# ======================================================================
# WPSecure – Custom Calculated Signature Placeholder Attribute Writer
# Version: 69
#
# Purpose :
#   Applies user‑defined custom signature placeholder values to all
#   discovered WPSecure identity keys under the current user's profile.
#
# Scope :
#   Current User (HKCU). No administrative rights are required.
#
# Usage :
#   • Use this script as part of your signature.ps1 workflow, OR
#   • Deploy it as a compliance baseline using Intune or MECM.
# ======================================================================

[CmdletBinding()]
param()

# -----------------------
# Constants / base paths
# -----------------------
$BaseRegPath = 'HKCU:\Software\Microsoft\Office\Outlook\wpsecure\signature'

# -----------------------
# Discovery / helpers
# -----------------------

function Test-Email {
    [CmdletBinding()]
    param([Parameter(Mandatory=$true)][string]$Value)
    if ($null -eq $Value) { return $false }
    return ($Value -match '^[\w\.\-]+@[\w\-]+\.[\w\.\-]+$')
}

function Get-UserDefineEmailAddresses {
    [CmdletBinding()]
    param()

    try {
        if (-not (Test-Path -LiteralPath $BaseRegPath)) { return @() }

        $emails =
            Get-ChildItem -LiteralPath $BaseRegPath -ErrorAction Stop |
            Select-Object -ExpandProperty PSChildName |
            Where-Object { $_ -match '^[\w\.\-]+@[\w\-]+\.[\w\.\-]+$' } |
            ForEach-Object { $_.ToLower() } |
            Sort-Object -Unique

        return $emails
    } catch {
        return @()
    }
}

function Set-SignatureCustomValue {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory=$true)][string]$KeyPath,
        [Parameter(Mandatory=$true)][string]$ValueName,
        [Parameter(Mandatory=$true)][string]$ValueData
    )
    if (-not (Test-Path -LiteralPath $KeyPath)) {
        try { $null = New-Item -Path $KeyPath -Force | Out-Null } catch { return $false }
    }
    try {
        Set-ItemProperty -Path $KeyPath -Name $ValueName -Value $ValueData -Force
        return $true
    } catch { return $false }
}

function Remove-CustomCvValues {
    [CmdletBinding()]
    param([Parameter(Mandatory=$true)][string]$KeyPath)

    if (-not (Test-Path -LiteralPath $KeyPath)) { return 0 }
    try {
        $keyItem = Get-Item -LiteralPath $KeyPath -ErrorAction Stop
        $names = $keyItem.GetValueNames()
        $removed = 0
        foreach ($n in $names) {
            if ($null -ne $n -and $n.ToString().ToLower().StartsWith('custom_cv_')) {
                try {
                    Remove-ItemProperty -Path $KeyPath -Name $n -ErrorAction Stop
                    $removed++
                } catch { }
            }
        }
        return $removed
    } catch {
        return 0
    }
}

# ======================================================================
# =======================  USER SETTINGS START HERE  ====================
# ======================================================================
# Add or modify the placeholder values to be written for each identity.
# Each "Name" = "Value" pair becomes a REG_SZ under:
#   HKCU\Software\Microsoft\Office\Outlook\wpsecure\signature\<identity>\
# Multiline values are allowed (use here-strings @" ... "@).
# make sure the here-string entry @" and exit "@ are on separate lines.
# Note: Always use the prefix "custom_cv_" for new names, but it is not mandatory.

$CustomAttributes = @{

# The custom calculated placeholder below is the best way to express a combination of telephone and mobile numbers.

    "custom_cv_phonedetails" = @"
???{{color-font-#11568F}}{{bold}}Business:{{bold-end}}{{color-font-end-#11568F}} {{az_businessphones1}} || | {{if_az_mobilephone}}{{if_az_businessphones1}} || {{color-font-#11568F}}{{bold}}Mobile:{{bold-end}}{{color-font-end-#11568F}} {{az_mobilephone}}???
"@;

# Below is another example for calculating years of service.

    "custom_cv_yos" = @"
???{{color-font-#11568F}}{{bold}}Years of service:{{bold-end}}{{color-font-end-#11568F}} [[datediff:auto|{{az_employeehiredate}}|utcnow,1]].???
"@

}
# ======================================================================
# ========================   USER SETTINGS END   ========================
# ======================================================================

# ----------------------------
# Main
# ----------------------------
$Identities = Get-UserDefineEmailAddresses

if (-not $Identities -or $Identities.Count -eq 0) {
    Write-Output "No identities discovered. Finished."
    return
}

foreach ($id in $Identities) {
    if ($null -eq $id) { continue }
    $identity = $id.Trim()
    if (-not (Test-Email $identity)) { continue }

    $keyPath = Join-Path $BaseRegPath $identity

    # 1) Clean up any existing values with the 'custom_cv_' prefix
    $removedCount = Remove-CustomCvValues -KeyPath $keyPath
    if ($removedCount -gt 0) {
        Write-Output "Removed $removedCount existing 'custom_cv_' value(s) from '$identity'."
    }

    # 2) Write current set of custom attributes
    $allOk = $true
    foreach ($entry in $CustomAttributes.GetEnumerator()) {
        $name  = [string]$entry.Key
        $value = [string]$entry.Value
        $ok = Set-SignatureCustomValue -KeyPath $keyPath -ValueName $name -ValueData $value
        if (-not $ok) { $allOk = $false }
    }

    if ($allOk) {
        Write-Output "Applied attributes to '$identity'."
    } else {
        Write-Output "One or more attributes failed for '$identity'."
    }
}

Write-Output "Finished."