lightman-agent 1.0.12 → 1.0.14

package/scripts/setup.ps1

@@ -1,132 +1,116 @@
-# LIGHTMAN Agent - Device Setup Script (Windows)
-# Generates agent.config.json for this specific device.
-#
-# Usage (run from agent directory or scripts directory):
-#   powershell -ExecutionPolicy Bypass -File setup.ps1 -Slug "f-av01" -Server "http://192.168.10.100:3401"
-#   powershell -ExecutionPolicy Bypass -File setup.ps1 -Slug "f-av01" -Server "http://192.168.10.100:3401" -Timezone "Asia/Kolkata"
-#
-# This script MUST be run once on every new device installation.
-# It clears any cached identity so the device provisions fresh.
-
-param(
-    [Parameter(Mandatory=$true)]
-    [string]$Slug,
-
-    [Parameter(Mandatory=$true)]
-    [string]$Server,
-
-    [Parameter(Mandatory=$false)]
-    [string]$Timezone = "Asia/Kolkata",
-
-    [Parameter(Mandatory=$false)]
-    [string]$InstallDir = $null,
-
-    [Parameter(Mandatory=$false)]
-    [switch]$ShellMode = $false
-)
-
-$ErrorActionPreference = "Stop"
-$ScriptDir  = Split-Path -Parent $MyInvocation.MyCommand.Path
-$AgentDir   = Split-Path -Parent $ScriptDir
-
-# Default install dir: the agent folder itself (for dev) or passed explicitly
-if (-not $InstallDir) {
-    $InstallDir = $AgentDir
-}
-
-Write-Host ""
-Write-Host "=== LIGHTMAN Agent - Device Setup ===" -ForegroundColor Cyan
-Write-Host "  Slug:        $Slug"
-Write-Host "  Server:      $Server"
-Write-Host "  Install dir: $InstallDir"
-Write-Host "  Timezone:    $Timezone"
-Write-Host ""
-
-function Get-KioskBrowserPath {
-    $candidates = @(
-        "C:\Program Files\Google\Chrome\Application\chrome.exe",
-        "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe",
-        (Join-Path $env:LOCALAPPDATA "Google\Chrome\Application\chrome.exe"),
-        "C:\Program Files\Microsoft\Edge\Application\msedge.exe",
-        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe",
-        (Join-Path $env:LOCALAPPDATA "Microsoft\Edge\Application\msedge.exe")
-    ) | Where-Object { $_ -and (Test-Path $_) }
-
-    if ($candidates.Count -gt 0) {
-        return $candidates[0]
-    }
-
-    throw "Neither Google Chrome nor Microsoft Edge was found. Install one of them and re-run setup."
-}
-
-# 1. Clear cached identity (CRITICAL - prevents old device credentials leaking)
-$IdentityFile = Join-Path $InstallDir ".lightman-identity.json"
-if (Test-Path $IdentityFile) {
-    Remove-Item $IdentityFile -Force
-    Write-Host "[OK] Cleared old identity cache (.lightman-identity.json)" -ForegroundColor Green
-} else {
-    Write-Host "[OK] No existing identity cache found (clean install)" -ForegroundColor DarkGray
-}
-
-# 2. Kiosk display URL - always localhost since agent runs the static server locally on port 3403
-$KioskUrl  = "http://localhost:3403/display/$Slug"
-
-# 3. Detect browser path
-try {
-    $BrowserPath = Get-KioskBrowserPath
-    Write-Host "[OK] Using kiosk browser: $BrowserPath" -ForegroundColor Green
-} catch {
-    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
-    exit 1
-}
-
-$ChromeDataDir = "C:\ProgramData\Lightman\chrome-kiosk"
-
-# 4. Read template
-$TemplatePath = Join-Path $AgentDir "agent.config.template.json"
-if (-not (Test-Path $TemplatePath)) {
-    # If running from install dir (post-install), template should have been copied there
-    $TemplatePath = Join-Path $InstallDir "agent.config.template.json"
-}
-if (-not (Test-Path $TemplatePath)) {
-    Write-Host "[ERROR] Template not found. Expected: $TemplatePath" -ForegroundColor Red
-    exit 1
-}
-
-$Template = Get-Content $TemplatePath -Raw
-
-# 5. Replace placeholders
-$BrowserEscaped    = $BrowserPath  -replace '\\', '\\'
-$ChromeDirEscaped  = $ChromeDataDir -replace '\\', '\\'
-
-$Config = $Template `
-    -replace '__SERVER_URL__',    $Server `
-    -replace '__DEVICE_SLUG__',   $Slug `
-    -replace '__KIOSK_URL__',     $KioskUrl `
-    -replace '__BROWSER_PATH__',  $BrowserEscaped `
-    -replace '__CHROME_DATA_DIR__', $ChromeDirEscaped `
-    -replace 'Asia/Kolkata',      $Timezone
-
-# 6. Inject shellMode into kiosk config if requested
-if ($ShellMode) {
-    # Parse as object, set shellMode, re-serialize (reliable, no regex fragility)
-    $configObj = $Config | ConvertFrom-Json
-    $configObj.kiosk | Add-Member -NotePropertyName "shellMode" -NotePropertyValue $true -Force
-    $Config = $configObj | ConvertTo-Json -Depth 4
-    Write-Host "[OK] Shell replacement mode enabled in config" -ForegroundColor Magenta
-}
-
-# 7. Write config
-$ConfigPath = Join-Path $InstallDir "agent.config.json"
-# Write as UTF-8 WITHOUT BOM (BOM breaks JSON parsing in Node.js)
-[System.IO.File]::WriteAllText($ConfigPath, $Config, [System.Text.UTF8Encoding]::new($false))
-
-Write-Host "[OK] Created agent.config.json" -ForegroundColor Green
-Write-Host ""
-Write-Host "  Device slug : $Slug"
-Write-Host "  Server      : $Server"
-Write-Host "  Kiosk URL   : $KioskUrl"
-Write-Host ""
-Write-Host "Setup complete. Start the agent - it will provision automatically." -ForegroundColor Cyan
-Write-Host "(If IP matches, provisioning is instant. Otherwise enter pairing code shown in admin.)" -ForegroundColor DarkGray
-Write-Host ""
+# LIGHTMAN Agent - Device Setup Script (Windows)
+# Generates agent.config.json for this specific device.
+#
+# Usage (run from agent directory or scripts directory):
+#   powershell -ExecutionPolicy Bypass -File setup.ps1 -Slug "f-av01" -Server "http://192.168.1.100:3401"
+#   powershell -ExecutionPolicy Bypass -File setup.ps1 -Slug "f-av01" -Server "http://192.168.1.100:3401" -Timezone "Asia/Kolkata"
+#
+# This script MUST be run once on every new device installation.
+# It clears any cached identity so the device provisions fresh.
+
+param(
+    [Parameter(Mandatory=$true)]
+    [string]$Slug,
+
+    [Parameter(Mandatory=$true)]
+    [string]$Server,
+
+    [Parameter(Mandatory=$false)]
+    [string]$Timezone = "Asia/Kolkata",
+
+    [Parameter(Mandatory=$false)]
+    [string]$InstallDir = $null,
+
+    [Parameter(Mandatory=$false)]
+    [switch]$ShellMode = $false
+)
+
+$ErrorActionPreference = "Stop"
+$ScriptDir  = Split-Path -Parent $MyInvocation.MyCommand.Path
+$AgentDir   = Split-Path -Parent $ScriptDir
+
+# Default install dir: the agent folder itself (for dev) or passed explicitly
+if (-not $InstallDir) {
+    $InstallDir = $AgentDir
+}
+
+Write-Host ""
+Write-Host "=== LIGHTMAN Agent - Device Setup ===" -ForegroundColor Cyan
+Write-Host "  Slug:        $Slug"
+Write-Host "  Server:      $Server"
+Write-Host "  Install dir: $InstallDir"
+Write-Host "  Timezone:    $Timezone"
+Write-Host ""
+
+# 1. Clear cached identity (CRITICAL - prevents old device credentials leaking)
+$IdentityFile = Join-Path $InstallDir ".lightman-identity.json"
+if (Test-Path $IdentityFile) {
+    Remove-Item $IdentityFile -Force
+    Write-Host "[OK] Cleared old identity cache (.lightman-identity.json)" -ForegroundColor Green
+} else {
+    Write-Host "[OK] No existing identity cache found (clean install)" -ForegroundColor DarkGray
+}
+
+# 2. Kiosk display URL - always localhost since agent runs the static server locally on port 3403
+$KioskUrl  = "http://localhost:3403/display/$Slug"
+
+# 3. Detect browser path
+$BrowserPath = "C:\Program Files\Google\Chrome\Application\chrome.exe"
+if (-not (Test-Path $BrowserPath)) {
+    $BrowserPath = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
+}
+if (-not (Test-Path $BrowserPath)) {
+    $BrowserPath = "chromium-browser"
+    Write-Host "[WARN] Chrome not found - using 'chromium-browser'" -ForegroundColor Yellow
+}
+
+$ChromeDataDir = "C:\ProgramData\Lightman\chrome-kiosk"
+
+# 4. Read template
+$TemplatePath = Join-Path $AgentDir "agent.config.template.json"
+if (-not (Test-Path $TemplatePath)) {
+    # If running from install dir (post-install), template should have been copied there
+    $TemplatePath = Join-Path $InstallDir "agent.config.template.json"
+}
+if (-not (Test-Path $TemplatePath)) {
+    Write-Host "[ERROR] Template not found. Expected: $TemplatePath" -ForegroundColor Red
+    exit 1
+}
+
+$Template = Get-Content $TemplatePath -Raw
+
+# 5. Replace placeholders
+$BrowserEscaped    = $BrowserPath  -replace '\\', '\\'
+$ChromeDirEscaped  = $ChromeDataDir -replace '\\', '\\'
+
+$Config = $Template `
+    -replace '__SERVER_URL__',    $Server `
+    -replace '__DEVICE_SLUG__',   $Slug `
+    -replace '__KIOSK_URL__',     $KioskUrl `
+    -replace '__BROWSER_PATH__',  $BrowserEscaped `
+    -replace '__CHROME_DATA_DIR__', $ChromeDirEscaped `
+    -replace 'Asia/Kolkata',      $Timezone
+
+# 6. Inject shellMode into kiosk config if requested
+if ($ShellMode) {
+    # Parse as object, set shellMode, re-serialize (reliable, no regex fragility)
+    $configObj = $Config | ConvertFrom-Json
+    $configObj.kiosk | Add-Member -NotePropertyName "shellMode" -NotePropertyValue $true -Force
+    $Config = $configObj | ConvertTo-Json -Depth 4
+    Write-Host "[OK] Shell replacement mode enabled in config" -ForegroundColor Magenta
+}
+
+# 7. Write config
+$ConfigPath = Join-Path $InstallDir "agent.config.json"
+# Write as UTF-8 WITHOUT BOM (BOM breaks JSON parsing in Node.js)
+[System.IO.File]::WriteAllText($ConfigPath, $Config, [System.Text.UTF8Encoding]::new($false))
+
+Write-Host "[OK] Created agent.config.json" -ForegroundColor Green
+Write-Host ""
+Write-Host "  Device slug : $Slug"
+Write-Host "  Server      : $Server"
+Write-Host "  Kiosk URL   : $KioskUrl"
+Write-Host ""
+Write-Host "Setup complete. Start the agent - it will provision automatically." -ForegroundColor Cyan
+Write-Host "(If IP matches, provisioning is instant. Otherwise enter pairing code shown in admin.)" -ForegroundColor DarkGray
+Write-Host ""

package/scripts/setup.sh

@@ -1,115 +1,115 @@
-#!/usr/bin/env bash
-# LIGHTMAN Agent — Device Setup Script (Linux / Raspberry Pi)
-# Generates agent.config.json for this specific device.
-#
-# Usage:
-#   sudo bash setup.sh --slug f-av01 --server http://192.168.10.100:3401
-#   sudo bash setup.sh --slug f-av01 --server http://192.168.10.100:3401 --timezone Asia/Kolkata --dir /opt/lightman/agent
-#
-# This script MUST be run once on every new device installation.
-# It clears any cached identity so the device provisions fresh.
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-AGENT_DIR="$(dirname "$SCRIPT_DIR")"
-
-# Defaults
-SLUG=""
-SERVER=""
-TIMEZONE="Asia/Kolkata"
-INSTALL_DIR="/opt/lightman/agent"
-
-# ── Parse arguments ──
-while [[ $# -gt 0 ]]; do
-    case $1 in
-        --slug)     SLUG="$2";       shift 2 ;;
-        --server)   SERVER="$2";     shift 2 ;;
-        --timezone) TIMEZONE="$2";   shift 2 ;;
-        --dir)      INSTALL_DIR="$2"; shift 2 ;;
-        -h|--help)
-            echo "Usage: bash setup.sh --slug SLUG --server http://SERVER:3401 [--timezone TZ] [--dir /path]"
-            exit 0
-            ;;
-        *) echo "Unknown option: $1"; exit 1 ;;
-    esac
-done
-
-if [[ -z "$SLUG" ]]; then
-    echo "Error: --slug is required"
-    echo "Usage: bash setup.sh --slug f-av01 --server http://192.168.10.100:3401"
-    exit 1
-fi
-
-if [[ -z "$SERVER" ]]; then
-    echo "Error: --server is required"
-    echo "Usage: bash setup.sh --slug f-av01 --server http://192.168.10.100:3401"
-    exit 1
-fi
-
-echo ""
-echo "=== LIGHTMAN Agent — Device Setup ==="
-echo "  Slug:        $SLUG"
-echo "  Server:      $SERVER"
-echo "  Install dir: $INSTALL_DIR"
-echo "  Timezone:    $TIMEZONE"
-echo ""
-
-# ── 1. Clear cached identity (CRITICAL — prevents old device credentials leaking) ──
-IDENTITY_FILE="$INSTALL_DIR/.lightman-identity.json"
-if [[ -f "$IDENTITY_FILE" ]]; then
-    rm -f "$IDENTITY_FILE"
-    echo "[OK] Cleared old identity cache (.lightman-identity.json)"
-else
-    echo "[OK] No existing identity cache found (clean install)"
-fi
-
-# ── 2. Derive kiosk display URL from server URL ──
-# Replace port with 3403 (display server)
-KIOSK_BASE="$(echo "$SERVER" | sed 's/:[0-9]*$//')"
-KIOSK_URL="${KIOSK_BASE}:3403/display/${SLUG}"
-
-# ── 3. Detect browser ──
-BROWSER_PATH="chromium-browser"
-if command -v chromium &>/dev/null; then
-    BROWSER_PATH="chromium"
-elif command -v chromium-browser &>/dev/null; then
-    BROWSER_PATH="chromium-browser"
-elif command -v google-chrome &>/dev/null; then
-    BROWSER_PATH="google-chrome"
-fi
-CHROME_DATA_DIR="/opt/lightman/chrome-kiosk"
-
-# ── 4. Find template ──
-TEMPLATE="$AGENT_DIR/agent.config.template.json"
-if [[ ! -f "$TEMPLATE" ]]; then
-    # Post-install: template may be in install dir
-    TEMPLATE="$INSTALL_DIR/agent.config.template.json"
-fi
-if [[ ! -f "$TEMPLATE" ]]; then
-    echo "[ERROR] Template not found at $TEMPLATE"
-    exit 1
-fi
-
-# ── 5. Create install dir if needed ──
-mkdir -p "$INSTALL_DIR"
-
-# ── 6. Replace placeholders and write config ──
-sed \
-    -e "s|__SERVER_URL__|${SERVER}|g" \
-    -e "s|__DEVICE_SLUG__|${SLUG}|g" \
-    -e "s|__KIOSK_URL__|${KIOSK_URL}|g" \
-    -e "s|__BROWSER_PATH__|${BROWSER_PATH}|g" \
-    -e "s|__CHROME_DATA_DIR__|${CHROME_DATA_DIR}|g" \
-    -e "s|Asia/Kolkata|${TIMEZONE}|g" \
-    "$TEMPLATE" > "$INSTALL_DIR/agent.config.json"
-
-echo "[OK] Created agent.config.json"
-echo ""
-echo "  Device slug : $SLUG"
-echo "  Server      : $SERVER"
-echo "  Kiosk URL   : $KIOSK_URL"
-echo ""
-echo "Setup complete. Start the agent — it will provision automatically."
-echo "(If IP matches, provisioning is instant. Otherwise enter pairing code shown in admin.)"
-echo ""
+#!/usr/bin/env bash
+# LIGHTMAN Agent — Device Setup Script (Linux / Raspberry Pi)
+# Generates agent.config.json for this specific device.
+#
+# Usage:
+#   sudo bash setup.sh --slug f-av01 --server http://192.168.1.100:3401
+#   sudo bash setup.sh --slug f-av01 --server http://192.168.1.100:3401 --timezone Asia/Kolkata --dir /opt/lightman/agent
+#
+# This script MUST be run once on every new device installation.
+# It clears any cached identity so the device provisions fresh.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+AGENT_DIR="$(dirname "$SCRIPT_DIR")"
+
+# Defaults
+SLUG=""
+SERVER=""
+TIMEZONE="Asia/Kolkata"
+INSTALL_DIR="/opt/lightman/agent"
+
+# ── Parse arguments ──
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --slug)     SLUG="$2";       shift 2 ;;
+        --server)   SERVER="$2";     shift 2 ;;
+        --timezone) TIMEZONE="$2";   shift 2 ;;
+        --dir)      INSTALL_DIR="$2"; shift 2 ;;
+        -h|--help)
+            echo "Usage: bash setup.sh --slug SLUG --server http://SERVER:3401 [--timezone TZ] [--dir /path]"
+            exit 0
+            ;;
+        *) echo "Unknown option: $1"; exit 1 ;;
+    esac
+done
+
+if [[ -z "$SLUG" ]]; then
+    echo "Error: --slug is required"
+    echo "Usage: bash setup.sh --slug f-av01 --server http://192.168.1.100:3401"
+    exit 1
+fi
+
+if [[ -z "$SERVER" ]]; then
+    echo "Error: --server is required"
+    echo "Usage: bash setup.sh --slug f-av01 --server http://192.168.1.100:3401"
+    exit 1
+fi
+
+echo ""
+echo "=== LIGHTMAN Agent — Device Setup ==="
+echo "  Slug:        $SLUG"
+echo "  Server:      $SERVER"
+echo "  Install dir: $INSTALL_DIR"
+echo "  Timezone:    $TIMEZONE"
+echo ""
+
+# ── 1. Clear cached identity (CRITICAL — prevents old device credentials leaking) ──
+IDENTITY_FILE="$INSTALL_DIR/.lightman-identity.json"
+if [[ -f "$IDENTITY_FILE" ]]; then
+    rm -f "$IDENTITY_FILE"
+    echo "[OK] Cleared old identity cache (.lightman-identity.json)"
+else
+    echo "[OK] No existing identity cache found (clean install)"
+fi
+
+# ── 2. Derive kiosk display URL from server URL ──
+# Replace port with 3403 (display server)
+KIOSK_BASE="$(echo "$SERVER" | sed 's/:[0-9]*$//')"
+KIOSK_URL="${KIOSK_BASE}:3403/display/${SLUG}"
+
+# ── 3. Detect browser ──
+BROWSER_PATH="chromium-browser"
+if command -v chromium &>/dev/null; then
+    BROWSER_PATH="chromium"
+elif command -v chromium-browser &>/dev/null; then
+    BROWSER_PATH="chromium-browser"
+elif command -v google-chrome &>/dev/null; then
+    BROWSER_PATH="google-chrome"
+fi
+CHROME_DATA_DIR="/opt/lightman/chrome-kiosk"
+
+# ── 4. Find template ──
+TEMPLATE="$AGENT_DIR/agent.config.template.json"
+if [[ ! -f "$TEMPLATE" ]]; then
+    # Post-install: template may be in install dir
+    TEMPLATE="$INSTALL_DIR/agent.config.template.json"
+fi
+if [[ ! -f "$TEMPLATE" ]]; then
+    echo "[ERROR] Template not found at $TEMPLATE"
+    exit 1
+fi
+
+# ── 5. Create install dir if needed ──
+mkdir -p "$INSTALL_DIR"
+
+# ── 6. Replace placeholders and write config ──
+sed \
+    -e "s|__SERVER_URL__|${SERVER}|g" \
+    -e "s|__DEVICE_SLUG__|${SLUG}|g" \
+    -e "s|__KIOSK_URL__|${KIOSK_URL}|g" \
+    -e "s|__BROWSER_PATH__|${BROWSER_PATH}|g" \
+    -e "s|__CHROME_DATA_DIR__|${CHROME_DATA_DIR}|g" \
+    -e "s|Asia/Kolkata|${TIMEZONE}|g" \
+    "$TEMPLATE" > "$INSTALL_DIR/agent.config.json"
+
+echo "[OK] Created agent.config.json"
+echo ""
+echo "  Device slug : $SLUG"
+echo "  Server      : $SERVER"
+echo "  Kiosk URL   : $KIOSK_URL"
+echo ""
+echo "Setup complete. Start the agent — it will provision automatically."
+echo "(If IP matches, provisioning is instant. Otherwise enter pairing code shown in admin.)"
+echo ""

package/scripts/uninstall-linux.sh

@@ -1,50 +1,50 @@
-#!/usr/bin/env bash
-# LIGHTMAN Agent — Linux Uninstaller
-# Run as root: sudo bash uninstall-linux.sh
-set -euo pipefail
-
-INSTALL_DIR="/opt/lightman/agent"
-LOG_DIR="/var/log/lightman"
-SERVICE_NAME="lightman-agent"
-
-if [[ $EUID -ne 0 ]]; then
-  echo "Error: This script must be run as root (use sudo)."
-  exit 1
-fi
-
-echo "=== LIGHTMAN Agent — Linux Uninstaller ==="
-echo ""
-
-# --- Stop and disable service ---
-echo "[1/5] Stopping service..."
-systemctl stop "$SERVICE_NAME" 2>/dev/null || true
-systemctl disable "$SERVICE_NAME" 2>/dev/null || true
-
-# --- Remove systemd unit ---
-echo "[2/5] Removing systemd unit..."
-rm -f "/etc/systemd/system/${SERVICE_NAME}.service"
-systemctl daemon-reload
-
-# --- Remove logrotate config ---
-echo "[3/5] Removing logrotate config..."
-rm -f "/etc/logrotate.d/${SERVICE_NAME}"
-
-# --- Remove installation directory ---
-echo "[4/5] Removing ${INSTALL_DIR}..."
-rm -rf "$INSTALL_DIR"
-
-# --- Remove log directory ---
-echo "[5/5] Removing ${LOG_DIR}..."
-rm -rf "$LOG_DIR"
-
-# --- Remove user/group (optional) ---
-read -rp "Remove 'lightman' user and group? [y/N]: " REMOVE_USER
-if [[ "$REMOVE_USER" =~ ^[Yy]$ ]]; then
-  userdel lightman 2>/dev/null || true
-  groupdel lightman 2>/dev/null || true
-  echo "User and group removed."
-fi
-
-echo ""
-echo "=== Uninstallation Complete ==="
-echo ""
+#!/usr/bin/env bash
+# LIGHTMAN Agent — Linux Uninstaller
+# Run as root: sudo bash uninstall-linux.sh
+set -euo pipefail
+
+INSTALL_DIR="/opt/lightman/agent"
+LOG_DIR="/var/log/lightman"
+SERVICE_NAME="lightman-agent"
+
+if [[ $EUID -ne 0 ]]; then
+  echo "Error: This script must be run as root (use sudo)."
+  exit 1
+fi
+
+echo "=== LIGHTMAN Agent — Linux Uninstaller ==="
+echo ""
+
+# --- Stop and disable service ---
+echo "[1/5] Stopping service..."
+systemctl stop "$SERVICE_NAME" 2>/dev/null || true
+systemctl disable "$SERVICE_NAME" 2>/dev/null || true
+
+# --- Remove systemd unit ---
+echo "[2/5] Removing systemd unit..."
+rm -f "/etc/systemd/system/${SERVICE_NAME}.service"
+systemctl daemon-reload
+
+# --- Remove logrotate config ---
+echo "[3/5] Removing logrotate config..."
+rm -f "/etc/logrotate.d/${SERVICE_NAME}"
+
+# --- Remove installation directory ---
+echo "[4/5] Removing ${INSTALL_DIR}..."
+rm -rf "$INSTALL_DIR"
+
+# --- Remove log directory ---
+echo "[5/5] Removing ${LOG_DIR}..."
+rm -rf "$LOG_DIR"
+
+# --- Remove user/group (optional) ---
+read -rp "Remove 'lightman' user and group? [y/N]: " REMOVE_USER
+if [[ "$REMOVE_USER" =~ ^[Yy]$ ]]; then
+  userdel lightman 2>/dev/null || true
+  groupdel lightman 2>/dev/null || true
+  echo "User and group removed."
+fi
+
+echo ""
+echo "=== Uninstallation Complete ==="
+echo ""