snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/lib/statistics/functions/sendUsageReport.ts

@@ -0,0 +1,79 @@
+import type { IStats } from '@rocket.chat/core-typings';
+import { License } from '@rocket.chat/license';
+import type { Logger } from '@rocket.chat/logger';
+import { Statistics } from '@rocket.chat/models';
+import { serverFetch as fetch } from '@rocket.chat/server-fetch';
+import { tracerSpan } from '@rocket.chat/tracing';
+import { Meteor } from 'meteor/meteor';
+
+import { Info } from '../../../../app/utils/rocketchat.info';
+import { shouldReportStatistics } from '../../../cron/usageReport';
+import { getWorkspaceAccessToken } from '../../cloud';
+import { statistics } from '../index';
+
+async function sendStats(logger: Logger, cronStatistics: IStats): Promise<string | undefined> {
+	try {
+		const token = await getWorkspaceAccessToken();
+		const headers = { ...(token && { Authorization: `Bearer ${token}` }) };
+
+		const response = await fetch('https://collector.rocket.chat/', {
+			method: 'POST',
+			body: {
+				...cronStatistics,
+				host: Meteor.absoluteUrl(),
+			},
+			headers,
+			// SECURITY: the URL is a default hardcoded value or an envvar/setting set by an admin. It's safe to disable this check.
+			ignoreSsrfValidation: true,
+		});
+
+		const { statsToken } = await response.json();
+
+		if (statsToken != null) {
+			await Statistics.updateOne({ _id: cronStatistics._id }, { $set: { statsToken } });
+			return statsToken;
+		}
+	} catch (err) {
+		logger.error({ msg: 'Failed to send usage report', err });
+	}
+}
+
+export async function sendUsageReport(logger: Logger): Promise<string | undefined> {
+	// Even when disabled, we still generate statistics locally to avoid breaking
+	// internal processes, such as restriction checks for air-gapped workspaces.
+	// Evaluated at send time (not entry) so the verdict cannot go stale while the
+	// statistics are being generated — e.g. an offline license applied during startup.
+	const shouldSendToCollector = () => shouldReportStatistics() && !License.hasOfflineLicense();
+
+	return tracerSpan('generateStatistics', {}, async () => {
+		const last = await Statistics.findLast();
+
+		const currentVersion = Info.version;
+
+		if (last && last.version === currentVersion) {
+			const yesterday = new Date();
+			yesterday.setDate(yesterday.getDate() - 1);
+
+			// if the last data we have has less than 24h and was not sent to yet, send it
+			if (last.createdAt > yesterday) {
+				// but if it has the confirmation token, we can skip
+				if (last.statsToken) {
+					return last.statsToken;
+				}
+
+				// if it doesn't it means the request failed, so we try sending again with the same data
+				if (shouldSendToCollector()) {
+					return sendStats(logger, last);
+				}
+
+				return;
+			}
+		}
+
+		// if our latest stats has more than 24h OR the statistics.version differs from the actual version, it is time to generate a new one and send it
+		const cronStatistics = await statistics.save();
+		if (shouldSendToCollector()) {
+			return sendStats(logger, cronStatistics);
+		}
+	});
+}