From 76cbd8a1c173536ddd7fa9649cefe651b8d10dc9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=89=8B=E7=93=9C=E4=B8=80=E5=8D=81=E9=9B=AA?=
 <nanaeonn@outlook.com>
Date: Thu, 29 Jan 2026 20:38:35 +0800
Subject: [PATCH] Add crash protection for worker process restarts

Implements a mechanism to track recent worker process crashes and prevent excessive restarts. If the worker crashes more than 3 times within 10 seconds, the main process will exit to avoid crash loops.
---
 packages/napcat-shell/napcat.ts | 23 ++++++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/packages/napcat-shell/napcat.ts b/packages/napcat-shell/napcat.ts
index 78be3a7f..05637a5e 100644
--- a/packages/napcat-shell/napcat.ts
+++ b/packages/napcat-shell/napcat.ts
@@ -38,6 +38,11 @@ let isElectron = false;
 let isRestarting = false;
 let isShuttingDown = false;
 
+// 进程崩溃保护：记录最近的异常退出时间戳
+const recentCrashTimestamps: number[] = [];
+const CRASH_TIME_WINDOW = 10000; // 10秒时间窗口
+const MAX_CRASHES_IN_WINDOW = 3; // 最大崩溃次数
+
 /**
  * 获取进程类型名称（用于日志）
  */
@@ -217,7 +222,23 @@ async function startWorker (passQuickLogin: boolean = true, secretKey?: string,
     }
     // 如果不是由于主动重启或关闭引起的退出，尝试自动重新拉起
     if (!isRestarting && !isShuttingDown) {
-      logger.logWarn(`[NapCat] [${processType}] Worker进程意外退出，正在尝试重新拉起...`);
+      const now = Date.now();
+      
+      // 清理超出时间窗口的崩溃记录
+      while (recentCrashTimestamps.length > 0 && now - recentCrashTimestamps[0]! > CRASH_TIME_WINDOW) {
+        recentCrashTimestamps.shift();
+      }
+      
+      // 记录本次崩溃
+      recentCrashTimestamps.push(now);
+      
+      // 检查是否超过崩溃阈值
+      if (recentCrashTimestamps.length >= MAX_CRASHES_IN_WINDOW) {
+        logger.logError(`[NapCat] [${processType}] Worker进程在 ${CRASH_TIME_WINDOW / 1000} 秒内异常退出 ${MAX_CRASHES_IN_WINDOW} 次，主进程退出`);
+        process.exit(1);
+      }
+      
+      logger.logWarn(`[NapCat] [${processType}] Worker进程意外退出 (${recentCrashTimestamps.length}/${MAX_CRASHES_IN_WINDOW})，正在尝试重新拉起...`);
       startWorker(true).catch(e => {
         logger.logError(`[NapCat] [${processType}] 重新拉起Worker进程失败:`, e);
       });