@f2a/openclaw-adapter 0.1.0 → 0.1.4

package/dist/task-guard.d.ts

@@ -11,11 +11,45 @@ export interface TaskGuardRule {
     severity: 'info' | 'warn' | 'block';
     check: (task: TaskRequest | TaskAnnouncement, context: TaskGuardContext) => TaskGuardResult;
 }
+/**
+ * 任务安全检查上下文
+ *
+ * 提供任务检查所需的上下文信息，包括请求者信誉、黑白名单状态、
+ * 近期请求频率等，用于安全规则判断任务是否应该被接受或拒绝。
+ *
+ * @example
+ * ```typescript
+ * const context: TaskGuardContext = {
+ *   requesterReputation: {
+ *     peerId: 'f2a-peer-xxx',
+ *     score: 85,
+ *     successfulTasks: 42,
+ *     failedTasks: 2,
+ *     // ...其他字段
+ *   },
+ *   isWhitelisted: true,
+ *   isBlacklisted: false,
+ *   recentTaskCount: 3,
+ *   config: DEFAULT_TASK_GUARD_CONFIG
+ * };
+ *
+ * // 使用上下文进行任务检查
+ * const report = taskGuard.check(task, context);
+ * if (!report.passed) {
+ *   console.warn('任务被安全规则拒绝:', report.blocks);
+ * }
+ * ```
+ */
 export interface TaskGuardContext {
+    /** 请求者的信誉信息（可选，新 peer 可能没有） */
     requesterReputation?: ReputationEntry;
+    /** 请求者是否在白名单中 */
     isWhitelisted: boolean;
+    /** 请求者是否在黑名单中 */
     isBlacklisted: boolean;
+    /** 近期（1分钟内）的任务请求数量 */
     recentTaskCount: number;
+    /** 任务守卫配置 */
     config: TaskGuardConfig;
 }
 export interface TaskGuardConfig {
@@ -25,6 +59,10 @@ export interface TaskGuardConfig {
     blockedKeywords: string[];
     dangerousPatterns: RegExp[];
     minReputationForDangerous: number;
+    /** 持久化目录路径，用于存储 rate limiting 状态。不设置则不持久化 */
+    persistDir?: string;
+    /** 持久化保存间隔（毫秒），默认 30000 (30秒) */
+    persistIntervalMs?: number;
 }
 export interface TaskGuardResult {
     passed: boolean;
@@ -47,7 +85,43 @@ export declare class TaskGuard {
     private config;
     private rules;
     private recentTasks;
+    /** 清理阈值：当条目数超过此值时触发清理 */
+    private cleanupThreshold;
+    /** 上次清理时间戳 */
+    private lastCleanupTime;
+    /** 定时清理间隔（毫秒） */
+    private cleanupIntervalMs;
+    /** 持久化文件路径 */
+    private persistFilePath;
+    /** 持久化定时器 */
+    private persistTimer;
+    /** 是否有未保存的更改 */
+    private hasUnsavedChanges;
     constructor(config?: Partial<TaskGuardConfig>);
+    /**
+     * 初始化持久化
+     */
+    private initPersistence;
+    /**
+     * 加载已保存的状态
+     */
+    private loadPersistedState;
+    /**
+     * 保存状态到文件
+     */
+    private saveState;
+    /**
+     * 仅在有未保存更改时保存
+     */
+    private saveStateIfNeeded;
+    /**
+     * 手动保存当前状态
+     */
+    forceSave(): void;
+    /**
+     * 关闭持久化（停止定时器并保存最后状态）
+     */
+    shutdown(): void;
     /**
      * 检查任务
      */
@@ -72,6 +146,14 @@ export declare class TaskGuard {
     private isDangerousTask;
     private getRecentTaskCount;
     private recordTask;
+    /**
+     * 条件触发清理：当条目数超过阈值或距上次清理超过间隔时执行
+     */
+    private maybeCleanup;
+    /**
+     * 清理过期的 recentTasks 条目，防止内存泄漏
+     */
+    private cleanupRecentTasks;
 }
 export declare const taskGuard: TaskGuard;
 //# sourceMappingURL=task-guard.d.ts.map

package/dist/task-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-guard.d.ts","sourceRoot":"","sources":["../src/task-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACpC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,KAAK,eAAe,CAAC;CAC7F;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,CAAC,EAAE,eAAe,CAAC;IACtC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B,EAAE,OAAO,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,yBAAyB,EAAE,eAoBvC,CAAC;AAEF,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,WAAW,CAAoC;gBAE3C,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IAKjD;;OAEG;IACH,KAAK,CACH,IAAI,EAAE,WAAW,GAAG,gBAAgB,EACpC,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,eAAe;IAkDlB;;OAEG;IACH,UAAU,CACR,IAAI,EAAE,WAAW,GAAG,gBAAgB,EACpC,OAAO,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAClC,OAAO;IAKV;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;IAIlC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOtD;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAMpD,OAAO,CAAC,kBAAkB;IA+M1B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,UAAU;CAKnB;AAGD,eAAO,MAAM,SAAS,WAAkB,CAAC"}
+{"version":3,"file":"task-guard.d.ts","sourceRoot":"","sources":["../src/task-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKjF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACpC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,KAAK,eAAe,CAAC;CAC7F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,mBAAmB,CAAC,EAAE,eAAe,CAAC;IACtC,iBAAiB;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa;IACb,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B,EAAE,OAAO,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAClC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,yBAAyB,EAAE,eAsBvC,CAAC;AAoIF,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,WAAW,CAAoC;IACvD,yBAAyB;IACzB,OAAO,CAAC,gBAAgB,CAAe;IACvC,cAAc;IACd,OAAO,CAAC,eAAe,CAAa;IACpC,iBAAiB;IACjB,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,cAAc;IACd,OAAO,CAAC,eAAe,CAAuB;IAC9C,aAAa;IACb,OAAO,CAAC,YAAY,CAA+B;IACnD,gBAAgB;IAChB,OAAO,CAAC,iBAAiB,CAAkB;gBAE/B,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IAUjD;;OAEG;IACH,OAAO,CAAC,eAAe;IA8BvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmC1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAuBjB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;OAEG;IACH,SAAS,IAAI,IAAI;IAIjB;;OAEG;IACH,QAAQ,IAAI,IAAI;IAchB;;OAEG;IACH,KAAK,CACH,IAAI,EAAE,WAAW,GAAG,gBAAgB,EACpC,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,eAAe;IAmElB;;OAEG;IACH,UAAU,CACR,IAAI,EAAE,WAAW,GAAG,gBAAgB,EACpC,OAAO,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAClC,OAAO;IAOV;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;IAKlC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAUtD;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAMpD,OAAO,CAAC,kBAAkB;IA8N1B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,UAAU;IAYlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAYpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAuB3B;AAkCD,eAAO,MAAM,SAAS,WAAkB,CAAC"}

package/dist/task-guard.js

@@ -3,8 +3,44 @@
  * F2A Task Guard
  * 轻量级任务安全检查和评审
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.taskGuard = exports.TaskGuard = exports.DEFAULT_TASK_GUARD_CONFIG = void 0;
+const logger_js_1 = require("./logger.js");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 // 默认配置
 exports.DEFAULT_TASK_GUARD_CONFIG = {
     enabled: true,
@@ -25,15 +61,252 @@ exports.DEFAULT_TASK_GUARD_CONFIG = {
         /drop\s+database/i,
         /shutdown\s+-h/i
     ],
-    minReputationForDangerous: 70
+    minReputationForDangerous: 70,
+    persistDir: undefined,
+    persistIntervalMs: 30000 // 30秒
 };
+/**
+ * 路径规范化 - 移除 .. 和多余的斜杠
+ * 用于检测路径遍历绕过
+ */
+function normalizePath(path) {
+    // 解码 URL 编码
+    let normalized = path;
+    try {
+        normalized = decodeURIComponent(normalized);
+    }
+    catch { /* ignore */ }
+    // 替换多个斜杠为单个
+    normalized = normalized.replace(/\/+/g, '/');
+    // 解析 .. 和 .
+    const parts = normalized.split('/');
+    const result = [];
+    for (const part of parts) {
+        if (part === '..') {
+            result.pop();
+        }
+        else if (part !== '.' && part !== '') {
+            result.push(part);
+        }
+    }
+    return '/' + result.join('/');
+}
+/**
+ * 检测变量替换绕过
+ */
+function detectVariableSubstitution(text) {
+    const detected = [];
+    // 环境变量模式: $VAR, ${VAR}, %VAR%
+    const envPatterns = [
+        /\$([A-Za-z_][A-Za-z0-9_]*)/g, // $VAR
+        /\$\{([^}]+)\}/g, // ${VAR}
+        /%([A-Za-z_][A-Za-z0-9_]*)%/g, // %VAR%
+    ];
+    for (const pattern of envPatterns) {
+        let match;
+        while ((match = pattern.exec(text)) !== null) {
+            detected.push(`变量替换: ${match[0]}`);
+        }
+    }
+    return detected;
+}
+/**
+ * 检测编码绕过
+ */
+function detectEncodingBypass(text) {
+    const detected = [];
+    // 八进制编码: \177, \027
+    if (/\\[0-7]{1,3}/.test(text)) {
+        detected.push('八进制编码');
+    }
+    // 十六进制编码: \x7f, \x1b
+    if (/\\x[0-9a-fA-F]{2}/.test(text)) {
+        detected.push('十六进制编码');
+    }
+    // Unicode 编码: \u007f, \u007F, \u{7f} (ES6)
+    if (/\\u[0-9a-fA-F]{4}/.test(text) || /\\u\{[0-9a-fA-F]+\}/.test(text)) {
+        detected.push('Unicode编码');
+    }
+    // HTML 实体编码: &#x20;, &#32;, &lt;, &gt;, &amp;
+    // 十六进制格式: &#xHH;
+    if (/&#x[0-9a-fA-F]+;?/i.test(text)) {
+        detected.push('HTML实体编码(十六进制)');
+    }
+    // 十进制格式: &#DDD;
+    if (/&#\d+;?/.test(text)) {
+        detected.push('HTML实体编码(十进制)');
+    }
+    // 命名实体: &lt; &gt; &amp; &quot; &apos;
+    if (/&(lt|gt|amp|quot|apos|#x?\d+);/i.test(text)) {
+        detected.push('HTML实体编码(命名)');
+    }
+    // URL 编码: %20, %2f
+    if (/%[0-9a-fA-F]{2}/.test(text)) {
+        detected.push('URL编码');
+    }
+    return detected;
+}
+/**
+ * 检测命令注入绕过
+ */
+function detectCommandInjectionBypass(text) {
+    const detected = [];
+    const lowerText = text.toLowerCase();
+    // 反引号命令替换
+    if (/`[^`]+`/.test(text)) {
+        detected.push('反引号命令替换');
+    }
+    // $() 命令替换
+    if (/\$\([^)]+\)/.test(text)) {
+        detected.push('$()命令替换');
+    }
+    // 分号命令链接
+    if (/;\s*(rm|dd|mkfs|shutdown|reboot|halt|init)\b/i.test(text)) {
+        detected.push('分号命令链接');
+    }
+    // 管道命令注入
+    if (/\|\s*(rm|dd|mkfs|shutdown|reboot|halt)\b/i.test(text)) {
+        detected.push('管道命令注入');
+    }
+    // &&/|| 命令链接
+    if (/(&&|\|\|)\s*(rm|dd|mkfs|shutdown|reboot|halt)\b/i.test(text)) {
+        detected.push('逻辑运算符命令链接');
+    }
+    return detected;
+}
 class TaskGuard {
     config;
     rules;
     recentTasks = new Map();
+    /** 清理阈值：当条目数超过此值时触发清理 */
+    cleanupThreshold = 100;
+    /** 上次清理时间戳 */
+    lastCleanupTime = 0;
+    /** 定时清理间隔（毫秒） */
+    cleanupIntervalMs = 60000; // 1分钟
+    /** 持久化文件路径 */
+    persistFilePath = null;
+    /** 持久化定时器 */
+    persistTimer = null;
+    /** 是否有未保存的更改 */
+    hasUnsavedChanges = false;
     constructor(config = {}) {
         this.config = { ...exports.DEFAULT_TASK_GUARD_CONFIG, ...config };
         this.rules = this.createDefaultRules();
+        // 初始化持久化
+        if (this.config.persistDir) {
+            this.initPersistence(this.config.persistDir, this.config.persistIntervalMs);
+        }
+    }
+    /**
+     * 初始化持久化
+     */
+    initPersistence(persistDir, persistIntervalMs) {
+        try {
+            // 确保目录存在
+            if (!fs.existsSync(persistDir)) {
+                fs.mkdirSync(persistDir, { recursive: true });
+            }
+            this.persistFilePath = path.join(persistDir, 'task-guard-state.json');
+            // 加载已保存的状态
+            this.loadPersistedState();
+            // 设置定期保存
+            const interval = persistIntervalMs ?? exports.DEFAULT_TASK_GUARD_CONFIG.persistIntervalMs ?? 30000;
+            this.persistTimer = setInterval(() => {
+                this.saveStateIfNeeded();
+            }, interval);
+            // 防止定时器阻止进程退出
+            if (this.persistTimer.unref) {
+                this.persistTimer.unref();
+            }
+            logger_js_1.taskGuardLogger.info('persistence-initialized: persistDir=%s, intervalMs=%d', persistDir, interval);
+        }
+        catch (error) {
+            logger_js_1.taskGuardLogger.error('persistence-init-failed: error=%s', error);
+            this.persistFilePath = null;
+        }
+    }
+    /**
+     * 加载已保存的状态
+     */
+    loadPersistedState() {
+        if (!this.persistFilePath || !fs.existsSync(this.persistFilePath)) {
+            return;
+        }
+        try {
+            const data = fs.readFileSync(this.persistFilePath, 'utf-8');
+            const state = JSON.parse(data);
+            if (state.recentTasks && typeof state.recentTasks === 'object') {
+                const now = Date.now();
+                const windowMs = 60000; // 1分钟窗口
+                // 过滤掉过期的时间戳，只保留有效的
+                let loadedCount = 0;
+                for (const [peerId, timestamps] of Object.entries(state.recentTasks)) {
+                    if (Array.isArray(timestamps)) {
+                        const validTimestamps = timestamps.filter(t => typeof t === 'number' && now - t < windowMs);
+                        if (validTimestamps.length > 0) {
+                            this.recentTasks.set(peerId, validTimestamps);
+                            loadedCount += validTimestamps.length;
+                        }
+                    }
+                }
+                logger_js_1.taskGuardLogger.info('persistence-loaded: entries=%d, timestamps=%d, savedAt=%s', this.recentTasks.size, loadedCount, new Date(state.savedAt).toISOString());
+            }
+        }
+        catch (error) {
+            logger_js_1.taskGuardLogger.warn('persistence-load-failed: error=%s', error);
+        }
+    }
+    /**
+     * 保存状态到文件
+     */
+    saveState() {
+        if (!this.persistFilePath) {
+            return;
+        }
+        try {
+            const state = {
+                recentTasks: Object.fromEntries(this.recentTasks),
+                savedAt: Date.now()
+            };
+            // 写入临时文件，然后原子性重命名
+            const tempPath = this.persistFilePath + '.tmp';
+            fs.writeFileSync(tempPath, JSON.stringify(state), 'utf-8');
+            fs.renameSync(tempPath, this.persistFilePath);
+            this.hasUnsavedChanges = false;
+            logger_js_1.taskGuardLogger.debug('persistence-saved: entries=%d', this.recentTasks.size);
+        }
+        catch (error) {
+            logger_js_1.taskGuardLogger.error('persistence-save-failed: error=%s', error);
+        }
+    }
+    /**
+     * 仅在有未保存更改时保存
+     */
+    saveStateIfNeeded() {
+        if (this.hasUnsavedChanges) {
+            this.saveState();
+        }
+    }
+    /**
+     * 手动保存当前状态
+     */
+    forceSave() {
+        this.saveState();
+    }
+    /**
+     * 关闭持久化（停止定时器并保存最后状态）
+     */
+    shutdown() {
+        if (this.persistTimer) {
+            clearInterval(this.persistTimer);
+            this.persistTimer = null;
+        }
+        // 保存最终状态
+        if (this.hasUnsavedChanges) {
+            this.saveState();
+        }
+        logger_js_1.taskGuardLogger.info('task-guard-shutdown: persisted=%s', !!this.persistFilePath);
     }
     /**
      * 检查任务
@@ -46,6 +319,8 @@ class TaskGuard {
             recentTaskCount: this.getRecentTaskCount(task.from),
             config: this.config
         };
+        const taskId = 'taskId' in task ? task.taskId : task.announcementId;
+        logger_js_1.taskGuardLogger.debug('check: taskId=%s, from=%s, rules=%d', taskId, task.from, this.rules.filter(r => r.enabled).length);
         const results = [];
         // 运行所有规则
         for (const rule of this.rules) {
@@ -54,8 +329,18 @@ class TaskGuard {
             try {
                 const result = rule.check(task, fullContext);
                 results.push(result);
+                // 记录规则执行结果
+                if (!result.passed) {
+                    if (result.severity === 'block') {
+                        logger_js_1.taskGuardLogger.warn('rule-blocked: taskId=%s, ruleId=%s, message=%s', taskId, rule.id, result.message);
+                    }
+                    else if (result.severity === 'warn') {
+                        logger_js_1.taskGuardLogger.info('rule-warning: taskId=%s, ruleId=%s, message=%s', taskId, rule.id, result.message);
+                    }
+                }
             }
             catch (error) {
+                logger_js_1.taskGuardLogger.error('rule-error: ruleId=%s, taskId=%s, error=%s', rule.id, taskId, error);
                 results.push({
                     passed: false,
                     severity: 'warn',
@@ -71,9 +356,11 @@ class TaskGuard {
         const requiresConfirmation = results.some(r => r.severity === 'warn' &&
             !r.passed &&
             this.config.requireConfirmationForDangerous);
+        const passed = blocks.length === 0;
+        logger_js_1.taskGuardLogger.debug('check-result: taskId=%s, passed=%s, blocks=%d, warnings=%d, requiresConfirmation=%s', taskId, passed, blocks.length, warnings.length, requiresConfirmation);
         return {
-            taskId: 'taskId' in task ? task.taskId : task.announcementId,
-            passed: blocks.length === 0,
+            taskId,
+            passed,
             results,
             warnings,
             blocks,
@@ -86,6 +373,8 @@ class TaskGuard {
      */
     quickCheck(task, context) {
         const report = this.check(task, context);
+        const taskId = 'taskId' in task ? task.taskId : task.announcementId;
+        logger_js_1.taskGuardLogger.debug('quickCheck: taskId=%s, passed=%s', taskId, report.passed);
         return report.passed;
     }
     /**
@@ -93,6 +382,7 @@ class TaskGuard {
      */
     addRule(rule) {
         this.rules.push(rule);
+        logger_js_1.taskGuardLogger.info('addRule: ruleId=%s, name=%s, severity=%s, enabled=%s', rule.id, rule.name, rule.severity, rule.enabled);
     }
     /**
      * 启用/禁用规则
@@ -101,6 +391,10 @@ class TaskGuard {
         const rule = this.rules.find(r => r.id === ruleId);
         if (rule) {
             rule.enabled = enabled;
+            logger_js_1.taskGuardLogger.info('setRuleEnabled: ruleId=%s, enabled=%s', ruleId, enabled);
+        }
+        else {
+            logger_js_1.taskGuardLogger.warn('setRuleEnabled: rule not found, ruleId=%s', ruleId);
         }
     }
     /**
@@ -204,11 +498,13 @@ class TaskGuard {
                 severity: 'warn',
                 check: (task, context) => {
                     if (!context.requesterReputation) {
+                        // 无信誉记录时返回 warn，而非直接通过
+                        // 新 peer 首次任务需要谨慎处理
                         return {
                             passed: true,
-                            severity: 'info',
+                            severity: 'warn',
                             ruleId: 'reputation',
-                            message: '无信誉记录，使用默认处理'
+                            message: '无信誉记录，首次任务建议谨慎处理'
                         };
                     }
                     const rep = context.requesterReputation.score;
@@ -243,9 +539,17 @@ class TaskGuard {
                     const isFileOp = /\b(read|write|edit|delete|remove)\b/.test(description);
                     const hasPath = /[\/~]\w+/.test(description);
                     if (isFileOp && hasPath) {
-                        // 检查是否是系统路径
-                        const systemPaths = ['/etc/', '/sys/', '/proc/', '/dev/', 'c:\\windows'];
-                        const hasSystemPath = systemPaths.some(p => description.includes(p));
+                        // 检查是否是系统路径（包括 macOS 路径）
+                        const systemPaths = [
+                            // Linux/Unix 系统路径
+                            '/etc/', '/sys/', '/proc/', '/dev/', '/root/', '/boot/',
+                            // macOS 系统路径
+                            '/System/', '/Library/', '/Applications/', '/usr/', '/bin/', '/sbin/',
+                            // Windows 系统路径
+                            'c:\\windows', 'c:\\program files', 'c:\\program files (x86)',
+                            'c:\\users\\public', 'c:\\users\\default'
+                        ];
+                        const hasSystemPath = systemPaths.some(p => description.includes(p.toLowerCase()));
                         if (hasSystemPath) {
                             return {
                                 passed: false,
@@ -275,14 +579,19 @@ class TaskGuard {
                     const description = task.description.toLowerCase();
                     const isNetworkOp = /\b(fetch|download|curl|wget|http|api)\b/.test(description);
                     if (isNetworkOp) {
-                        const suspicious = ['exe', 'dll', 'sh', 'bash', 'python', 'script'];
-                        const hasSuspicious = suspicious.some(s => description.includes(s));
+                        // 更精确的可疑文件扩展名检测（移除 python/script 等宽泛词）
+                        const suspiciousExtensions = ['exe', 'dll', 'app', 'deb', 'rpm', 'dmg', 'msi', 'bat', 'ps1'];
+                        const hasSuspicious = suspiciousExtensions.some(ext => {
+                            // 匹配 .ext 后跟空格、引号、斜杠、大于号，或字符串结尾
+                            const pattern = new RegExp(`\\.${ext}([\\s"'\\/>]|$)`, 'i');
+                            return pattern.test(description);
+                        });
                         if (hasSuspicious) {
                             return {
                                 passed: false,
                                 severity: 'warn',
                                 ruleId: 'network-operation',
-                                message: '检测到可疑的网络下载操作',
+                                message: '检测到可疑的网络下载操作（可执行文件）',
                                 details: { suspicious: true }
                             };
                         }
@@ -311,9 +620,10 @@ class TaskGuard {
     }
     getRecentTaskCount(peerId) {
         const now = Date.now();
-        const oneMinuteAgo = now - 60000;
+        const windowMs = this.config.maxTasksPerMinute ? 60000 : 60000;
+        const windowStart = now - windowMs;
         const timestamps = this.recentTasks.get(peerId) || [];
-        const recent = timestamps.filter(t => t > oneMinuteAgo);
+        const recent = timestamps.filter(t => t > windowStart);
         // 更新存储
         this.recentTasks.set(peerId, recent);
         return recent.length;
@@ -322,9 +632,76 @@ class TaskGuard {
         const timestamps = this.recentTasks.get(peerId) || [];
         timestamps.push(Date.now());
         this.recentTasks.set(peerId, timestamps);
+        // 标记有未保存的更改
+        this.hasUnsavedChanges = true;
+        // 优化：仅在超过阈值或定时触发时清理，而非每次都清理
+        this.maybeCleanup();
+    }
+    /**
+     * 条件触发清理：当条目数超过阈值或距上次清理超过间隔时执行
+     */
+    maybeCleanup() {
+        const now = Date.now();
+        const shouldCleanup = this.recentTasks.size > this.cleanupThreshold ||
+            (now - this.lastCleanupTime) > this.cleanupIntervalMs;
+        if (shouldCleanup) {
+            this.cleanupRecentTasks();
+            this.lastCleanupTime = now;
+        }
+    }
+    /**
+     * 清理过期的 recentTasks 条目，防止内存泄漏
+     */
+    cleanupRecentTasks() {
+        const now = Date.now();
+        const windowMs = 60000; // 1分钟窗口
+        let hadChanges = false;
+        for (const [key, timestamps] of this.recentTasks.entries()) {
+            // 过滤掉过期的时间戳
+            const validTimestamps = timestamps.filter(t => now - t < windowMs);
+            if (validTimestamps.length === 0) {
+                // 没有有效时间戳，删除整个条目
+                this.recentTasks.delete(key);
+                hadChanges = true;
+            }
+            else if (validTimestamps.length !== timestamps.length) {
+                // 更新为有效的时间戳
+                this.recentTasks.set(key, validTimestamps);
+                hadChanges = true;
+            }
+        }
+        if (hadChanges) {
+            this.hasUnsavedChanges = true;
+        }
     }
 }
 exports.TaskGuard = TaskGuard;
-// 导出单例
-exports.taskGuard = new TaskGuard();
+// 导出单例（带进程退出时自动保存）
+const globalTaskGuard = new TaskGuard();
+// 注册进程退出处理，确保状态持久化
+let shutdownHandlersRegistered = false;
+const registerShutdownHandlers = () => {
+    if (shutdownHandlersRegistered)
+        return;
+    shutdownHandlersRegistered = true;
+    // 处理正常退出
+    process.on('beforeExit', () => {
+        globalTaskGuard.shutdown();
+    });
+    // 处理 SIGINT (Ctrl+C)
+    process.on('SIGINT', () => {
+        globalTaskGuard.shutdown();
+        process.exit(0);
+    });
+    // 处理 SIGTERM
+    process.on('SIGTERM', () => {
+        globalTaskGuard.shutdown();
+        process.exit(0);
+    });
+};
+// 仅在非测试环境注册
+if (process.env.NODE_ENV !== 'test') {
+    registerShutdownHandlers();
+}
+exports.taskGuard = globalTaskGuard;
 //# sourceMappingURL=task-guard.js.map