lightman-agent 1.0.5 → 1.0.7

package/scripts/launch-kiosk.vbs

@@ -1,101 +1,101 @@
-' LIGHTMAN Kiosk Launcher
-' Runs at user logon AND at system startup to start the kiosk browser.
-' Waits for the agent service to be ready before launching Chrome.
-' If the agent is already managing Chrome, this script exits gracefully.
-
-Set objShell = CreateObject("WScript.Shell")
-Set objFSO = CreateObject("Scripting.FileSystemObject")
-
-' --- Configuration ---
-configPath = "C:\Program Files\Lightman\Agent\agent.config.json"
-maxWaitSeconds = 120  ' Max time to wait for agent service
-checkIntervalMs = 5000 ' Check every 5 seconds
-
-' --- Wait for config file to exist (agent might still be installing) ---
-If Not objFSO.FileExists(configPath) Then
-    WScript.Sleep 10000
-    If Not objFSO.FileExists(configPath) Then
-        WScript.Quit 1
-    End If
-End If
-
-' --- Read config ---
-Set objFile = objFSO.OpenTextFile(configPath, 1)
-jsonText = objFile.ReadAll
-objFile.Close
-
-browserPath = ExtractJsonValue(jsonText, "browserPath")
-defaultUrl = ExtractJsonValue(jsonText, "defaultUrl")
-
-If browserPath = "" Or defaultUrl = "" Then
-    WScript.Quit 1
-End If
-
-' --- Wait for network connectivity ---
-' Try to ping the server (extract hostname from URL)
-waitedMs = 0
-Do While waitedMs < (maxWaitSeconds * 1000)
-    ' Check if Chrome is already running (agent's KioskManager may have launched it)
-    Set objWMI = GetObject("winmgmts:\\.\root\cimv2")
-    Set colProcesses = objWMI.ExecQuery("SELECT ProcessId FROM Win32_Process WHERE Name = 'chrome.exe'")
-    If colProcesses.Count > 0 Then
-        ' Chrome already running - agent is handling it. Exit gracefully.
-        WScript.Quit 0
-    End If
-
-    ' Check if LIGHTMAN service is running
-    Set colServices = objWMI.ExecQuery("SELECT State FROM Win32_Service WHERE DisplayName LIKE 'LIGHTMAN%'")
-    serviceRunning = False
-    For Each svc In colServices
-        If LCase(svc.State) = "running" Then
-            serviceRunning = True
-        End If
-    Next
-
-    If serviceRunning Then
-        ' Service is running - give it a few more seconds to launch Chrome itself
-        WScript.Sleep 15000
-
-        ' Re-check if Chrome appeared (agent launched it)
-        Set colProcesses2 = objWMI.ExecQuery("SELECT ProcessId FROM Win32_Process WHERE Name = 'chrome.exe'")
-        If colProcesses2.Count > 0 Then
-            ' Agent launched Chrome successfully. Exit.
-            WScript.Quit 0
-        End If
-
-        ' Agent is running but hasn't launched Chrome yet - we'll do it
-        Exit Do
-    End If
-
-    WScript.Sleep checkIntervalMs
-    waitedMs = waitedMs + checkIntervalMs
-Loop
-
-' --- Build Chrome kiosk args ---
-chromeArgs = "--kiosk --noerrdialogs --disable-infobars --disable-session-crashed-bubble --no-first-run --no-default-browser-check --start-fullscreen --disable-translate --disable-extensions --autoplay-policy=no-user-gesture-required"
-
-userDataDir = ExtractJsonValue(jsonText, "user-data-dir")
-If userDataDir = "" Then
-    userDataDir = "C:\ProgramData\Lightman\chrome-kiosk"
-End If
-chromeArgs = chromeArgs & " --user-data-dir=""" & userDataDir & """"
-
-' --- Launch Chrome ---
-objShell.Run """" & browserPath & """ " & chromeArgs & " """ & defaultUrl & """", 1, False
-
-' ========================================================
-' Helper: extract a string value from JSON by key
-' ========================================================
-Function ExtractJsonValue(json, key)
-    ExtractJsonValue = ""
-    pos = InStr(json, """" & key & """")
-    If pos = 0 Then Exit Function
-    pos = InStr(pos, json, ":")
-    If pos = 0 Then Exit Function
-    pos = InStr(pos, json, """")
-    If pos = 0 Then Exit Function
-    pos = pos + 1
-    endPos = InStr(pos, json, """")
-    If endPos = 0 Then Exit Function
-    ExtractJsonValue = Mid(json, pos, endPos - pos)
-End Function
+' LIGHTMAN Kiosk Launcher
+' Runs at user logon AND at system startup to start the kiosk browser.
+' Waits for the agent service to be ready before launching Chrome.
+' If the agent is already managing Chrome, this script exits gracefully.
+
+Set objShell = CreateObject("WScript.Shell")
+Set objFSO = CreateObject("Scripting.FileSystemObject")
+
+' --- Configuration ---
+configPath = "C:\Program Files\Lightman\Agent\agent.config.json"
+maxWaitSeconds = 120  ' Max time to wait for agent service
+checkIntervalMs = 5000 ' Check every 5 seconds
+
+' --- Wait for config file to exist (agent might still be installing) ---
+If Not objFSO.FileExists(configPath) Then
+    WScript.Sleep 10000
+    If Not objFSO.FileExists(configPath) Then
+        WScript.Quit 1
+    End If
+End If
+
+' --- Read config ---
+Set objFile = objFSO.OpenTextFile(configPath, 1)
+jsonText = objFile.ReadAll
+objFile.Close
+
+browserPath = ExtractJsonValue(jsonText, "browserPath")
+defaultUrl = ExtractJsonValue(jsonText, "defaultUrl")
+
+If browserPath = "" Or defaultUrl = "" Then
+    WScript.Quit 1
+End If
+
+' --- Wait for network connectivity ---
+' Try to ping the server (extract hostname from URL)
+waitedMs = 0
+Do While waitedMs < (maxWaitSeconds * 1000)
+    ' Check if Chrome is already running (agent's KioskManager may have launched it)
+    Set objWMI = GetObject("winmgmts:\\.\root\cimv2")
+    Set colProcesses = objWMI.ExecQuery("SELECT ProcessId FROM Win32_Process WHERE Name = 'chrome.exe'")
+    If colProcesses.Count > 0 Then
+        ' Chrome already running - agent is handling it. Exit gracefully.
+        WScript.Quit 0
+    End If
+
+    ' Check if LIGHTMAN service is running
+    Set colServices = objWMI.ExecQuery("SELECT State FROM Win32_Service WHERE DisplayName LIKE 'LIGHTMAN%'")
+    serviceRunning = False
+    For Each svc In colServices
+        If LCase(svc.State) = "running" Then
+            serviceRunning = True
+        End If
+    Next
+
+    If serviceRunning Then
+        ' Service is running - give it a few more seconds to launch Chrome itself
+        WScript.Sleep 15000
+
+        ' Re-check if Chrome appeared (agent launched it)
+        Set colProcesses2 = objWMI.ExecQuery("SELECT ProcessId FROM Win32_Process WHERE Name = 'chrome.exe'")
+        If colProcesses2.Count > 0 Then
+            ' Agent launched Chrome successfully. Exit.
+            WScript.Quit 0
+        End If
+
+        ' Agent is running but hasn't launched Chrome yet - we'll do it
+        Exit Do
+    End If
+
+    WScript.Sleep checkIntervalMs
+    waitedMs = waitedMs + checkIntervalMs
+Loop
+
+' --- Build Chrome kiosk args ---
+chromeArgs = "--kiosk --noerrdialogs --disable-infobars --disable-session-crashed-bubble --no-first-run --no-default-browser-check --start-fullscreen --disable-translate --disable-extensions --autoplay-policy=no-user-gesture-required"
+
+userDataDir = ExtractJsonValue(jsonText, "user-data-dir")
+If userDataDir = "" Then
+    userDataDir = "C:\ProgramData\Lightman\chrome-kiosk"
+End If
+chromeArgs = chromeArgs & " --user-data-dir=""" & userDataDir & """"
+
+' --- Launch Chrome ---
+objShell.Run """" & browserPath & """ " & chromeArgs & " """ & defaultUrl & """", 1, False
+
+' ========================================================
+' Helper: extract a string value from JSON by key
+' ========================================================
+Function ExtractJsonValue(json, key)
+    ExtractJsonValue = ""
+    pos = InStr(json, """" & key & """")
+    If pos = 0 Then Exit Function
+    pos = InStr(pos, json, ":")
+    If pos = 0 Then Exit Function
+    pos = InStr(pos, json, """")
+    If pos = 0 Then Exit Function
+    pos = pos + 1
+    endPos = InStr(pos, json, """")
+    If endPos = 0 Then Exit Function
+    ExtractJsonValue = Mid(json, pos, endPos - pos)
+End Function

package/scripts/lightman-agent.logrotate

@@ -1,12 +1,12 @@
-/var/log/lightman/*.log {
-    daily
-    rotate 7
-    compress
-    delaycompress
-    missingok
-    notifempty
-    create 0640 lightman lightman
-    postrotate
-        systemctl reload lightman-agent > /dev/null 2>&1 || true
-    endscript
-}
+/var/log/lightman/*.log {
+    daily
+    rotate 7
+    compress
+    delaycompress
+    missingok
+    notifempty
+    create 0640 lightman lightman
+    postrotate
+        systemctl reload lightman-agent > /dev/null 2>&1 || true
+    endscript
+}

package/scripts/lightman-agent.service

@@ -1,38 +1,38 @@
-[Unit]
-Description=LIGHTMAN Agent - Museum Display Management
-Documentation=https://github.com/sagrkv/lightman-app01
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-User=lightman
-Group=lightman
-WorkingDirectory=/opt/lightman/agent
-ExecStart=/usr/bin/node dist/index.js
-Restart=always
-RestartSec=10
-StartLimitIntervalSec=300
-StartLimitBurst=5
-
-# Environment
-Environment=NODE_ENV=production
-EnvironmentFile=-/opt/lightman/agent/.env
-
-# Security hardening
-ProtectSystem=strict
-ReadWritePaths=/opt/lightman/agent /var/log/lightman /tmp
-PrivateTmp=true
-NoNewPrivileges=true
-ProtectHome=true
-ProtectKernelTunables=true
-ProtectControlGroups=true
-RestrictSUIDSGID=true
-
-# Logging
-StandardOutput=journal
-StandardError=journal
-SyslogIdentifier=lightman-agent
-
-[Install]
-WantedBy=multi-user.target
+[Unit]
+Description=LIGHTMAN Agent - Museum Display Management
+Documentation=https://github.com/sagrkv/lightman-app01
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=lightman
+Group=lightman
+WorkingDirectory=/opt/lightman/agent
+ExecStart=/usr/bin/node dist/index.js
+Restart=always
+RestartSec=10
+StartLimitIntervalSec=300
+StartLimitBurst=5
+
+# Environment
+Environment=NODE_ENV=production
+EnvironmentFile=-/opt/lightman/agent/.env
+
+# Security hardening
+ProtectSystem=strict
+ReadWritePaths=/opt/lightman/agent /var/log/lightman /tmp
+PrivateTmp=true
+NoNewPrivileges=true
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+
+# Logging
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=lightman-agent
+
+[Install]
+WantedBy=multi-user.target

package/scripts/lightman-shell.bat

@@ -1,65 +1,65 @@
-@echo off
-REM ================================================================
-REM LIGHTMAN Shell - Replaces explorer.exe as the Windows shell
-REM ================================================================
-REM SINGLE SOURCE OF TRUTH: agent.config.json
-REM
-REM Boot flow:
-REM   1. Auto-login (no password)
-REM   2. This script runs INSTEAD of explorer.exe
-REM   3. Reads slug + browser from agent.config.json (THE ONLY SOURCE)
-REM   4. Waits for agent service (port 3403)
-REM   5. Launches Chrome fullscreen
-REM   6. If Chrome crashes, relaunches in 3 seconds (infinite loop)
-REM ================================================================
-
+@echo off
+REM ================================================================
+REM LIGHTMAN Shell - Replaces explorer.exe as the Windows shell
+REM ================================================================
+REM SINGLE SOURCE OF TRUTH: agent.config.json
+REM
+REM Boot flow:
+REM   1. Auto-login (no password)
+REM   2. This script runs INSTEAD of explorer.exe
+REM   3. Reads slug + browser from agent.config.json (THE ONLY SOURCE)
+REM   4. Waits for agent service (port 3403)
+REM   5. Launches Chrome fullscreen
+REM   6. If Chrome crashes, relaunches in 3 seconds (infinite loop)
+REM ================================================================
+
 set INSTALL_DIR=C:\Program Files\Lightman\Agent
 set CONFIG_FILE=%INSTALL_DIR%\agent.config.json
 set URL_SIDECAR=C:\ProgramData\Lightman\kiosk-url.txt
 set CHROME_DATA=C:\ProgramData\Lightman\chrome-kiosk
 set LOG_FILE=C:\ProgramData\Lightman\logs\shell.log
-
-REM Ensure directories exist
-if not exist "C:\ProgramData\Lightman\logs" mkdir "C:\ProgramData\Lightman\logs"
-if not exist "%CHROME_DATA%" mkdir "%CHROME_DATA%"
-
-echo [%date% %time%] ===== LIGHTMAN Shell starting ===== >> "%LOG_FILE%"
-
-REM ----------------------------------------------------------------
-REM Read slug and browser from agent.config.json ONLY
-REM No sidecar files, no hardcoded URLs, no confusion.
-REM ----------------------------------------------------------------
-set DEVICE_SLUG=
-set BROWSER=
-set URL=
-
-REM Wait for node.exe to be available
-set NODE_WAIT=0
-:wait_for_node
-    where node >nul 2>&1
-    if %errorlevel%==0 goto node_ready
-    set /a NODE_WAIT+=1
-    if %NODE_WAIT% geq 30 (
-        echo [%date% %time%] ERROR: node.exe not found after 30s >> "%LOG_FILE%"
-        goto use_fallbacks
-    )
-    timeout /t 1 /nobreak >nul
-    goto wait_for_node
-
-:node_ready
-
-REM Read slug from config
-if exist "%CONFIG_FILE%" (
-    for /f "delims=" %%a in ('node -e "try{console.log(JSON.parse(require('fs').readFileSync(String.raw`%CONFIG_FILE%`,'utf8')).deviceSlug)}catch(e){console.log('')}" 2^>nul') do set DEVICE_SLUG=%%a
-)
-
-REM Read browser from config
-if exist "%CONFIG_FILE%" (
-    for /f "delims=" %%a in ('node -e "try{const c=JSON.parse(require('fs').readFileSync(String.raw`%CONFIG_FILE%`,'utf8'));console.log(c.kiosk&&c.kiosk.browserPath||'')}catch(e){console.log('')}" 2^>nul') do set BROWSER=%%a
-)
-
-:use_fallbacks
-
+
+REM Ensure directories exist
+if not exist "C:\ProgramData\Lightman\logs" mkdir "C:\ProgramData\Lightman\logs"
+if not exist "%CHROME_DATA%" mkdir "%CHROME_DATA%"
+
+echo [%date% %time%] ===== LIGHTMAN Shell starting ===== >> "%LOG_FILE%"
+
+REM ----------------------------------------------------------------
+REM Read slug and browser from agent.config.json ONLY
+REM No sidecar files, no hardcoded URLs, no confusion.
+REM ----------------------------------------------------------------
+set DEVICE_SLUG=
+set BROWSER=
+set URL=
+
+REM Wait for node.exe to be available
+set NODE_WAIT=0
+:wait_for_node
+    where node >nul 2>&1
+    if %errorlevel%==0 goto node_ready
+    set /a NODE_WAIT+=1
+    if %NODE_WAIT% geq 30 (
+        echo [%date% %time%] ERROR: node.exe not found after 30s >> "%LOG_FILE%"
+        goto use_fallbacks
+    )
+    timeout /t 1 /nobreak >nul
+    goto wait_for_node
+
+:node_ready
+
+REM Read slug from config
+if exist "%CONFIG_FILE%" (
+    for /f "delims=" %%a in ('node -e "try{console.log(JSON.parse(require('fs').readFileSync(String.raw`%CONFIG_FILE%`,'utf8')).deviceSlug)}catch(e){console.log('')}" 2^>nul') do set DEVICE_SLUG=%%a
+)
+
+REM Read browser from config
+if exist "%CONFIG_FILE%" (
+    for /f "delims=" %%a in ('node -e "try{const c=JSON.parse(require('fs').readFileSync(String.raw`%CONFIG_FILE%`,'utf8'));console.log(c.kiosk&&c.kiosk.browserPath||'')}catch(e){console.log('')}" 2^>nul') do set BROWSER=%%a
+)
+
+:use_fallbacks
+
 REM Build URL from slug (ALWAYS from config, never from sidecar)
 if not "%DEVICE_SLUG%"=="" (
     set URL=http://localhost:3403/display/%DEVICE_SLUG%
@@ -77,47 +77,47 @@ if exist "%URL_SIDECAR%" (
         echo [%date% %time%] Using sidecar URL >> "%LOG_FILE%"
     )
 )
-
-REM Fallback browser
-if "%BROWSER%"=="" (
-    if exist "C:\Program Files\Google\Chrome\Application\chrome.exe" (
-        set "BROWSER=C:\Program Files\Google\Chrome\Application\chrome.exe"
-    ) else if exist "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" (
-        set "BROWSER=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
-    ) else (
-        echo [%date% %time%] ERROR: Chrome not found! >> "%LOG_FILE%"
-        start explorer.exe
-        exit /b 1
-    )
-)
-
-echo [%date% %time%] Browser: %BROWSER% >> "%LOG_FILE%"
-echo [%date% %time%] URL: %URL% >> "%LOG_FILE%"
-
-REM ----------------------------------------------------------------
-REM Wait for agent service (port 3403)
-REM ----------------------------------------------------------------
-echo [%date% %time%] Waiting for port 3403... >> "%LOG_FILE%"
-set WAIT_COUNT=0
-set MAX_WAIT=60
-
-:wait_for_agent
-    netstat -an | findstr ":3403.*LISTENING" >nul 2>&1
-    if %errorlevel%==0 goto agent_ready
-    set /a WAIT_COUNT+=1
-    if %WAIT_COUNT% geq %MAX_WAIT% (
-        echo [%date% %time%] Port 3403 not ready after %MAX_WAIT%s, launching anyway >> "%LOG_FILE%"
-        goto agent_ready
-    )
-    timeout /t 1 /nobreak >nul
-    goto wait_for_agent
-
-:agent_ready
-echo [%date% %time%] Agent ready >> "%LOG_FILE%"
-
-REM ----------------------------------------------------------------
-REM Infinite Chrome loop
-REM ----------------------------------------------------------------
+
+REM Fallback browser
+if "%BROWSER%"=="" (
+    if exist "C:\Program Files\Google\Chrome\Application\chrome.exe" (
+        set "BROWSER=C:\Program Files\Google\Chrome\Application\chrome.exe"
+    ) else if exist "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" (
+        set "BROWSER=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
+    ) else (
+        echo [%date% %time%] ERROR: Chrome not found! >> "%LOG_FILE%"
+        start explorer.exe
+        exit /b 1
+    )
+)
+
+echo [%date% %time%] Browser: %BROWSER% >> "%LOG_FILE%"
+echo [%date% %time%] URL: %URL% >> "%LOG_FILE%"
+
+REM ----------------------------------------------------------------
+REM Wait for agent service (port 3403)
+REM ----------------------------------------------------------------
+echo [%date% %time%] Waiting for port 3403... >> "%LOG_FILE%"
+set WAIT_COUNT=0
+set MAX_WAIT=60
+
+:wait_for_agent
+    netstat -an | findstr ":3403.*LISTENING" >nul 2>&1
+    if %errorlevel%==0 goto agent_ready
+    set /a WAIT_COUNT+=1
+    if %WAIT_COUNT% geq %MAX_WAIT% (
+        echo [%date% %time%] Port 3403 not ready after %MAX_WAIT%s, launching anyway >> "%LOG_FILE%"
+        goto agent_ready
+    )
+    timeout /t 1 /nobreak >nul
+    goto wait_for_agent
+
+:agent_ready
+echo [%date% %time%] Agent ready >> "%LOG_FILE%"
+
+REM ----------------------------------------------------------------
+REM Infinite Chrome loop
+REM ----------------------------------------------------------------
 :loop
     REM Prefer sidecar URL for auth params/device routing; fallback to slug URL.
     set SIDE_URL=
@@ -134,12 +134,12 @@ REM ----------------------------------------------------------------
             )
         )
     )
-
-    echo [%date% %time%] Launching Chrome: %URL% >> "%LOG_FILE%"
-
-    start /wait "" "%BROWSER%" --kiosk --noerrdialogs --disable-infobars --disable-session-crashed-bubble --no-first-run --no-default-browser-check --start-fullscreen --disable-translate --disable-extensions --autoplay-policy=no-user-gesture-required --disable-features=TranslateUI --user-data-dir="%CHROME_DATA%" "%URL%"
-
-    echo [%date% %time%] Chrome exited (code: %errorlevel%). Restarting in 3s... >> "%LOG_FILE%"
-    timeout /t 3 /nobreak >nul
-
-goto loop
+
+    echo [%date% %time%] Launching Chrome: %URL% >> "%LOG_FILE%"
+
+    start /wait "" "%BROWSER%" --kiosk --noerrdialogs --disable-infobars --disable-session-crashed-bubble --no-first-run --no-default-browser-check --start-fullscreen --disable-translate --disable-extensions --autoplay-policy=no-user-gesture-required --disable-features=TranslateUI --user-data-dir="%CHROME_DATA%" "%URL%"
+
+    echo [%date% %time%] Chrome exited (code: %errorlevel%). Restarting in 3s... >> "%LOG_FILE%"
+    timeout /t 3 /nobreak >nul
+
+goto loop

package/scripts/reinstall-windows.ps1

@@ -1,26 +1,26 @@
-#Requires -RunAsAdministrator
-<#
-.SYNOPSIS
-    LIGHTMAN Agent - Reinstall (install-windows.ps1 handles cleanup automatically)
-.EXAMPLE
-    powershell -ExecutionPolicy Bypass -File scripts\reinstall-windows.ps1 -Slug "F-AV04" -Server "http://192.168.1.180:3401" -ShellReplace
-#>
-param(
-    [Parameter(Mandatory=$true)] [string]$Slug,
-    [Parameter(Mandatory=$true)] [string]$Server,
-    [switch]$ShellReplace = $false,
-    [string]$Timezone = "Asia/Kolkata",
-    [switch]$NoReboot = $false
-)
-
-$ScriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
-
-$args = @("-ExecutionPolicy", "Bypass", "-File", "$ScriptDir\install-windows.ps1", "-Slug", $Slug, "-Server", $Server, "-Timezone", $Timezone)
-if ($ShellReplace) { $args += "-ShellReplace" }
-& powershell @args
-
-if (-not $NoReboot) {
-    Write-Host "  Rebooting in 10 seconds... (Ctrl+C to cancel)" -ForegroundColor Yellow
-    Start-Sleep -Seconds 10
-    Restart-Computer -Force
-}
+#Requires -RunAsAdministrator
+<#
+.SYNOPSIS
+    LIGHTMAN Agent - Reinstall (install-windows.ps1 handles cleanup automatically)
+.EXAMPLE
+    powershell -ExecutionPolicy Bypass -File scripts\reinstall-windows.ps1 -Slug "F-AV04" -Server "http://192.168.1.180:3401" -ShellReplace
+#>
+param(
+    [Parameter(Mandatory=$true)] [string]$Slug,
+    [Parameter(Mandatory=$true)] [string]$Server,
+    [switch]$ShellReplace = $false,
+    [string]$Timezone = "Asia/Kolkata",
+    [switch]$NoReboot = $false
+)
+
+$ScriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
+
+$args = @("-ExecutionPolicy", "Bypass", "-File", "$ScriptDir\install-windows.ps1", "-Slug", $Slug, "-Server", $Server, "-Timezone", $Timezone)
+if ($ShellReplace) { $args += "-ShellReplace" }
+& powershell @args
+
+if (-not $NoReboot) {
+    Write-Host "  Rebooting in 10 seconds... (Ctrl+C to cancel)" -ForegroundColor Yellow
+    Start-Sleep -Seconds 10
+    Restart-Computer -Force
+}

package/scripts/restore-desktop.ps1

@@ -1,32 +1,32 @@
-# LIGHTMAN - Restore Windows Desktop
-# Reverses shell replacement: sets explorer.exe back as the Windows shell.
-# Run via RDP with admin account, or from Safe Mode:
-#   powershell -ExecutionPolicy Bypass -File restore-desktop.ps1
-#Requires -RunAsAdministrator
-
-$ErrorActionPreference = "Stop"
-
-Write-Host ""
-Write-Host "=== LIGHTMAN - Restore Windows Desktop ===" -ForegroundColor Cyan
-Write-Host ""
-
-# Restore HKLM shell
-$HKLMPath = "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
-$original = (Get-ItemProperty -Path $HKLMPath -Name "Shell_Original" -ErrorAction SilentlyContinue).Shell_Original
-if ($original) {
-    Set-ItemProperty -Path $HKLMPath -Name "Shell" -Value $original
-    Write-Host "  HKLM shell restored to: $original" -ForegroundColor Green
-} else {
-    Set-ItemProperty -Path $HKLMPath -Name "Shell" -Value "explorer.exe"
-    Write-Host "  HKLM shell restored to: explorer.exe" -ForegroundColor Green
-}
-
-# Remove HKCU shell override
-$HKCUPath = "HKCU:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
-Remove-ItemProperty -Path $HKCUPath -Name "Shell" -ErrorAction SilentlyContinue
-Write-Host "  HKCU shell override removed" -ForegroundColor Green
-
-Write-Host ""
-Write-Host "  Desktop will be restored on next reboot." -ForegroundColor Yellow
-Write-Host "  Run: Restart-Computer" -ForegroundColor Yellow
-Write-Host ""
+# LIGHTMAN - Restore Windows Desktop
+# Reverses shell replacement: sets explorer.exe back as the Windows shell.
+# Run via RDP with admin account, or from Safe Mode:
+#   powershell -ExecutionPolicy Bypass -File restore-desktop.ps1
+#Requires -RunAsAdministrator
+
+$ErrorActionPreference = "Stop"
+
+Write-Host ""
+Write-Host "=== LIGHTMAN - Restore Windows Desktop ===" -ForegroundColor Cyan
+Write-Host ""
+
+# Restore HKLM shell
+$HKLMPath = "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
+$original = (Get-ItemProperty -Path $HKLMPath -Name "Shell_Original" -ErrorAction SilentlyContinue).Shell_Original
+if ($original) {
+    Set-ItemProperty -Path $HKLMPath -Name "Shell" -Value $original
+    Write-Host "  HKLM shell restored to: $original" -ForegroundColor Green
+} else {
+    Set-ItemProperty -Path $HKLMPath -Name "Shell" -Value "explorer.exe"
+    Write-Host "  HKLM shell restored to: explorer.exe" -ForegroundColor Green
+}
+
+# Remove HKCU shell override
+$HKCUPath = "HKCU:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
+Remove-ItemProperty -Path $HKCUPath -Name "Shell" -ErrorAction SilentlyContinue
+Write-Host "  HKCU shell override removed" -ForegroundColor Green
+
+Write-Host ""
+Write-Host "  Desktop will be restored on next reboot." -ForegroundColor Yellow
+Write-Host "  Run: Restart-Computer" -ForegroundColor Yellow
+Write-Host ""