@xiaoxionga/buzz 2.2.0 → 2.2.1

package/README.md

@@ -38,22 +38,28 @@ Default unit is **minutes**. Add a suffix to override:
 
 ## How It Works
 
-| Platform | Method | Install needed? | Admin needed? |
-|----------|--------|:---------------:|:-------------:|
-| **macOS** | `caffeinate -i` (built-in) | ❌ | ❌ |
-| **Windows** | `SetThreadExecutionState` + mouse jiggle (built-in) | ❌ | ❌ |
-| **Linux** | `xdotool` (pre-installed on most distros) | maybe | ❌ |
+| Platform | Method | Install needed? | Admin needed? | EDR Safe? |
+|----------|--------|:---------------:|:-------------:|:---------:|
+| **macOS** | `caffeinate -i` (built-in) | ❌ | ❌ | ✅ |
+| **Windows** | `SendKeys F15` (built-in, minimal) | ❌ | ❌ | ✅ |
+| **Linux** | `xdotool` (pre-installed) | maybe | ❌ | ✅ |
 
-- **macOS**: Uses Apple's built-in `caffeinate` — not even a mouse jiggle, just cleanly blocks idle sleep.
-- **Windows**: Triple strategy — `SetThreadExecutionState` (official Windows API, same as YouTube/PowerPoint use to prevent screen sleep) + mouse jiggle 1px every 30s + F15 keystroke as backup. Corporate lock screen policies that ignore synthetic keystrokes are handled by the real mouse movement.
-- **Linux**: Moves mouse 1px via `xdotool`.
+### Corporate Safety (Windows)
+
+buzz deliberately uses **only** the most benign method on Windows (`WScript.Shell.SendKeys('{F15}')`) to avoid triggering corporate security software (EDR/DLP/antivirus). It does **NOT** use:
+
+- ❌ `Add-Type` + `DllImport` — flagged as malware technique by CrowdStrike/Defender
+- ❌ `SetThreadExecutionState` via PowerShell — P/Invoke into kernel32.dll triggers EDR
+- ❌ Automated mouse movement — flagged as keylogger behavior
+
+**If corporate GPO still locks your screen**: buzz can't override hard GPO policies. Use a **hardware Mouse Jiggler** instead — a USB device (~¥15 on Taobao) that physically simulates mouse movement. Zero software footprint, zero EDR detection risk.
 
 ## Why buzz?
 
-- **Zero dependencies** — `package.json` has no `dependencies` field. Nothing to break.
-- **No admin required** — perfect for locked-down corporate laptops.
-- **Cross-platform** — macOS, Windows, Linux all supported out of the box.
-- **Clean exit** — `buzz stop` from any terminal kills the running instance.
+- **Zero dependencies** — nothing to break, nothing to audit
+- **No admin required** — perfect for locked-down corporate laptops
+- **EDR-safe** — no suspicious API calls or DLL imports
+- **Cross-platform** — macOS, Windows, Linux all supported
 
 ## Examples
 

package/bin/buzz.js

@@ -36,9 +36,14 @@ USAGE:
   buzz help         Show this help
 
 PLATFORMS:
-  macOS     Uses 'caffeinate' (built-in, zero install)
-  Windows   Uses SetThreadExecutionState + mouse jiggle (built-in, zero install)
-  Linux     Uses xdotool (if available)
+macOS     Uses 'caffeinate' (built-in, zero install)
+Windows   Uses PowerShell SendKeys F15 (built-in, zero install)
+Linux     Uses xdotool (if available)
+
+CORPORATE WINDOWS NOTE:
+Some corporate GPO policies enforce lock screen regardless of input.
+If buzz doesn't work on your work PC, use a hardware Mouse Jiggler
+(USB device, ~$2 on Taobao) — zero software footprint, zero EDR risk.
 
 EXAMPLES:
   buzz 30           # 30 minutes
@@ -130,56 +135,27 @@ function startCaffeinate(durationMs) {
 }
 
 /**
- * Windows: triple strategy — SetThreadExecutionState + mouse jiggle + F15
+ * Windows: minimal F15 keystroke via SendKeys
+ * 
+ * DELIBERATELY MINIMAL for corporate safety:
+ * - NO Add-Type / DllImport (triggers EDR alerts — looks like malware)
+ * - NO SetThreadExecutionState via PowerShell (same issue)
+ * - NO mouse movement automation (flagged as keylogger behavior)
  * 
- * Many corporate Windows policies ignore synthetic keystrokes (F15).
- * The robust approach is:
- *   1. SetThreadExecutionState(ES_CONTINUOUS | ES_SYSTEM_REQUIRED | ES_DISPLAY_REQUIRED)
- *      — the official Windows API to prevent sleep (same as YouTube/PowerPoint do)
- *   2. Move mouse 1px via .NET Cursor.Position — universally recognized as "activity"
- *   3. F15 via SendKeys as backup
+ * Only uses WScript.Shell.SendKeys('{F15}') — the most benign method.
+ * F15 has no function in any app, so pressing it is completely harmless.
  * 
- * All via PowerShell — zero install, zero admin.
+ * If corporate lock screen still triggers (GPO hard policy), use a
+ * hardware Mouse Jiggler (USB device) instead — zero software footprint.
  */
 function jiggleWindows() {
   const psScript = `
-# 1. Load Windows Forms for mouse control
-Add-Type -AssemblyName System.Windows.Forms
-
-# 2. Call SetThreadExecutionState to prevent display sleep
-Add-Type -TypeDefinition @"
-using System;
-using System.Runtime.InteropServices;
-public class PowerUtil {
-    [DllImport("kernel32.dll")]
-    public static extern uint SetThreadExecutionState(uint esFlags);
-    
-    public const uint ES_CONTINUOUS = 0x80000000;
-    public const uint ES_SYSTEM_REQUIRED = 0x00000001;
-    public const uint ES_DISPLAY_REQUIRED = 0x00000002;
-}
-"@
-
-# Prevent display from turning off and system from sleeping
-[PowerUtil]::SetThreadExecutionState(
-    [PowerUtil]::ES_CONTINUOUS -bor [PowerUtil]::ES_SYSTEM_REQUIRED -bor [PowerUtil]::ES_DISPLAY_REQUIRED
-)
-
-# 3. Loop: jiggle mouse + press F15
-$wsh = New-Object -ComObject WScript.Shell
-while ($true) {
-    Start-Sleep -Seconds 30
-    
-    # Move mouse 1px then back — most reliable "activity" signal
-    $pos = [System.Windows.Forms.Cursor]::Position
-    [System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point($pos.X + 1, $pos.Y)
-    Start-Sleep -Milliseconds 50
-    [System.Windows.Forms.Cursor]::Position = $pos
-    
-    # Also press F15 as backup
-    try { $wsh.SendKeys('{F15}') } catch {}
-}
-`;
+    $wsh = New-Object -ComObject WScript.Shell
+    while ($true) {
+      Start-Sleep -Seconds 30
+      $wsh.SendKeys('{F15}')
+    }
+  `;
   // This runs as a detached child
   const child = spawn('powershell.exe', [
     '-NoProfile', '-NonInteractive', '-Command', psScript
@@ -271,7 +247,7 @@ function cmdRun(durationMs) {
   console.log(BEE);
 
   const platformLabel = PLATFORM === 'darwin' ? 'macOS caffeinate'
-    : PLATFORM === 'win32' ? 'Windows SetThreadExecutionState + Mouse'
+    : PLATFORM === 'win32' ? 'Windows SendKeys F15 (safe mode)'
     : 'Linux xdotool';
 
   if (durationMs) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiaoxionga/buzz",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "🐝 Keep your screen awake — zero dependencies, no admin required",
   "main": "bin/buzz.js",
   "bin": {