@xiaoxionga/buzz 2.1.0 → 2.2.1

package/README.md

@@ -38,22 +38,28 @@ Default unit is **minutes**. Add a suffix to override:
 
 ## How It Works
 
-| Platform | Method | Install needed? | Admin needed? |
-|----------|--------|:---------------:|:-------------:|
-| **macOS** | `caffeinate -i` (built-in) | ❌ | ❌ |
-| **Windows** | PowerShell `SendKeys F15` (built-in) | ❌ | ❌ |
-| **Linux** | `xdotool` (pre-installed on most distros) | maybe | ❌ |
+| Platform | Method | Install needed? | Admin needed? | EDR Safe? |
+|----------|--------|:---------------:|:-------------:|:---------:|
+| **macOS** | `caffeinate -i` (built-in) | ❌ | ❌ | ✅ |
+| **Windows** | `SendKeys F15` (built-in, minimal) | ❌ | ❌ | ✅ |
+| **Linux** | `xdotool` (pre-installed) | maybe | ❌ | ✅ |
 
-- **macOS**: Uses Apple's built-in `caffeinate` — not even a mouse jiggle, just cleanly blocks idle sleep.
-- **Windows**: Presses F15 every 30 seconds via PowerShell. No app binds to F15, so it's completely harmless.
-- **Linux**: Moves mouse 1px via `xdotool`.
+### Corporate Safety (Windows)
+
+buzz deliberately uses **only** the most benign method on Windows (`WScript.Shell.SendKeys('{F15}')`) to avoid triggering corporate security software (EDR/DLP/antivirus). It does **NOT** use:
+
+- ❌ `Add-Type` + `DllImport` — flagged as malware technique by CrowdStrike/Defender
+- ❌ `SetThreadExecutionState` via PowerShell — P/Invoke into kernel32.dll triggers EDR
+- ❌ Automated mouse movement — flagged as keylogger behavior
+
+**If corporate GPO still locks your screen**: buzz can't override hard GPO policies. Use a **hardware Mouse Jiggler** instead — a USB device (~¥15 on Taobao) that physically simulates mouse movement. Zero software footprint, zero EDR detection risk.
 
 ## Why buzz?
 
-- **Zero dependencies** — `package.json` has no `dependencies` field. Nothing to break.
-- **No admin required** — perfect for locked-down corporate laptops.
-- **Cross-platform** — macOS, Windows, Linux all supported out of the box.
-- **Clean exit** — `buzz stop` from any terminal kills the running instance.
+- **Zero dependencies** — nothing to break, nothing to audit
+- **No admin required** — perfect for locked-down corporate laptops
+- **EDR-safe** — no suspicious API calls or DLL imports
+- **Cross-platform** — macOS, Windows, Linux all supported
 
 ## Examples
 

package/bin/buzz.js

@@ -36,9 +36,14 @@ USAGE:
   buzz help         Show this help
 
 PLATFORMS:
-  macOS     Uses 'caffeinate' (built-in, zero install)
-  Windows   Uses PowerShell SendKeys (built-in, zero install)
-  Linux     Uses xdotool (if available)
+macOS     Uses 'caffeinate' (built-in, zero install)
+Windows   Uses PowerShell SendKeys F15 (built-in, zero install)
+Linux     Uses xdotool (if available)
+
+CORPORATE WINDOWS NOTE:
+Some corporate GPO policies enforce lock screen regardless of input.
+If buzz doesn't work on your work PC, use a hardware Mouse Jiggler
+(USB device, ~$2 on Taobao) — zero software footprint, zero EDR risk.
 
 EXAMPLES:
   buzz 30           # 30 minutes
@@ -130,12 +135,20 @@ function startCaffeinate(durationMs) {
 }
 
 /**
- * Windows: use PowerShell SendKeys to press F15 every 30s.
- * F15 is harmless — no app binds to it.
- * Zero install, zero admin.
+ * Windows: minimal F15 keystroke via SendKeys
+ * 
+ * DELIBERATELY MINIMAL for corporate safety:
+ * - NO Add-Type / DllImport (triggers EDR alerts — looks like malware)
+ * - NO SetThreadExecutionState via PowerShell (same issue)
+ * - NO mouse movement automation (flagged as keylogger behavior)
+ * 
+ * Only uses WScript.Shell.SendKeys('{F15}') — the most benign method.
+ * F15 has no function in any app, so pressing it is completely harmless.
+ * 
+ * If corporate lock screen still triggers (GPO hard policy), use a
+ * hardware Mouse Jiggler (USB device) instead — zero software footprint.
  */
 function jiggleWindows() {
-  // Single PowerShell invocation that loops every 30s
   const psScript = `
     $wsh = New-Object -ComObject WScript.Shell
     while ($true) {
@@ -234,7 +247,7 @@ function cmdRun(durationMs) {
   console.log(BEE);
 
   const platformLabel = PLATFORM === 'darwin' ? 'macOS caffeinate'
-    : PLATFORM === 'win32' ? 'Windows SendKeys'
+    : PLATFORM === 'win32' ? 'Windows SendKeys F15 (safe mode)'
     : 'Linux xdotool';
 
   if (durationMs) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiaoxionga/buzz",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "🐝 Keep your screen awake — zero dependencies, no admin required",
   "main": "bin/buzz.js",
   "bin": {