Adopt unified installation contract for UNC module

Author: mearvk

modules/unc/install/install.sh

@@ -1,46 +1,20 @@
-#!/bin/bash
-# UNC Chapel Hill™ — Module Install Script
-# Usage: sudo bash install/install.sh
-set -e
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-MOD_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-NWE_ROOT="$(cd "$MOD_ROOT/../.." 2>/dev/null && pwd)"
-[ -f "$NWE_ROOT/scripts/nwe-ports.sh" ] && source "$NWE_ROOT/scripts/nwe-ports.sh"
-
-echo "═══════════════════════════════════════════════════════════════"
-echo " UNC Chapel Hill™ — Module Install"
-echo "═══════════════════════════════════════════════════════════════"
-echo ""
-
-echo "[1/2] Database setup..."
-if [ -f "$MOD_ROOT/servlets/setup-db.sh" ]; then
-    bash "$MOD_ROOT/servlets/setup-db.sh" && echo "  [✓] Database nwe_unc ready" || echo "  [!] Database setup had issues"
-else
-    echo "  [--] No setup-db.sh found"
-fi
-
-echo ""
-echo "[2/2] Configuring firewall..."
-if type nwe_ensure_ufw &>/dev/null; then
-    nwe_ensure_ufw
-    sudo ufw allow 8080/tcp >/dev/null 2>&1 && echo "  [✓] Port 8080 (Tomcat) opened" || true
-    sudo ufw allow 49218/tcp >/dev/null 2>&1 && echo "  [✓] Port 49218 (backend) opened" || true
-else
-    if command -v ufw &>/dev/null; then
-        sudo ufw allow 22/tcp >/dev/null 2>&1
-        sudo ufw allow 8080/tcp >/dev/null 2>&1
-        sudo ufw allow 49218/tcp >/dev/null 2>&1
-        sudo ufw --force enable >/dev/null 2>&1
-        echo "  [✓] UFW ports opened"
-    else
-        echo "  [--] UFW not available — open ports manually"
-    fi
-fi
-
-echo ""
-echo "═══════════════════════════════════════════════════════════════"
-echo " UNC Chapel Hill™ install complete."
-echo " Backend port: 49218"
-echo " Frontend:     http://localhost:8080/california-unc/"
-echo "═══════════════════════════════════════════════════════════════"
+#!/usr/bin/env bash
+# UNC Chapel Hill module installer — follows the NWE Unified Installation Contract.
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+NWE_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
+source "$NWE_ROOT/scripts/install-contract.sh"
+MOD_ROOT="$(nwe_module_root "$SCRIPT_DIR")"
+nwe_verify_module "$MOD_ROOT"
+nwe_install_contract_banner
+nwe_require_command bash
+nwe_step "Database setup"
+if [[ -f "$MOD_ROOT/servlets/setup-db.sh" ]]; then bash "$MOD_ROOT/servlets/setup-db.sh"; else nwe_warn "No setup-db.sh found; database setup skipped."; fi
+nwe_step "Firewall policy"
+if [[ "${NWE_CONFIGURE_FIREWALL:-0}" == "1" ]]; then
+  nwe_source_optional "$NWE_ROOT/scripts/nwe-ports.sh" || nwe_fail "Missing NWE port manager"
+  nwe_ensure_ufw
+  if [[ -n "${NWE_TRUSTED_IP:-}" ]]; then nwe_run_privileged ufw allow from "$NWE_TRUSTED_IP" to any port 49218 proto tcp; else nwe_run_privileged ufw allow 49218/tcp; fi
+else echo "  Firewall unchanged. Set NWE_CONFIGURE_FIREWALL=1 to manage it."; fi
+nwe_verify_path "$MOD_ROOT"
+echo "[OK] UNC Chapel Hill module installation complete. Backend port: 49218"