# =============================================================================
# VeloxIQ(TM) Enterprise B2B Pilot Deployment Script
# Copyright (c) 2026 Veloxiq. All rights reserved.
#
# PURPOSE:
#   Zero-friction, zero-prompt deployment for IT Admins, MSPs, and Pilots.
#   Bypasses Windows Defender SmartScreen by stripping Mark-of-the-Web (Zone.Identifier).
#   100% User-Mode Execution - Zero Kernel Drivers - Immune to CrowdStrike crashes.
#
# USAGE:
#   # Interactive GUI:
#   irm https://veloxiq.in/downloads/veloxiq_pilot.ps1 | iex
#
#   # Silent Fleet Diagnostic Scan (Intune / GPO / RMM):
#   & powershell -ep bypass -c "irm https://veloxiq.in/downloads/veloxiq_pilot.ps1 | iex" -Silent -OrgToken "YOUR_ORG_KEY"
# =============================================================================

[CmdletBinding()]
param(
    [switch]$Silent,
    [switch]$FixAll,
    [string]$OrgToken = "",
    [string]$DownloadUrl = "https://fhmdbmlpboauvqwxkfjt.supabase.co/storage/v1/object/public/downloads/Veloxiq.exe"
)

$ErrorActionPreference = "Stop"

Write-Host ""
Write-Host "================================================================" -ForegroundColor Cyan
Write-Host "   VeloxIQ(TM) Enterprise Endpoint Intelligence Deployment" -ForegroundColor Cyan
Write-Host "   Architecture: 100% User-Mode | No Kernel Drivers | CrowdStrike-Safe" -ForegroundColor DarkGray
Write-Host "================================================================" -ForegroundColor Cyan
Write-Host ""

# 1. Target Directory in local user app data
$TargetDir = Join-Path $env:LOCALAPPDATA "Veloxiq"
if (-not (Test-Path $TargetDir)) {
    New-Item -ItemType Directory -Path $TargetDir -Force | Out-Null
}

$ExePath = Join-Path $TargetDir "Veloxiq.exe"

# Close previous background instance if running so Windows file lock is released
$running = Get-Process "Veloxiq" -ErrorAction SilentlyContinue
if ($running) {
    Write-Host "      Closing previous background instance to release file lock..." -ForegroundColor DarkGray
    $running | Stop-Process -Force -ErrorAction SilentlyContinue
    Start-Sleep -Milliseconds 600
}

# 2. Download latest binary
Write-Host "[1/3] Downloading latest VeloxIQ binary (24.3 MB) from CDN..." -ForegroundColor Yellow
Write-Host "      Please wait 10-25 seconds while binary transfers..." -ForegroundColor DarkGray
try {
    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 -bor [Net.SecurityProtocolType]::Tls13
    $wc = New-Object System.Net.WebClient
    $wc.Headers.Add("User-Agent", "Veloxiq-Enterprise-Deployer/2.1")
    $wc.DownloadFile($DownloadUrl, $ExePath)
    Write-Host "      Download verified successfully ($(Get-Item $ExePath | Measure-Object -Property Length -Sum | Select-Object -ExpandProperty Sum) bytes)." -ForegroundColor Green
} catch {
    Write-Host "[ERROR] Download failed: $_" -ForegroundColor Red
    exit 1
}

# 3. CRITICAL: Unblock-File strips Zone.Identifier (Mark-of-the-Web)
# This completely eliminates Windows Defender SmartScreen "Unknown Publisher" prompt!
Write-Host "[2/3] Authorizing safe execution (stripping browser quarantine tags)..." -ForegroundColor Yellow
try {
    Unblock-File -Path $ExePath
    Write-Host "      SmartScreen quarantine removed. App authorized for execution." -ForegroundColor Green
} catch {
    Write-Host "      Notice: Unable to unblock ($_); continuing anyway." -ForegroundColor DarkGray
}

# 4. Launch Application
Write-Host "[3/3] Initializing VeloxIQ engine..." -ForegroundColor Yellow
$argsList = @()
if ($Silent) { $argsList += "--silent" }
if ($FixAll) { $argsList += "--fix-all" }
if ($OrgToken) { $argsList += @("--token", $OrgToken) }

if ($Silent) {
    Write-Host "      Executing silent diagnostic scan..." -ForegroundColor Cyan
    if ($argsList.Count -gt 0) {
        $proc = Start-Process -FilePath $ExePath -ArgumentList $argsList -Wait -PassThru -NoNewWindow
    } else {
        $proc = Start-Process -FilePath $ExePath -Wait -PassThru -NoNewWindow
    }
    Write-Host ""
    Write-Host "[SUCCESS] Silent VeloxIQ pilot scan finished with exit code $($proc.ExitCode)." -ForegroundColor Green
} else {
    if ($argsList.Count -gt 0) {
        Start-Process -FilePath $ExePath -ArgumentList $argsList
    } else {
        Start-Process -FilePath $ExePath
    }
    Write-Host ""
    Write-Host "[SUCCESS] VeloxIQ launched successfully in interactive mode." -ForegroundColor Green
    Write-Host "          Double-click $ExePath anytime to re-run." -ForegroundColor DarkGray
}
Write-Host ""