@biklitime/biklimaster 1.1.9 → 1.1.11

package/bin/biklimaster.js

@@ -33,34 +33,14 @@ const expectedHashes = {
 };
 
 const resultArgument = process.argv.find(argument => argument.startsWith('--result-file='));
-const resultFile = resultArgument ? resultArgument.slice('--result-file='.length).replace(/^"|"$/g, '') : '';
+const resultFile = resultArgument ? resultArgument.slice('--result-file='.length) : '';
 if (resultFile) {
-  const writeResult = (...items) => {
-    try {
-      fs.appendFileSync(resultFile, util.format(...items) + os.EOL, 'utf8');
-    } catch {}
-  };
+  const writeResult = (...items) => fs.appendFileSync(resultFile, util.format(...items) + os.EOL, 'utf8');
   console.log = writeResult;
   console.error = writeResult;
   console.warn = writeResult;
 }
 
-const envFileArgument = process.argv.find(argument => argument.startsWith('--env-file='));
-const envFile = envFileArgument ? envFileArgument.slice('--env-file='.length).replace(/^"|"$/g, '') : '';
-if (envFile && fs.existsSync(envFile)) {
-  try {
-    const passedEnv = JSON.parse(fs.readFileSync(envFile, 'utf8'));
-    for (const [key, value] of Object.entries(passedEnv)) {
-      if (value !== undefined && value !== null) {
-        process.env[key] = String(value);
-      }
-    }
-  } catch {
-    // Ignore invalid env file
-  }
-  try { fs.rmSync(envFile, { force: true }); } catch {}
-}
-
 function fail(message, exitCode = 1) {
   const error = new Error(message);
   error.exitCode = exitCode;
@@ -93,7 +73,7 @@ function isAdministrator() {
     `$principal=New-Object Security.Principal.WindowsPrincipal($identity)`,
     `Write-Output $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)`
   ].join(';');
-  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script], {
+  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script], {
     allowFailure: true
   });
   return result.status === 0 && /^true$/i.test(result.stdout.trim());
@@ -107,31 +87,13 @@ function elevateAndRun(command) {
   if (process.argv.includes('--elevated')) fail('Windows did not grant administrator rights.');
   console.log('Bikli Master needs administrator access. Approve the Windows UAC prompt...');
   const logPath = path.join(os.tmpdir(), `biklimaster-elevated-${randomUUID()}.log`);
-  const envPath = path.join(os.tmpdir(), `biklimaster-env-${randomUUID()}.json`);
-
-  const envToForward = {};
-  for (const [k, v] of Object.entries(process.env)) {
-    if (k.startsWith('BIKLIMASTER_') && v) envToForward[k] = v;
-  }
-  const hasEnv = Object.keys(envToForward).length > 0;
-  if (hasEnv) {
-    fs.writeFileSync(envPath, JSON.stringify(envToForward), { encoding: 'utf8', mode: 0o600 });
-  }
-
   const script = [
     `$node=${powershellLiteral(process.execPath)}`,
     `$target=${powershellLiteral(path.resolve(__filename))}`,
     `$result=${powershellLiteral(logPath)}`,
-    `$envFile=${powershellLiteral(hasEnv ? envPath : '')}`,
-    `$arguments='"'+$target+'" ${command} --elevated "--result-file='+$result+'"'+(if($envFile){' "--env-file='+$envFile+'"'}else{''})`,
-    `try {`,
-    `  $process=Start-Process -FilePath $node -ArgumentList $arguments -Verb RunAs -WindowStyle Hidden -Wait -PassThru`,
-    `  if($null -eq $process -or $null -eq $process.ExitCode){exit 1}`,
-    `  exit $process.ExitCode`,
-    `} catch {`,
-    `  Write-Error $_.Exception.Message`,
-    `  exit 1`,
-    `}`
+    `$arguments='"'+$target+'" ${command} --elevated "--result-file='+$result+'"'`,
+    `$process=Start-Process -FilePath $node -ArgumentList $arguments -Verb RunAs -WindowStyle Hidden -Wait -PassThru`,
+    `exit $process.ExitCode`
   ].join(';');
   const result = run(powershell, [
     '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script
@@ -141,9 +103,6 @@ function elevateAndRun(command) {
     elevatedOutput = fs.readFileSync(logPath, 'utf8').trim();
     fs.rmSync(logPath, { force: true });
   }
-  if (hasEnv && fs.existsSync(envPath)) {
-    fs.rmSync(envPath, { force: true });
-  }
   if (result.status !== 0) {
     const details = [elevatedOutput, result.stdout, result.stderr].filter(Boolean).join(os.EOL).trim();
     fail(`Administrator elevation was cancelled or installation failed.${details ? `\n${details}` : ''}`);
@@ -167,29 +126,17 @@ function verifyPayload() {
 
 function installedBikliPath() {
   const candidates = [
-    path.join(process.env.ProgramW6432 || 'C:\\Program Files', 'Bikli', 'Bikli.exe'),
     path.join(process.env.ProgramFiles || 'C:\\Program Files', 'Bikli', 'Bikli.exe'),
-    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Bikli', 'Bikli.exe'),
-    path.join(process.env.LOCALAPPDATA || 'C:\\Users\\Default\\AppData\\Local', 'Programs', 'Bikli', 'Bikli.exe'),
-    path.join(process.env.USERPROFILE || 'C:\\Users\\Default', 'AppData', 'Local', 'Programs', 'Bikli', 'Bikli.exe')
+    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Bikli', 'Bikli.exe')
   ];
-  const found = candidates.find(candidate => fs.existsSync(candidate));
-  if (found) return found;
-  try {
-    const whereResult = spawnSync('where.exe', ['bikli.exe'], { encoding: 'utf8', windowsHide: true });
-    if (whereResult.status === 0 && whereResult.stdout) {
-      const firstLine = whereResult.stdout.trim().split(/\r?\n/)[0];
-      if (firstLine && fs.existsSync(firstLine)) return firstLine;
-    }
-  } catch {}
-  return '';
+  return candidates.find(candidate => fs.existsSync(candidate)) || '';
 }
 
 function fileVersion(file) {
   if (!file) return '';
   const escaped = file.replace(/'/g, "''");
   const script = `(Get-Item -LiteralPath '${escaped}').VersionInfo.FileVersion`;
-  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script], {
+  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script], {
     allowFailure: true
   });
   return result.status === 0 ? result.stdout.trim() : '';
@@ -203,16 +150,7 @@ function installBikli() {
   }
   console.log(`Installing Bikli CLI ${expectedBikliVersion} silently...`);
   run(bikliInstaller, ['/S'], { cwd: payloadDirectory });
-  let installed = installedBikliPath();
-  if (!installed) {
-    const start = Date.now();
-    const waitBuffer = new Int32Array(new SharedArrayBuffer(4));
-    while (Date.now() - start < 10000) {
-      installed = installedBikliPath();
-      if (installed) break;
-      Atomics.wait(waitBuffer, 0, 0, 500);
-    }
-  }
+  const installed = installedBikliPath();
   if (!installed) fail('Bikli CLI installer completed but Bikli.exe was not found.', 5);
   console.log(`Bikli CLI installed: ${fileVersion(installed) || 'version unknown'}`);
 }
@@ -262,23 +200,15 @@ function generatedAccountPassword() {
 }
 
 function configuredAdministratorPassword() {
-  if (!fs.existsSync(packageConfigFile)) return '';
-  try {
-    const config = JSON.parse(fs.readFileSync(packageConfigFile, 'utf8'));
-    return typeof config.administratorPassword === 'string' ? config.administratorPassword.trim() : '';
-  } catch (error) {
-    fail(`Could not parse config.json: ${error.message}`);
-  }
+  if (!fs.existsSync(packageConfigFile)) fail('Missing package configuration file: config.json');
+  const config = JSON.parse(fs.readFileSync(packageConfigFile, 'utf8'));
+  return typeof config.administratorPassword === 'string' ? config.administratorPassword : '';
 }
 
 function configuredBikliKey() {
   if (!fs.existsSync(packageConfigFile)) return '';
-  try {
-    const config = JSON.parse(fs.readFileSync(packageConfigFile, 'utf8'));
-    return typeof config.bikliKey === 'string' ? config.bikliKey.trim() : '';
-  } catch (error) {
-    fail(`Could not parse config.json: ${error.message}`);
-  }
+  const config = JSON.parse(fs.readFileSync(packageConfigFile, 'utf8'));
+  return typeof config.bikliKey === 'string' ? config.bikliKey.trim() : '';
 }
 
 function setupBikliKey() {
@@ -316,30 +246,16 @@ function saveAccountCredentials(username, password) {
   ]);
 }
 
-function savedAccountUsername() {
-  if (!fs.existsSync(credentialsFile)) return '';
-  try {
-    const credentials = JSON.parse(fs.readFileSync(credentialsFile, 'utf8'));
-    return typeof credentials.username === 'string' ? credentials.username.trim() : '';
-  } catch {
-    return '';
-  }
-}
-
 function showAccountCredentials() {
   requireWindows();
   if (!isAdministrator()) return elevateAndRun('credentials');
   if (!fs.existsSync(credentialsFile)) {
     fail('No saved password is available. The built-in Administrator account may already have been enabled.');
   }
-  try {
-    const credentials = JSON.parse(fs.readFileSync(credentialsFile, 'utf8'));
-    console.log(`Username: ${credentials.username || 'unknown'}`);
-    console.log(`Password: ${credentials.password || 'unknown'}`);
-    console.log(`Stored for Administrators only: ${credentialsFile}`);
-  } catch (error) {
-    fail(`Could not read credentials file: ${error.message}`);
-  }
+  const credentials = JSON.parse(fs.readFileSync(credentialsFile, 'utf8'));
+  console.log(`Username: ${credentials.username}`);
+  console.log(`Password: ${credentials.password}`);
+  console.log(`Stored for Administrators only: ${credentialsFile}`);
 }
 
 function createRdpAdministrator() {
@@ -348,39 +264,29 @@ function createRdpAdministrator() {
 
   const requestedPassword = process.env.BIKLIMASTER_USER_PASSWORD || configuredAdministratorPassword();
   const accountPassword = requestedPassword || generatedAccountPassword();
-  const savedUser = savedAccountUsername();
   const script = [
     `$ErrorActionPreference='Stop'`,
     `$password=$env:BIKLIMASTER_ACCOUNT_PASSWORD`,
-    `$savedUser=$env:BIKLIMASTER_SAVED_USERNAME`,
     `$secure=ConvertTo-SecureString $password -AsPlainText -Force`,
     `$groupSids=@(${powershellLiteral(administratorsGroupSid)},${powershellLiteral(remoteDesktopUsersGroupSid)})`,
     `$builtIn=Get-LocalUser | Where-Object {$_.SID.Value -match '-500$'} | Select-Object -First 1`,
     `if($null -eq $builtIn){throw 'Built-in Administrator account (RID 500) was not found'}`,
     `$builtInWasDisabled=-not $builtIn.Enabled`,
-    `$managedUser=$null`,
-    `if($savedUser){$managedUser=Get-LocalUser -Name $savedUser -ErrorAction SilentlyContinue}`,
-    `if($null -eq $managedUser){$managedUser=Get-LocalUser | Where-Object {$_.Description -eq 'Local administrator created by Bikli Master'} | Select-Object -First 1}`,
     `$target=$null;$action='';$createdNew=$false;$enabledBuiltIn=$false;$passwordChanged=$false`,
-    `if($builtInWasDisabled){Set-LocalUser -Name $builtIn.Name -Password $secure;Unlock-LocalUser -Name $builtIn.Name -ErrorAction SilentlyContinue;Enable-LocalUser -Name $builtIn.Name;$target=Get-LocalUser -SID $builtIn.SID;$enabledBuiltIn=$true;$passwordChanged=$true;$action='enabled-builtin'}elseif($null -ne $managedUser){$target=$managedUser;if($password){Set-LocalUser -Name $target.Name -Password $secure -ErrorAction SilentlyContinue;$passwordChanged=$true};$action='reused-managed'}else{$admin=Get-LocalUser -Name 'admin' -ErrorAction SilentlyContinue;if($null -eq $admin){New-LocalUser -Name 'admin' -Password $secure -FullName 'admin' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'admin';$createdNew=$true;$passwordChanged=$true;$action='created-admin'}else{$existingUser=Get-LocalUser -Name 'user' -ErrorAction SilentlyContinue;if($null -eq $existingUser){New-LocalUser -Name 'user' -Password $secure -FullName 'user' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'user';$createdNew=$true;$passwordChanged=$true;$action='created-user'}else{$target=$existingUser;$action='exists-user'}}}`,
-    `if(-not $target.Enabled){Unlock-LocalUser -Name $target.Name -ErrorAction SilentlyContinue;Enable-LocalUser -Name $target.Name;$target=Get-LocalUser -SID $target.SID}`,
-    `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name -ErrorAction SilentlyContinue | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){Add-LocalGroupMember -Group $group.Name -Member $target.Name}}`,
+    `if($builtInWasDisabled){Set-LocalUser -Name $builtIn.Name -Password $secure;Enable-LocalUser -Name $builtIn.Name;$target=Get-LocalUser -SID $builtIn.SID;$enabledBuiltIn=$true;$passwordChanged=$true;$action='enabled-builtin'}else{$admin=Get-LocalUser -Name 'admin' -ErrorAction SilentlyContinue;if($null -eq $admin){New-LocalUser -Name 'admin' -Password $secure -FullName 'admin' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'admin';$createdNew=$true;$passwordChanged=$true;$action='created-admin'}else{$existingUser=Get-LocalUser -Name 'user' -ErrorAction SilentlyContinue;if($null -eq $existingUser){New-LocalUser -Name 'user' -Password $secure -FullName 'user' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'user';$createdNew=$true;$passwordChanged=$true;$action='created-user'}else{$target=$existingUser;$action='exists-user'}}}`,
+    `if(-not $target.Enabled){Enable-LocalUser -Name $target.Name;$target=Get-LocalUser -SID $target.SID}`,
+    `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){Add-LocalGroupMember -Group $group.Name -Member $target}}`,
     `$verified=@()`,
-    `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name -ErrorAction SilentlyContinue | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){throw ('Account is not a member of '+$group.Name)};$verified+=$group.Name}`,
+    `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){throw ('Account is not a member of '+$group.Name)};$verified+=$group.Name}`,
     `$userListKey='HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\SpecialAccounts\\UserList'`,
-    `$specialAccountsKey='HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\SpecialAccounts'`,
-    `if(-not(Test-Path $specialAccountsKey)){New-Item -Path $specialAccountsKey -Force | Out-Null}`,
-    `if(-not(Test-Path $userListKey)){New-Item -Path $userListKey -Force | Out-Null}`,
-    `$hideProp=Get-ItemProperty -Path $userListKey -Name $target.Name -ErrorAction SilentlyContinue`,
-    `if($null -eq $hideProp -or $null -eq $hideProp.($target.Name)){Set-ItemProperty -Path $userListKey -Name $target.Name -Value 0 -Type DWord -Force | Out-Null;$alreadyHidden=$false}elseif($hideProp.($target.Name) -ne 0){Set-ItemProperty -Path $userListKey -Name $target.Name -Value 0 -Type DWord -Force | Out-Null;$alreadyHidden=$false}else{$alreadyHidden=$true}`,
-    `if((Get-ItemProperty -Path $userListKey -Name $target.Name -ErrorAction SilentlyContinue).($target.Name) -ne 0){throw ('Could not hide '+$target.Name+' from the sign-in screen')}`,
+    `$hideEntry=Get-ItemProperty -Path $userListKey -Name $target.Name -ErrorAction SilentlyContinue`,
+    `if($null -eq $hideEntry){New-Item -Path $userListKey -Force | Out-Null;New-ItemProperty -Path $userListKey -Name $target.Name -PropertyType DWord -Value 0 -Force | Out-Null;if((Get-ItemPropertyValue -Path $userListKey -Name $target.Name) -ne 0){throw ('Could not hide '+$target.Name+' from the sign-in screen')};$alreadyHidden=$false}else{$alreadyHidden=$true}`,
     `[PSCustomObject]@{Name=$target.Name;BuiltInName=$builtIn.Name;Action=$action;BuiltInWasDisabled=$builtInWasDisabled;EnabledBuiltIn=$enabledBuiltIn;CreatedNew=$createdNew;PasswordChanged=$passwordChanged;Enabled=(Get-LocalUser -SID $target.SID).Enabled;Groups=$verified;HiddenUser=$target.Name;AlreadyHidden=$alreadyHidden} | ConvertTo-Json -Compress`
   ].join(';');
-  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script], {
+  const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script], {
     env: {
       ...process.env,
-      BIKLIMASTER_ACCOUNT_PASSWORD: accountPassword,
-      BIKLIMASTER_SAVED_USERNAME: savedUser
+      BIKLIMASTER_ACCOUNT_PASSWORD: accountPassword
     }
   });
   const account = JSON.parse(result.stdout.trim());
@@ -393,8 +299,7 @@ function createRdpAdministrator() {
     const message = {
       'enabled-builtin': `Built-in Administrator was disabled; set the password and enabled it: ${account.Name}`,
       'created-admin': `Built-in Administrator is already enabled and left untouched; created hidden admin account: ${account.Name}`,
-      'created-user': `Built-in Administrator and admin already exist and were left untouched; created hidden account: ${account.Name}`,
-      'reused-managed': `Verified existing Bikli Master administrator account: ${account.Name}`
+      'created-user': `Built-in Administrator and admin already exist and were left untouched; created hidden account: ${account.Name}`
     }[account.Action] || `Configured account: ${account.Name}`;
     console.log(message);
     console.log(`Password: ${accountPassword}`);
@@ -433,7 +338,7 @@ function status() {
   const wrapper = runWrapper(['status'], { allowFailure: true });
   if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());
   if (wrapper.stderr.trim()) console.error(wrapper.stderr.trim());
-  process.exitCode = Boolean(bikli) && wrapper.status === 0 ? 0 : 2;
+  process.exitCode = bikli && wrapper.status === 0 ? 0 : 2;
 }
 
 function selfTest() {
@@ -485,7 +390,7 @@ function main() {
   if (command === 'setup-key') return setupBikliKey();
   if (command === 'credentials') return showAccountCredentials();
   if (command === 'status') return status();
-  if (command === 'self-test' || command === 'test') return selfTest();
+  if (command === 'self-test') return selfTest();
   if (command === 'elevation-self-test') return elevateAndRun('self-test');
   if (command === 'wrapper') {
     const result = runWrapper(process.argv.slice(3), { inherit: true, allowFailure: true });

package/lib/bikliwrapper.js

@@ -17,16 +17,13 @@ try {
 const runningAsSea = Boolean(seaApi && typeof seaApi.isSea === 'function' && seaApi.isSea());
 
 const resultFileArgument = process.argv.find(argument => argument.startsWith('--result-file='));
-const resultFile = resultFileArgument ? resultFileArgument.slice('--result-file='.length).replace(/^"|"$/g, '') : '';
+const resultFile = resultFileArgument ? resultFileArgument.slice('--result-file='.length) : '';
 if (resultFile) {
   const writeResult = (...items) => {
-    try {
-      fs.appendFileSync(resultFile, util.format(...items) + os.EOL, 'utf8');
-    } catch {}
+    fs.appendFileSync(resultFile, util.format(...items) + os.EOL, 'utf8');
   };
   console.log = writeResult;
   console.error = writeResult;
-  console.warn = writeResult;
 }
 
 const packageRoot = path.resolve(__dirname, '..');
@@ -61,8 +58,14 @@ const logonPolicyKey = 'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Poli
 
 const requestedSettings = [
   { key: terminalServerKey, name: 'fDenyTSConnections', value: 0, label: 'Remote Desktop enabled' },
-  { key: terminalServerKey, name: 'fSingleSessionPerUser', value: 1, label: 'Single session per user' },
+  { key: terminalServerKey, name: 'fSingleSessionPerUser', value: 0, label: 'Multiple sessions allowed' },
+  { key: terminalServerKey, name: 'TSAppCompat', value: 1, label: 'Terminal Server application compatibility' },
   { key: terminalServerKey, name: 'HonorLegacySettings', value: 0, label: 'Custom programs disabled' },
+  { key: shadowPolicyKey, name: 'fSingleSessionPerUser', value: 0, label: 'Policy multiple sessions allowed' },
+  { key: shadowPolicyKey, name: 'fDenyTSConnections', value: 0, label: 'Policy Remote Desktop enabled' },
+  { key: shadowPolicyKey, name: 'MaxInstanceCount', value: 999999, label: 'Policy unlimited connections' },
+  { key: rdpTcpKey, name: 'fSingleSessionPerUser', value: 0, label: 'RDP-Tcp multiple sessions allowed' },
+  { key: rdpTcpKey, name: 'MaxInstanceCount', value: 999999, label: 'RDP-Tcp unlimited connections' },
   { key: rdpTcpKey, name: 'PortNumber', value: 3389, label: 'RDP port 3389' },
   { key: rdpTcpKey, name: 'SecurityLayer', value: 1, label: 'Default RDP Authentication' },
   { key: rdpTcpKey, name: 'UserAuthentication', value: 0, label: 'Network Level Authentication disabled' },
@@ -82,7 +85,6 @@ function run(executable, args, options = {}) {
     cwd: options.cwd || packageRoot,
     encoding: 'utf8',
     windowsHide: true,
-    env: options.env || process.env,
     stdio: options.inherit ? 'inherit' : 'pipe'
   });
   if (result.error) fail(`Could not run ${path.basename(executable)}: ${result.error.message}`);
@@ -103,7 +105,7 @@ function isAdministrator() {
     `$principal=New-Object Security.Principal.WindowsPrincipal($identity)`,
     `Write-Output $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)`
   ].join(';');
-  const result = run(powershellPath, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script], {
+  const result = run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script], {
     allowFailure: true
   });
   return result.status === 0 && /^true$/i.test(result.stdout.trim());
@@ -128,14 +130,8 @@ function elevateAndRun(command) {
     runningAsSea
       ? `$arguments='${command} --elevated "--result-file='+$result+'"'`
       : `$arguments='"'+$target+'" ${command} --elevated "--result-file='+$result+'"'`,
-    `try {`,
-    `  $process=Start-Process -FilePath $node -ArgumentList $arguments -Verb RunAs -WindowStyle Hidden -Wait -PassThru`,
-    `  if($null -eq $process -or $null -eq $process.ExitCode){exit 1}`,
-    `  exit $process.ExitCode`,
-    `} catch {`,
-    `  Write-Error $_.Exception.Message`,
-    `  exit 1`,
-    `}`
+    `$process=Start-Process -FilePath $node -ArgumentList $arguments -Verb RunAs -WindowStyle Hidden -Wait -PassThru`,
+    `exit $process.ExitCode`
   ].join(';');
   const result = run(powershellPath, [
     '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', elevationScript
@@ -158,7 +154,7 @@ function getTermsrvVersion() {
     `$v=[Diagnostics.FileVersionInfo]::GetVersionInfo($env:SystemRoot+'\\System32\\termsrv.dll')`,
     `Write-Output ($v.FileMajorPart.ToString()+'.'+$v.FileMinorPart+'.'+$v.FileBuildPart+'.'+$v.FilePrivatePart)`
   ].join(';');
-  const result = run(powershellPath, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script]);
+  const result = run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script]);
   const version = result.stdout.trim();
   if (!/^\d+\.\d+\.\d+\.\d+$/.test(version)) fail(`Could not determine the Terminal Services version: ${version}`);
   return version;
@@ -174,7 +170,7 @@ function queryRegistryValue(key, name) {
   const result = run(path.join(system32, 'reg.exe'), ['query', key, '/v', name, '/reg:64'], { allowFailure: true });
   if (result.status !== 0) return null;
   const match = result.stdout.match(new RegExp(`^\\s*${name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s+REG_\\w+\\s+(.+)$`, 'im'));
-  return match ? match[1].trim().replace(/^"(.*)"$/, '$1') : null;
+  return match ? match[1].trim() : null;
 }
 
 function queryDword(key, name) {
@@ -186,10 +182,8 @@ function queryDword(key, name) {
 }
 
 function expandWindowsEnvironment(value) {
-  if (!value) return '';
-  const unquoted = value.replace(/^"(.*)"$/, '$1').trim();
   const environment = new Map(Object.entries(process.env).map(([key, item]) => [key.toLowerCase(), item]));
-  return unquoted.replace(/%([^%]+)%/g, (whole, name) => environment.get(name.toLowerCase()) || whole);
+  return value.replace(/%([^%]+)%/g, (whole, name) => environment.get(name.toLowerCase()) || whole);
 }
 
 function detectInstallation(version) {
@@ -208,7 +202,6 @@ function detectInstallation(version) {
 
 function applyRequestedSettings() {
   let changed = false;
-  run(path.join(system32, 'sc.exe'), ['config', 'TermService', 'start=', 'auto'], { allowFailure: true });
   for (const setting of requestedSettings) {
     const oldValue = queryDword(setting.key, setting.name);
     if (oldValue !== setting.value) {
@@ -226,10 +219,9 @@ function ensureFirewallRules() {
   const script = [
     `$ErrorActionPreference='Stop'`,
     `$rules=@(@{Name='BikliWrapper-RDP-TCP';Protocol='TCP'},@{Name='BikliWrapper-RDP-UDP';Protocol='UDP'})`,
-    `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}`,
-    `Enable-NetFirewallRule -DisplayGroup 'Remote Desktop' -ErrorAction SilentlyContinue | Out-Null`
+    `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}`
   ].join(';');
-  run(powershellPath, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script]);
+  run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script]);
 }
 
 function runInstaller(argument) {
@@ -302,40 +294,25 @@ function install() {
   if (!installation.installed) {
     console.log('Installing RDP Wrapper silently...');
     runInstaller('-i');
-    installation = detectInstallation(version);
-    const targetIni = installation.installedIniPath ||
-      path.join(process.env.ProgramFiles || 'C:\\Program Files', 'RDP Wrapper', 'rdpwrap.ini');
-    if (!installation.installedSupported || !fs.existsSync(targetIni)) {
-      if (fs.existsSync(path.dirname(targetIni))) {
-        fs.copyFileSync(bundledIniPath, targetIni);
+  } else if (!installation.installedSupported) {
+    console.log('Updating compatibility data silently...');
+    const backupPath = `${installation.installedIniPath}.bikli-backup`;
+    if (fs.existsSync(installation.installedIniPath)) fs.copyFileSync(installation.installedIniPath, backupPath);
+    fs.copyFileSync(bundledIniPath, installation.installedIniPath);
+    try {
+      runInstaller('-r');
+    } catch (error) {
+      if (fs.existsSync(backupPath)) {
+        fs.copyFileSync(backupPath, installation.installedIniPath);
         runInstaller('-r');
       }
+      throw error;
     }
+  } else if (settingsChanged || !serviceIsRunning()) {
+    console.log('Applying defaults and restarting Remote Desktop Services...');
+    runInstaller('-r');
   } else {
-    const iniNeedsUpdate = installation.installed && installation.installedIniPath &&
-      fs.existsSync(installation.installedIniPath) &&
-      fs.readFileSync(bundledIniPath, 'utf8') !== fs.readFileSync(installation.installedIniPath, 'utf8');
-
-    if (!installation.installedSupported || iniNeedsUpdate) {
-      console.log('Updating compatibility data silently...');
-      const backupPath = `${installation.installedIniPath}.bikli-backup`;
-      if (fs.existsSync(installation.installedIniPath)) fs.copyFileSync(installation.installedIniPath, backupPath);
-      fs.copyFileSync(bundledIniPath, installation.installedIniPath);
-      try {
-        runInstaller('-r');
-      } catch (error) {
-        if (fs.existsSync(backupPath)) {
-          fs.copyFileSync(backupPath, installation.installedIniPath);
-          runInstaller('-r');
-        }
-        throw error;
-      }
-    } else if (settingsChanged || !serviceIsRunning()) {
-      console.log('Applying defaults and restarting Remote Desktop Services...');
-      runInstaller('-r');
-    } else {
-      console.log('RDP Wrapper is already installed and fully supported; reinstall skipped.');
-    }
+    console.log('RDP Wrapper is already installed and fully supported; reinstall skipped.');
   }
 
   waitForServiceAndListener();
@@ -398,7 +375,7 @@ function main() {
       status.listenerListening && status.defaultsApplied ? 0 : 2;
     return;
   }
-  if (command === 'self-test' || command === 'test') return selfTest();
+  if (command === 'self-test') return selfTest();
   if (command === 'elevation-self-test') return elevateAndRun('self-test');
   if (command === 'help' || command === '--help' || command === '-h') return showHelp();
   fail(`Unknown command: ${command}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biklitime/biklimaster",
-  "version": "1.1.9",
+  "version": "1.1.11",
   "description": "Internal Windows installer for Bikli CLI and Bikli Wrapper",
   "license": "BSD-3-Clause",
   "publishConfig": {
@@ -11,8 +11,7 @@
   ],
   "bin": {
     "biklimaster": "bin/biklimaster.js",
-    "bikliwrapper": "lib/bikliwrapper.js",
-    "bikli": "bin/bikli.js"
+    "bikliwrapper": "lib/bikliwrapper.js"
   },
   "files": [
     "bin",

package/bin/bikli.js

@@ -1,44 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const { spawnSync } = require('child_process');
-
-function installedBikliPath() {
-  const candidates = [
-    path.join(process.env.ProgramW6432 || 'C:\\Program Files', 'Bikli', 'Bikli.exe'),
-    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'Bikli', 'Bikli.exe'),
-    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Bikli', 'Bikli.exe'),
-    path.join(process.env.LOCALAPPDATA || 'C:\\Users\\Default\\AppData\\Local', 'Programs', 'Bikli', 'Bikli.exe'),
-    path.join(process.env.USERPROFILE || 'C:\\Users\\Default', 'AppData', 'Local', 'Programs', 'Bikli', 'Bikli.exe')
-  ];
-  const found = candidates.find(candidate => fs.existsSync(candidate));
-  if (found) return found;
-  try {
-    const whereResult = spawnSync('where.exe', ['bikli.exe'], { encoding: 'utf8', windowsHide: true });
-    if (whereResult.status === 0 && whereResult.stdout) {
-      const firstLine = whereResult.stdout.trim().split(/\r?\n/)[0];
-      if (firstLine && fs.existsSync(firstLine)) return firstLine;
-    }
-  } catch {}
-  return '';
-}
-
-const bikliExe = installedBikliPath();
-if (!bikliExe) {
-  console.error('Bikli CLI is not installed. Run "biklimaster install" to install it.');
-  process.exit(1);
-}
-
-const result = spawnSync(bikliExe, process.argv.slice(2), {
-  stdio: 'inherit',
-  windowsHide: false
-});
-
-if (result.error) {
-  console.error(`Failed to run Bikli CLI: ${result.error.message}`);
-  process.exit(1);
-}
-
-process.exit(result.status === null ? 1 : result.status);