function Optimize-WindowsSystem {
    param(
        [ValidateRange(1,24)]
        [int]$IdleThresholdHours = 4,
        [switch]$CleanTempFiles
    )

    try {
        # 检测闲置服务
        $idleServices = Get-Service | Where-Object {
            $_.Status -eq 'Running' -and 
            (Get-Process -Name $_.Name -ErrorAction SilentlyContinue).StartTime -lt (Get-Date).AddHours(-$IdleThresholdHours)
        }

        # 关闭非核心闲置服务
        $idleServices | Where-Object {$_.DisplayName -notmatch 'Critical'} | Stop-Service -Force

        # 清理临时文件
        if ($CleanTempFiles) {
            $tempPaths = @('$env:TEMP','$env:SystemRoot\Temp','$env:SystemRoot\Prefetch')
            Remove-Item -Path $tempPaths -Recurse -Force -ErrorAction SilentlyContinue
        }

        # 生成优化报告
        [PSCustomObject]@{
            StoppedServices = $idleServices.Count
            TempFilesCleaned = if($CleanTempFiles){ (Get-ChildItem $tempPaths -Recurse | Measure-Object).Count }else{ 0 }
            Timestamp = Get-Date
        } | Export-Clixml -Path "$env:ProgramData\SystemOptimizationReport.xml"
    }
    catch {
        Write-EventLog -LogName Application -Source 'SystemOptimizer' -EntryType Error -EventId 501 -Message $_.Exception.Message
    }
}

# 创建带事务的注册表项
Start-Transaction -Name RegEdit
New-Item -Path HKLM:\Software\CustomConfig -Force
Set-ItemProperty -Path HKLM:\Software\CustomConfig -Name Version -Value '1.0'
Complete-Transaction -Name RegEdit

# 设置注册表项安全描述符
$acl = Get-Acl HKLM:\Software\SecureData
$rule = New-Object System.Security.AccessControl.RegistryAccessRule(
    'Users',
    'ReadKey',
    'ContainerInherit',
    'None',
    'Allow'
)
$acl.AddAccessRule($rule)
Set-Acl -Path HKLM:\Software\SecureData -AclObject $acl

class RegistryWatcher : RegistryProvider {
    [void] SetItem(string path, object value) {
        [AuditLog]::RecordChange($path, $value)
        base.SetItem($path, $value)
    }
}