@inventec/dsh-onetree-log 0.1.0

package/lib/index.js

@@ -0,0 +1,272 @@
+/**
+ * dsh-onetree-log — host half.
+ *
+ * 在 DSH web 服务器上注册同源前缀路由 `/onetree-log*`：
+ *   POST   /onetree-log/upload?name=<原文件名>      原始字节流上传（非 multipart，天然
+ *                                                      流式落盘，上限 512MiB）→ 解包探测登记
+ *   POST   /onetree-log/open-path  {path,label}       登记服务器本地压缩包或已解压 dump 目录
+ *   GET    /onetree-log/dumps                        登记列表（时间倒序）
+ *   GET    /onetree-log/dumps/<id>                   详情（meta + 文件清单/分类统计/树）
+ *   GET    /onetree-log/dumps/<id>/file?path=<rel>   文件预览（文本前 256KiB；二进制探测）
+ *   DELETE /onetree-log/dumps/<id>                   删除登记（path 类不动用户原文件/目录）
+ *
+ * 信任围栏与 @iasiv5/dsh-obmc-web 一致：Host 须 loopback 或部署信任域，
+ * Sec-Fetch-Site 不得 cross-site，Origin 须同 Host 主机名。这不是认证——
+ * 认证由部署在 GUI 前面的网关（dsh-auth-caddy 等）负责。
+ *
+ * 第二阶段扩展点：在 `/onetree-log/dumps/<id>/section/<name>` 上挂
+ * 逐域解析器（sel/sensors/journal/…），见 lib/inventory.js 的 SECTIONS。
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import { pipeline } from 'node:stream/promises'
+import { Readable } from 'node:stream'
+import { DumpStore } from './store.js'
+
+export const name = '@inventec/dsh-onetree-log'
+export const inject = ['webServer', 'webRuntime']
+
+const MAX_UPLOAD_BYTES = 512 * 1024 * 1024
+const PREVIEW_BYTES = 256 * 1024
+const JSON_BODY_LIMIT = 8192
+const TMP_ROOT = () => path.join(store.dumpsDir, '.tmp-uploads')
+
+let store = null
+
+function writeJson(res, status, payload) {
+  const body = JSON.stringify(payload)
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+  res.end(body)
+}
+
+function readJsonBody(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = []
+    let size = 0
+    req.on('data', chunk => {
+      size += chunk.length
+      if (size > JSON_BODY_LIMIT) { reject(new Error('request body too large')); req.destroy(); return }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      try {
+        resolve(chunks.length === 0 ? {} : JSON.parse(Buffer.concat(chunks).toString('utf8')))
+      } catch {
+        reject(new Error('invalid JSON body'))
+      }
+    })
+    req.on('error', reject)
+  })
+}
+
+/** 上传字节流 → 临时文件（限额流式落盘，不进内存）。 */
+async function saveUpload(req, destPath) {
+  let received = 0
+  const counter = new Readable().wrap(req) // 仅用于错误传播；直接流 req
+  const out = fs.createWriteStream(destPath)
+  await new Promise((resolve, reject) => {
+    req.on('data', chunk => {
+      received += chunk.length
+      if (received > MAX_UPLOAD_BYTES) {
+        reject(new Error(`上传超过 ${(MAX_UPLOAD_BYTES / 1024 / 1024).toFixed(0)}MiB 上限；超大日志请放到服务器本地后用「登记服务器路径」导入`))
+        req.destroy()
+        out.destroy()
+        return
+      }
+      if (!out.write(chunk)) {
+        req.pause()
+        out.once('drain', () => req.resume())
+      }
+    })
+    req.on('end', () => out.end(() => resolve()))
+    req.on('error', reject)
+    out.on('error', reject)
+  })
+  void counter
+}
+
+function sanitizeUploadName(raw) {
+  const base = path.basename(String(raw ?? ''))
+  if (base === '' || base === '.' || base === '..' || base.includes('/') || base.includes('\\') || base.includes('\0')) {
+    throw new Error('非法的上传文件名')
+  }
+  return base.slice(0, 200)
+}
+
+// ── 信任围栏（与 dsh-obmc-web 同款） ─────────────────────────────────────
+
+function isLoopbackHostname(hostname) {
+  if (hostname === 'localhost' || hostname === '[::1]' || hostname === '::1') return true
+  const parts = hostname.split('.')
+  return parts.length === 4
+    && parts[0] === '127'
+    && parts.every(part => /^\d{1,3}$/.test(part) && Number(part) <= 255)
+}
+
+function trustedRequest(req, trustedHosts) {
+  const host = req.headers.host
+  if (typeof host !== 'string' || host === '') return false
+  let hostUrl
+  try { hostUrl = new URL(`http://${host}`) } catch { return false }
+  const trusted = (trustedHosts ?? []).some(entry => {
+    try {
+      const entryUrl = new URL(`http://${entry}`)
+      const withPort = entryUrl.port !== ''
+      return withPort
+        ? `${entryUrl.hostname}:${entryUrl.port}` === hostUrl.host
+        : entryUrl.hostname === hostUrl.hostname
+    } catch { return false }
+  })
+  if (!isLoopbackHostname(hostUrl.hostname) && !trusted) return false
+  if (req.headers['sec-fetch-site'] === 'cross-site') return false
+  const origin = req.headers.origin
+  if (origin === undefined) return true
+  try {
+    return new URL(origin).hostname === hostUrl.hostname
+  } catch {
+    return false
+  }
+}
+
+// ── 文件预览 ─────────────────────────────────────────────────────────────
+
+function looksBinary(buf) {
+  const n = Math.min(buf.length, 2048)
+  for (let i = 0; i < n; i += 1) {
+    const b = buf[i]
+    if (b === 0) return true
+    if (b < 7 || (b > 13 && b < 32 && b !== 27)) return true
+  }
+  return false
+}
+
+function previewFile(absPath) {
+  const stat = fs.statSync(absPath)
+  if (!stat.isFile()) throw new Error('不是常规文件')
+  const handle = fs.openSync(absPath, 'r')
+  try {
+    const len = Math.min(stat.size, PREVIEW_BYTES)
+    const buf = Buffer.alloc(len)
+    fs.readSync(handle, buf, 0, len, 0)
+    if (looksBinary(buf)) {
+      return { binary: true, size: stat.size, truncated: stat.size > len }
+    }
+    return {
+      binary: false,
+      size: stat.size,
+      truncated: stat.size > len,
+      content: buf.toString('utf8'),
+    }
+  } finally {
+    fs.closeSync(handle)
+  }
+}
+
+// ── 路由分发 ─────────────────────────────────────────────────────────────
+
+async function dispatch(req, res, log) {
+  const url = new URL(req.url ?? '/', 'http://dsh.internal')
+  const parts = url.pathname.split('/').filter(Boolean) // ['onetree-log', ...]
+  const method = req.method ?? 'GET'
+
+  // GET /onetree-log/dumps
+  if (parts[1] === 'dumps' && parts.length === 2) {
+    if (method !== 'GET') return writeJson(res, 405, { error: 'method not allowed' })
+    return writeJson(res, 200, { dumps: store.list() })
+  }
+
+  if (parts.length === 1 && parts[0] === 'onetree-log') {
+    if (method !== 'GET') return writeJson(res, 405, { error: 'method not allowed' })
+    return writeJson(res, 200, { dumps: store.list() })
+  }
+
+  if (parts[1] === 'dumps' && parts.length === 3) {
+    const id = parts[2]
+    if (method === 'GET') {
+      const detail = store.detail(id)
+      if (!detail) return writeJson(res, 404, { error: 'dump 不存在' })
+      return writeJson(res, 200, detail)
+    }
+    if (method === 'DELETE') {
+      return writeJson(res, store.remove(id) ? 200 : 404, { ok: true })
+    }
+    return writeJson(res, 405, { error: 'method not allowed' })
+  }
+
+  if (parts[1] === 'dumps' && parts[3] === 'file' && parts.length === 4) {
+    if (method !== 'GET') return writeJson(res, 405, { error: 'method not allowed' })
+    const rel = url.searchParams.get('path') ?? ''
+    try {
+      const abs = store.resolveFile(parts[2], rel)
+      return writeJson(res, 200, previewFile(abs))
+    } catch (error) {
+      return writeJson(res, 400, { error: error.message })
+    }
+  }
+
+  if (parts[1] === 'upload' && parts.length === 2) {
+    if (method !== 'POST') return writeJson(res, 405, { error: 'method not allowed' })
+    const name = sanitizeUploadName(url.searchParams.get('name'))
+    fs.mkdirSync(TMP_ROOT(), { recursive: true })
+    const tmp = path.join(TMP_ROOT(), `${Date.now()}-${Math.random().toString(16).slice(2)}-${name}`)
+    try {
+      await saveUpload(req, tmp)
+      const meta = await store.ingestArchive(tmp, { sourceKind: 'upload', label: name })
+      log?.info?.(`[dsh-onetree-log] ingested upload ${meta.id} (${meta.detected.score} 分)`)
+      return writeJson(res, 200, { ok: true, dump: { ...meta, rootDir: undefined } })
+    } catch (error) {
+      try { fs.rmSync(tmp, { force: true }) } catch { /* ignore */ }
+      return writeJson(res, 400, { error: error.message })
+    }
+  }
+
+  if (parts[1] === 'open-path' && parts.length === 2) {
+    if (method !== 'POST') return writeJson(res, 405, { error: 'method not allowed' })
+    try {
+      const body = await readJsonBody(req)
+      const p = String(body.path ?? '').trim()
+      if (p === '') return writeJson(res, 400, { error: 'path 不能为空' })
+      const resolved = path.resolve(p)
+      const stat = fs.statSync(resolved) // 不存在时抛错 → 400
+      const label = String(body.label ?? path.basename(resolved)).slice(0, 200)
+      const meta = stat.isDirectory()
+        ? store.ingestDir(resolved, { label })
+        : await store.ingestArchive(resolved, { sourceKind: 'path-archive', label })
+      log?.info?.(`[dsh-onetree-log] ingested path ${meta.id} (${meta.sourceKind})`)
+      return writeJson(res, 200, { ok: true, dump: { ...meta, rootDir: undefined } })
+    } catch (error) {
+      return writeJson(res, 400, { error: error.message })
+    }
+  }
+
+  return writeJson(res, 404, { error: 'not found' })
+}
+
+export function apply(ctx) {
+  store = new DumpStore()
+  ctx.logger?.info?.(`[dsh-onetree-log] store at ${store.dumpsDir}，已登记 ${store.list().length} 个 dump`)
+
+  const trustedHostsOf = () => (Array.isArray(ctx.webRuntime?.trustedHosts) ? ctx.webRuntime.trustedHosts : [])
+  try {
+    ctx.effect(() => ctx.webServer.register({
+      kind: 'prefix',
+      path: '/onetree-log',
+      handler: (req, res) => {
+        if (!trustedRequest(req, trustedHostsOf())) {
+          res.writeHead(403, { 'content-type': 'text/plain; charset=utf-8' })
+          res.end('dsh-onetree-log: forbidden')
+          return
+        }
+        dispatch(req, res, ctx.logger).catch(error => {
+          ctx.logger?.warn?.(`[dsh-onetree-log] ${req.method} ${req.url} failed: ${error.message}`)
+          try {
+            if (!res.headersSent) writeJson(res, 500, { error: error.message })
+            else res.end()
+          } catch { /* socket gone */ }
+        })
+      },
+    }), 'dsh-onetree-log: /onetree-log prefix')
+  } catch (error) {
+    ctx.logger?.warn?.(`[dsh-onetree-log] skipped route registration: ${error.message}`)
+  }
+}

package/lib/inventory.js

@@ -0,0 +1,166 @@
+/**
+ * inventory.js — dump 文件清单与基础分类。
+ *
+ * 第二阶段逐域解析的基石：把 dump 根目录走一遍，产出
+ *   - files[]：每个文件的相对路径 / 大小 / 所属 section（域）
+ *   - stats：按 section 聚合（文件数 / 字节数），+ 总量与截断标记
+ *   - tree：嵌套目录树（供前端渲染）
+ *
+ * section 划分与《OneTree 一键日志分析方案》P1 报告 §4.3 对齐；
+ * KNOWN 表是"文件名 → section"的映射，第二阶段的解析器（sel/sensors/journal…）
+ * 直接按 section 挂到对应文件集上，未识别文件归入 other，不丢失。
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+
+export const SECTIONS = {
+  overview: { label: '概览', color: '#8b9cf7' },
+  sel: { label: 'SEL 事件', color: '#f87171' },
+  sensors: { label: '传感器', color: '#fbbf24' },
+  elog: { label: 'phosphor 事件', color: '#fb923c' },
+  journal: { label: '系统日志', color: '#60a5fa' },
+  inventory: { label: 'FRU/库存', color: '#34d399' },
+  services: { label: '服务/进程', color: '#a78bfa' },
+  boot: { label: '启动', color: '#f472b6' },
+  thermal: { label: '温度/风扇', color: '#fdba74' },
+  power: { label: '电源', color: '#facc15' },
+  network: { label: '网络', color: '#22d3ee' },
+  versions: { label: '版本', color: '#94a3b8' },
+  console: { label: '串口控制台', color: '#e879f9' },
+  other: { label: '其他', color: '#9ca3af' },
+}
+
+/** 文件名（basename）→ section 的已知映射。第二阶段在此表中追加即可。 */
+export const KNOWN_FILES = {
+  // overview
+  'summary.log': 'overview', 'em-system.json': 'overview', 'bmc-state.log': 'overview',
+  'host-state.log': 'overview', 'chassis-state.log': 'overview', 'settings.log': 'overview',
+  'uptime.log': 'overview', 'os-release': 'overview', 'timedate.log': 'overview',
+  // sel
+  'selinfo.log': 'sel', 'selinfo': 'sel', 'ipmitool_sel_list.log': 'sel',
+  // sensors
+  'sensorinfo.log': 'sensors', 'sensor-readings.log': 'sensors', 'hwmon.log': 'thermal',
+  // elog
+  'elogall.log': 'elog', 'eventlog.log': 'elog',
+  // journal
+  'journal-pretty.log': 'journal', 'journalctl.log': 'journal', 'journal.log': 'journal',
+  'dmesg.log': 'journal', 'kernalringbuff.log': 'journal', 'kernelringbuff.log': 'journal',
+  'kernalcmdline.log': 'journal', 'kernlcmdline.log': 'journal',
+  // inventory
+  'fru-info.log': 'inventory', 'inventory.log': 'inventory', 'fru_info.txt': 'inventory',
+  // services
+  'failed-services.log': 'services', 'pslist.log': 'services', 'top.log': 'services',
+  'freemem.log': 'services', 'meminfo': 'services', 'cpuinfo': 'services',
+  'slabinfo.log': 'services', 'softirqs.log': 'services', 'interrupts.log': 'services',
+  'lsof.log': 'services', 'varfilelist.log': 'services', 'tmpfilelist.log': 'services',
+  'disk-usage.log': 'services', 'mntinfo.log': 'services', 'dreport.log': 'services',
+  // boot
+  'biospostcode.log': 'boot', 'boot-progress-info.log': 'boot', 'fw-printenv.log': 'boot',
+  'bios.log': 'boot',
+  // thermal
+  'thermal_info.log': 'thermal', 'fan_info.log': 'thermal', 'faninfo.log': 'thermal',
+  // power
+  'power_statistics.csv': 'power', 'psu_info.log': 'power', 'psuinfo.log': 'power',
+  'powerinfo.log': 'power',
+  // network
+  'network.log': 'network', 'netstat.log': 'network', 'iproute.log': 'network',
+  'ipaddr.log': 'network', 'iplink.log': 'network', 'arptable.log': 'network',
+  'routeinfo.log': 'network', 'networkrouteinfo.log': 'network', 'networkconfig.log': 'network',
+  'arpcntlconf.log': 'network', 'channelconfig.log': 'network', 'channelaccess.log': 'network',
+  // versions
+  'fw-version.log': 'versions', 'app_revision.txt': 'versions', 'package_info': 'versions',
+  'version_info.log': 'versions',
+  // console
+  'obmc-console.log': 'console', 'dpu_console': 'console', 'console.log': 'console',
+}
+
+const WALK_MAX = 20_000
+
+function classify(basename) {
+  if (Object.prototype.hasOwnProperty.call(KNOWN_FILES, basename)) {
+    return { section: KNOWN_FILES[basename], known: true }
+  }
+  return { section: 'other', known: false }
+}
+
+/**
+ * 构建 dump 清单。返回：
+ * { files: [{path, name, size, section, known}], stats, tree, truncated }
+ */
+export function buildInventory(rootDir, { maxFiles = 10_000 } = {}) {
+  const files = []
+  const stats = { sections: {}, totalFiles: 0, totalBytes: 0, knownFiles: 0, otherFiles: 0 }
+  let truncated = false
+  let walked = 0
+
+  const bump = (section, size, known) => {
+    const s = stats.sections[section] ?? (stats.sections[section] = { count: 0, bytes: 0, label: SECTIONS[section]?.label ?? section })
+    s.count += 1
+    s.bytes += size
+    stats.totalFiles += 1
+    stats.totalBytes += size
+    if (known) stats.knownFiles += 1
+    else stats.otherFiles += 1
+  }
+
+  const walk = (dir, rel) => {
+    let entries
+    try { entries = fs.readdirSync(dir, { withFileTypes: true }) } catch { return }
+    entries.sort((a, b) => a.name.localeCompare(b.name))
+    for (const e of entries) {
+      if (++walked > WALK_MAX) { truncated = true; return }
+      if (files.length >= maxFiles) { truncated = true; return }
+      const childRel = rel === '' ? e.name : `${rel}/${e.name}`
+      if (e.isDirectory()) {
+        files.push({ path: childRel, name: e.name, size: 0, dir: true, section: null, known: false })
+        walk(path.join(dir, e.name), childRel)
+      } else if (e.isFile()) {
+        let size = 0
+        try { size = fs.statSync(path.join(dir, e.name)).size } catch { /* ignore */ }
+        const { section, known } = classify(e.name)
+        files.push({ path: childRel, name: e.name, size, dir: false, section, known })
+        bump(section, size, known)
+      }
+    }
+  }
+  walk(rootDir, '')
+
+  return { files, stats, tree: buildTree(files), truncated }
+}
+
+/** files[] → 嵌套树（目录含 size 汇总）。 */
+export function buildTree(files) {
+  const root = { name: '', dir: true, children: new Map(), size: 0, fileCount: 0 }
+  for (const f of files) {
+    const segments = f.path.split('/')
+    let node = root
+    for (let i = 0; i < segments.length; i += 1) {
+      const name = segments[i]
+      const isLeaf = i === segments.length - 1
+      if (isLeaf && !f.dir) {
+        node.children.set(name, { name, dir: false, size: f.size, section: f.section, known: f.known })
+        let up = node
+        while (up) { up.size += f.size; up.fileCount += 1; up = up.parent }
+      } else {
+        if (!node.children.has(name)) {
+          const child = { name, dir: true, children: new Map(), size: 0, fileCount: 0, parent: node }
+          node.children.set(name, child)
+        }
+        node = node.children.get(name)
+      }
+    }
+  }
+  const shape = node => {
+    if (!node.dir) {
+      return { name: node.name, dir: false, size: node.size, section: node.section, known: node.known }
+    }
+    const children = [...node.children.values()].sort((a, b) => {
+      if (a.dir !== b.dir) return a.dir ? -1 : 1
+      return a.name.localeCompare(b.name)
+    }).map(shape)
+    const out = { name: node.name, dir: true, size: node.size, fileCount: node.fileCount }
+    if (children.length > 0) out.children = children
+    return out
+  }
+  return shape(root)
+}

package/lib/store.js

@@ -0,0 +1,194 @@
+/**
+ * store.js — dump 持久化与生命周期。
+ *
+ * 目录布局（root 可用 ONETREE_LOG_DIR 覆盖）：
+ *   <root>/dumps/<id>/archive/<原始文件名>   ← 上传的压缩包（open-path 登记的原地文件不复制）
+ *   <root>/dumps/<id>/extracted/…            ← 解包产物（dump 根在其中或即为其本身）
+ *   <root>/dumps/<id>/meta.json              ← 元数据
+ *
+ * id 形如 20260919-153012-ffdc_xxx（时间戳 + 归档名 slug），列表按 id 倒序即时间倒序。
+ * meta 记录 sourceKind（upload | path-archive | path-dir）：path 类不拥有原文件，
+ * 删除时只清本插件目录；dir 类连 extracted 也不删（用户自己的目录）。
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import os from 'node:os'
+import { randomBytes } from 'node:crypto'
+import { extractAndDetect, detectDumpRoot } from './detect.js'
+import { isArchive } from './extract.js'
+import { buildInventory } from './inventory.js'
+
+export function storeRoot() {
+  return process.env.ONETREE_LOG_DIR ?? path.join(os.homedir(), '.local', 'share', 'dsh-onetree-log')
+}
+
+const slugify = name => String(name)
+  .toLowerCase()
+  .replace(/\.(tar\.gz|tar\.zst|tgz|tzst|tar|zip)$/i, '')
+  .replace(/[^a-z0-9._-]+/g, '_')
+  .replace(/^_+|_+$/g, '')
+  .slice(0, 48) || 'dump'
+
+const pad2 = n => String(n).padStart(2, '0')
+
+function timestampId(date = new Date()) {
+  return `${date.getFullYear()}${pad2(date.getMonth() + 1)}${pad2(date.getDate())}`
+    + `-${pad2(date.getHours())}${pad2(date.getMinutes())}${pad2(date.getSeconds())}`
+    + `-${randomBytes(2).toString('hex')}`
+}
+
+export class DumpStore {
+  constructor(root) {
+    this.root = root ?? storeRoot()
+    this.dumpsDir = path.join(this.root, 'dumps')
+    this.cache = new Map() // id → meta
+    this.reload()
+  }
+
+  reload() {
+    this.cache.clear()
+    fs.mkdirSync(this.dumpsDir, { recursive: true })
+    for (const e of fs.readdirSync(this.dumpsDir, { withFileTypes: true })) {
+      if (!e.isDirectory()) continue
+      const metaPath = path.join(this.dumpsDir, e.name, 'meta.json')
+      try {
+        const meta = JSON.parse(fs.readFileSync(metaPath, 'utf8'))
+        if (meta?.id === e.name) this.cache.set(meta.id, meta)
+      } catch { /* 半途中断的 ingest：目录在但 meta 缺失 → 视为空壳，保留待覆盖/删除 */ }
+    }
+  }
+
+  list() {
+    return [...this.cache.values()]
+      .sort((a, b) => (a.id < b.id ? 1 : a.id > b.id ? -1 : 0))
+      .map(m => ({
+        id: m.id, label: m.label, createdAt: m.createdAt, sourceKind: m.sourceKind,
+        sourcePath: m.sourcePath ?? null, archiveName: m.archiveName ?? null,
+        archiveSize: m.archiveSize ?? null, format: m.format ?? null,
+        detected: { score: m.detected?.score ?? 0, markers: m.detected?.markers ?? { strong: [], medium: [] }, hint: m.detected?.hint ?? null },
+        rootDir: m.rootDir,
+      }))
+  }
+
+  get(id) {
+    const key = String(id ?? '')
+    // id 直接拼进文件系统路径：只放行时间戳-hex-slug 形态的安全字符
+    if (!/^[0-9]{8}-[0-9]{6}-[a-f0-9]{4}-[a-z0-9._-]+$/.test(key)) return undefined
+    return this.cache.get(key)
+  }
+
+  /** ingest 完成后的完整详情：meta + 现算的文件清单（带内存缓存）。 */
+  detail(id) {
+    const meta = this.get(id)
+    if (!meta) return undefined
+    const detail = { ...meta }
+    try {
+      detail.inventory = buildInventory(meta.rootDir)
+    } catch (error) {
+      detail.inventory = { files: [], stats: { sections: {}, totalFiles: 0, totalBytes: 0, knownFiles: 0, otherFiles: 0 }, tree: null, truncated: false, error: error.message }
+    }
+    return detail
+  }
+
+  /**
+   * 登记一个压缩包（上传落盘的临时文件，或服务器本地路径）。
+   * upload 模式会把 archive 移进自己的目录；path 模式原地引用。
+   */
+  async ingestArchive(archivePath, { sourceKind = 'upload', label } = {}) {
+    const resolved = path.resolve(String(archivePath))
+    if (!isArchive(resolved)) {
+      throw new Error(`不是受支持的压缩包（.tar / .tar.gz / .tgz / .tar.zst / .tzst / .zip）: ${path.basename(resolved)}`)
+    }
+    const stat = fs.statSync(resolved)
+    if (stat.size === 0) throw new Error('压缩包为空文件')
+    const base = slugify(label ?? path.basename(resolved))
+    const id = `${timestampId()}-${base}`
+    const home = path.join(this.dumpsDir, id)
+    fs.mkdirSync(home, { recursive: true })
+
+    try {
+      const detected = await extractAndDetect(resolved, home)
+      let archiveName = path.basename(resolved)
+      let archiveSize = stat.size
+      if (sourceKind === 'upload') {
+        const archiveHome = path.join(home, 'archive')
+        fs.mkdirSync(archiveHome, { recursive: true })
+        fs.renameSync(resolved, path.join(archiveHome, archiveName))
+      }
+      const meta = {
+        id,
+        label: label ?? path.basename(resolved),
+        createdAt: new Date().toISOString(),
+        sourceKind,
+        sourcePath: sourceKind === 'upload' ? null : resolved,
+        archiveName,
+        archiveSize,
+        format: null,
+        detected: { score: detected.score, markers: detected.markers, hint: detected.hint },
+        rootDir: detected.rootDir,
+      }
+      fs.writeFileSync(path.join(home, 'meta.json'), JSON.stringify(meta, null, 2))
+      this.cache.set(id, meta)
+      return meta
+    } catch (error) {
+      // 失败清理：不留半成品目录；upload 的临时文件也一并删除
+      fs.rmSync(home, { recursive: true, force: true })
+      if (sourceKind === 'upload') { try { fs.rmSync(resolved, { force: true }) } catch { /* ignore */ } }
+      throw error
+    }
+  }
+
+  /** 登记一个已解压的 dump 目录（不复制，原地分析；删除登记不删目录）。 */
+  ingestDir(dirPath, { label } = {}) {
+    const resolved = path.resolve(String(dirPath))
+    if (!fs.statSync(resolved).isDirectory()) throw new Error('路径不是目录')
+    const detected = detectDumpRoot(resolved)
+    const id = `${timestampId()}-${slugify(label ?? path.basename(resolved))}`
+    const home = path.join(this.dumpsDir, id)
+    fs.mkdirSync(home, { recursive: true })
+    const meta = {
+      id,
+      label: label ?? path.basename(resolved),
+      createdAt: new Date().toISOString(),
+      sourceKind: 'path-dir',
+      sourcePath: resolved,
+      archiveName: null,
+      archiveSize: null,
+      format: null,
+      detected: { score: detected.score, markers: detected.markers, hint: detected.hint },
+      rootDir: detected.rootDir,
+    }
+    fs.writeFileSync(path.join(home, 'meta.json'), JSON.stringify(meta, null, 2))
+    this.cache.set(id, meta)
+    return meta
+  }
+
+  /** 删除登记；只删自己拥有的数据（extracted + archive + meta）。 */
+  remove(id) {
+    const meta = this.get(id)
+    if (!meta) return false
+    // path-dir：rootDir 是用户目录，绝不能删；只清登记目录（里面只有 meta.json）
+    const home = path.join(this.dumpsDir, id)
+    if (meta.sourceKind === 'path-dir') {
+      fs.rmSync(home, { recursive: true, force: true })
+    } else {
+      fs.rmSync(home, { recursive: true, force: true })
+    }
+    this.cache.delete(id)
+    return true
+  }
+
+  /** 在 dump 根内安全解析相对路径（拒绝逃逸），返回绝对路径或抛错。 */
+  resolveFile(id, relPath) {
+    const meta = this.get(id)
+    if (!meta) throw new Error('dump 不存在')
+    const rel = String(relPath ?? '')
+    if (rel.includes('..') || rel.startsWith('/') || rel.includes('\0')) {
+      throw new Error('非法的文件路径')
+    }
+    const target = path.resolve(meta.rootDir, ...rel.split('/').filter(s => s !== '' && s !== '.'))
+    const base = path.resolve(meta.rootDir)
+    if (target !== base && !target.startsWith(base + path.sep)) throw new Error('非法的文件路径')
+    return target
+  }
+}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@inventec/dsh-onetree-log",
+  "version": "0.1.0",
+  "description": "AMI MegaRAC OneTree 一键日志（OpenBMC dreport dump）上传与分析框架：设置面板「OneTree 日志」上传压缩包或登记服务器本地路径，安全解包、自动探测 dump 根、文件清单分类，为第二阶段逐域解析提供内核。",
+  "type": "module",
+  "main": "./lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "author": "iasiv5",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/iasiv5/dsh-onetree-log.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": ">=22.15.0"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "ami",
+    "megarac",
+    "onetree",
+    "openbmc",
+    "bmc",
+    "ffdc",
+    "dreport",
+    "log-analysis",
+    "settings-section"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-layout"
+      ]
+    }
+  }
+}