@inventec/dsh-onetree-log 0.1.3 → 0.1.4

package/lib/index.js

@@ -23,7 +23,7 @@ import { pipeline } from 'node:stream/promises'
 import { DumpStore } from './store.js'
 
 export const name = '@inventec/dsh-onetree-log'
-export const inject = ['webServer', 'webRuntime']
+export const inject = ['webServer'] /* LOCAL-PATCH 2026-10-18 (know-how 035): 0.2.1 host removed webRuntime (→webStartup); trusted-hosts now resolved per-request via non-throwing dual-service fallback */
 
 const MAX_UPLOAD_BYTES = 512 * 1024 * 1024
 const PREVIEW_BYTES = 256 * 1024
@@ -247,7 +247,14 @@ export function apply(ctx) {
   store = new DumpStore()
   ctx.logger?.info?.(`[dsh-onetree-log] store at ${store.dumpsDir}，已登记 ${store.list().length} 个 dump`)
 
-  const trustedHostsOf = () => (Array.isArray(ctx.webRuntime?.trustedHosts) ? ctx.webRuntime.trustedHosts : [])
+  /* LOCAL-PATCH 2026-10-18 (know-how 035): was `ctx.webRuntime?.trustedHosts` (0.2.1 host removed webRuntime; cordis Local throws on un-injected property access, `?.` cannot protect). 034 pattern: non-throwing ctx.get lookup, webStartup (0.2.1+) → webRuntime (≤0.2.0) → []. */
+  const resolveTrustedHosts = () => {
+    let startup, runtime
+    try { startup = ctx?.get?.('webStartup') } catch {}
+    try { runtime = ctx?.get?.('webRuntime') } catch {}
+    return startup?.trustedHosts ?? runtime?.trustedHosts ?? []
+  }
+  const trustedHostsOf = () => resolveTrustedHosts()
   try {
     ctx.effect(() => ctx.webServer.register({
       kind: 'prefix',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inventec/dsh-onetree-log",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "AMI MegaRAC OneTree 一键日志（OpenBMC dreport dump）上传与分析框架：设置面板「OneTree 日志」上传压缩包或登记服务器本地路径，安全解包、自动探测 dump 根、文件清单分类，为第二阶段逐域解析提供内核。",
   "type": "module",
   "main": "./lib/index.js",