch {
        Write-Warning "Failed to set '$ValueName' in $KeyPath ── $($_.Exception.Message)"
        return $false
    }
}

# Get email from UPN key (if it exists)
$upnKey = Join-Path $baseRegPath $upn
$emailProp = Get-ItemProperty -Path $upnKey -Name "mail" -ErrorAction SilentlyContinue
$email = $emailProp.mail

if (-not $email) {
    Write-Warning "Could not read 'mail' value from registry for $upn"
    # You can choose to continue using only $upn or exit here
    # exit 0
}

$keysToUpdate = @($upnKey)
if ($email -and $upn.ToLower() -ne $email.ToLower()) {
    $emailKey = Join-Path $baseRegPath $email
    $keysToUpdate += $emailKey
}

###############################################################################
#                  USER SETTINGS START HERE
# ──────────────────────────────────────────────────────────────────────────────
#     Add / change / remove entries in this hashtable only
#     You can add hundreds of entries — one per line
###############################################################################

$customAttributes = @{
    "customphonedetails" = @"
???{{bold}}Business:{{bold-end}} {{az_businessphones1}} || | {{if_az_mobilephone}} {{if_az_businessphones1}} || {{bold}}Mobile:{{bold-end}} {{az_mobilephone}}???
"@

    # "customyearsofservice" = "???{{bold}}Years of service: {{bold-end}}[[datediff:auto|{{az_employeehiredate}}|now,1]].???"
    # "customjobtitle"       = "{{az_jobtitle}} - {{az_department}}"
    # "customlocation"       = "{{az_city}}, {{az_country}}"
    # "customextension"      = "???{{bold}}Ext: {{bold-end}}{{az_extension}}???"
    # "customdisclaimer"           = "Confidential — do not forward without permission""
    # ... add as many as you want
}

###############################################################################
#               END OF USER-EDITABLE SECTION
#         ───────────────────────────────────────────────────────────────
#               Nothing below should normally be changed
###############################################################################

$overallSuccess = $true

foreach ($keyPath in $keysToUpdate) {
    foreach ($entry in $customAttributes.GetEnumerator()) {
        $name  = $entry.Key
        $value = $entry.Value

        $success = Set-SignatureCustomValue -KeyPath $keyPath `
                                            -ValueName $name `
                                            -ValueData $value

        if (-not $success) {
            $overallSuccess = $false
        }
    }
}

if ($overallSuccess) {
    Write-Output "`nAll custom signature attributes applied successfully to $($keysToUpdate.Count) key(s)."
} else {
    Write-Warning "`nOne or more registry operations failed — check messages above."
}

Write-Output "Finished."