@noob-stupid/dsh-plugin-console 0.5.23 → 0.5.24

package/README.md

@@ -252,6 +252,25 @@ Requires: DSH ≥ 0.1.0-rc.6 (web profile, with `dsh-client-modules` / `dsh-host
 >   sources** all support primary→backup plus self-hosted mirrors (internal Gitea/GitLab, local
 >   `file://` bare repos).
 
+#### Download-install channels and dependency forms
+
+Which channel gets used depends on **what the package actually is** — not on a setting:
+
+| Channel | Target | When it is used | Written in the manifest as | Needs plugin-src |
+|---|---|---|---|---|
+| ① pnpm (registry) | npm registry | **if the package is on the registry, this is the main channel** | `<name>: <version>` | no |
+| ② curl tarball (registry) | npm registry tarball | **races in parallel** with ① (takes over when pnpm is blocked/stuck) | same as above | no |
+| ③ GitHub Release asset | prebuilt tgz of an upstream release | when **both registry sources 404** | `link:<absolute path>` | yes |
+| ④ git clone | repository source | no npm package / no release asset | `link:…` | yes |
+| ⑤ archive (tar.gz) | codeload / mirrors | when the git protocol cannot move any bytes | `link:…` | yes |
+
+In one sentence: **has an npm package → ①/②, write a version, keep the lock clean; no npm package →
+fall back to ③/④/⑤, materialize into `~/.dsh/plugin-src/<pkg>` and write `link:`.**
+
+Environment reminder: an accelerator/proxy that rewrites hosts makes the direct sources unreachable
+(see above), and free mirrors are unreliable for the **git protocol** on large packs while
+**archive/raw are usually much faster** — the console already switches by itself.
+
 ### Static index market (plugin & skill tabs)
 
 > **Hybrid architecture**: browsing uses the static index (instant, zero GitHub API calls),

package/README.zh.md

@@ -192,6 +192,24 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 > - 想让某条通道优先，去「软件源」里调整顺序：**Git 源**、**archive 源**、**索引源** 都支持主→备与
 >   自建镜像（内网 Gitea/GitLab、本地 `file://` 裸仓库均可）。
 
+#### 下载安装通道与依赖形态
+
+走哪条通道，取决于**这个包到底是什么**，而不是某个开关：
+
+| 通道 | 目标 | 何时使用 | 清单里写成 | 需要 plugin-src |
+|---|---|---|---|---|
+| ① pnpm（registry） | npm registry | **registry 上有该包就走它**（主通道） | `<name>: <version>` | 否 |
+| ② curl tarball（registry） | npm registry tarball | 与 ① **并行竞速**（pnpm 被拦/卡住时顶上） | 同上 | 否 |
+| ③ GitHub Release 资产 | 上游 release 的预构建 tgz | registry **双源 404** 时 | `link:<绝对路径>` | 是 |
+| ④ git 克隆 | 仓库源码 | 无 npm 包 / 无 release 资产 | `link:…` | 是 |
+| ⑤ archive（tar.gz） | codeload / 镜像 | git 协议拉不动时 | `link:…` | 是 |
+
+一句话结论：**有 npm 包 → 走 ①/②，写版本号、lock 干净；没有 npm 包 → 降级 ③/④/⑤，物化到
+`~/.dsh/plugin-src/<pkg>` 并写 `link:`。**
+
+环境提醒：加速器/代理改 hosts 会让**直连源**失效（见上）；免费镜像的 **git 协议**对大 pack 不可靠，
+而 **archive/raw 通常更快** —— 控制台已按这两条自行切换，不用手动换源。
+
 ### 静态索引市场（插件 / 技能双 tab）
 
 > **混合架构**：浏览走静态索引（秒开、零 API 调用），搜索走实时通道（GitHub 搜索 API / 多源并行）——

package/lib/client.js

@@ -121,7 +121,14 @@ window.__ModuleLoader__.load({
 			actionOk: "执行成功",
 			actionPartial: "部分成功（清单已改，lock 未对齐）",
 			actionFailed: "执行失败",
-			actionLongTitle: "控制台按白名单动作在自己的进程里执行（只认 pin-dependency / reconcile-lock 这类内置动作，绝不接受自定义命令字符串）；命令仅供展示与复制。",
+			actionLongTitle: "控制台按白名单动作在自己的进程里执行（只认 pin-dependency / reconcile-lock / allow-builds 这类内置动作，绝不接受自定义命令字符串）；命令仅供展示与复制。",
+			// 2026-09-27 加法（选项 2）：pnpm 因**构建脚本未获批准**报错时，动作框多出这一个按钮。
+			// 短句进面板，长解释（含"它不执行任何脚本/放行后第一次安装会很慢"）一律进悬浮 title。
+			actionAllowLabel: "允许这些构建脚本",
+			actionAllowLong: "只有你点它才会写盘：在 profile 的 pnpm-workspace.yaml 里把**具体包名**补进 allowBuilds（改前先备份 .bak-<时间戳>、写完读回核实、其它字段一字不动）。它本身不下载、不执行任何脚本；放行后**下一次** pnpm 安装才会真正跑这些脚本（二进制要下载、原生模块要编译，本机实测首次约 19 分钟）。",
+			actionAllowOk: "已写入放行项",
+			actionAllowFailed: "放行失败（文件未改动）",
+			actionAllowBackup: "备份",
 			safetyMode: "运行模式",
 			safetyModeManaged: "托管：框架升级与回滚由本控制台负责（默认，行为与之前一致）",
 			safetyModeManagedOn: "已切到托管模式：框架升级与回滚仍由本控制台负责",
@@ -646,7 +653,13 @@ window.__ModuleLoader__.load({
 			actionOk: "Done",
 			actionPartial: "Partly done (manifest updated, lock not aligned)",
 			actionFailed: "Failed",
-			actionLongTitle: "The console runs a whitelisted action inside its own process (only built-in kinds such as pin-dependency / reconcile-lock; a custom command string is never accepted). The command itself is display/copy only.",
+			actionLongTitle: "The console runs a whitelisted action inside its own process (only built-in kinds such as pin-dependency / reconcile-lock / allow-builds; a custom command string is never accepted). The command itself is display/copy only.",
+			// 2026-09-27 additive (option 2): shown when pnpm fails because build scripts are not approved.
+			actionAllowLabel: "Allow these build scripts",
+			actionAllowLong: "Nothing is written until you click this: it adds the exact package names to allowBuilds in the profile's pnpm-workspace.yaml (backup .bak-<timestamp> first, read back and verify, other fields untouched). It downloads and runs nothing itself; only the *next* pnpm install actually runs those scripts (a binary download plus native builds — measured ≈19 minutes the first time on this machine).",
+			actionAllowOk: "Approval written",
+			actionAllowFailed: "Approval failed (file untouched)",
+			actionAllowBackup: "Backup",
 			safetyMode: "Operating mode",
 			safetyModeManaged: "Managed: this console owns framework upgrade and rollback (default, unchanged behaviour)",
 			safetyModeManagedOn: "Switched to managed: framework upgrade and rollback stay with this console",
@@ -5197,20 +5210,32 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 		 * 不新增徽章、不新增独立面板 —— 长解释一律进悬浮 title。 */
 		function SuggestedActionBox({ job, t }) {
 			const [state, setState] = react.useState({ phase: "idle", text: null, level: null, title: null, closed: false });
+			// 2026-09-27 加法（选项 2）：第二个显式动作的状态（「允许这些构建脚本」）。
+			// 只在**执行结果**说明"pnpm 因构建脚本未获批准而报错"时才出现（服务端下发 state.nextAction）；
+			// 平时一个像素都不多占。
+			const [allow, setAllow] = react.useState({ phase: "idle", text: null, level: null, title: null });
 			const action = job === null || job === undefined ? null : (job.suggestedAction ?? null);
 			if (action === null || typeof action.command !== "string" || state.closed === true) return null;
 			const running = state.phase === "running";
 			const label = action.kind === "pin-dependency" ? t("actionPinLabel")
 				: action.kind === "reconcile-lock" ? t("actionReconcileLabel")
-					: (typeof action.label === "string" && action.label !== "" ? action.label : String(action.kind ?? ""));
+					: action.kind === "allow-builds" ? t("actionAllowLabel")
+						: (typeof action.label === "string" && action.label !== "" ? action.label : String(action.kind ?? ""));
+			const allowAction = state.nextAction !== null && state.nextAction !== undefined && typeof state.nextAction === "object"
+				? state.nextAction
+				: (action.kind === "allow-builds" ? action : null);
+			const allowRunning = allow.phase === "running";
+			const showAllow = allowAction !== null && typeof allowAction.command === "string" && allow.phase !== "done";
 			const run = () => {
 				if (running || action.payload === null || typeof action.payload !== "object") return;
-				setState({ phase: "running", text: t("actionRunning"), level: null, title: null, closed: false });
+				setState({ phase: "running", text: t("actionRunning"), level: null, title: null, closed: false, nextAction: state.nextAction ?? null });
 				callAction(action.payload).then(
 					(done) => {
 						const verdict = done?.ok === true ? t("actionOk") : done?.partial === true ? t("actionPartial") : t("actionFailed");
 						const parts = [verdict];
 						if (typeof done?.reason === "string" && done.reason !== "") parts.push(done.reason);
+						// 服务端下发的 note（例如"已钉住，但 pnpm 因构建脚本未获批准而报错"）优先展示
+						if (Array.isArray(done?.notes) && done.notes.length > 0 && typeof done.notes[0] === "string") parts.push(done.notes[0]);
 						const raw = typeof done?.stderr === "string" && done.stderr.trim() !== "" ? done.stderr.trim() : "";
 						if (raw !== "") parts.push(raw.split("\n").slice(-1)[0]);
 						setState({
@@ -5219,13 +5244,36 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 							level: done?.ok === true ? null : "warn",
 							title: [done?.command, typeof done?.exitCode === "number" ? "exitCode=" + done.exitCode : null, done?.stdout, raw].filter((s) => typeof s === "string" && s !== "").join("\n") || null,
 							closed: false,
+							// 只有真的到了"构建脚本未获批准"这一步才把它带出来（老服务端没有这个字段 → null）
+							nextAction: done?.nextAction ?? null,
 						});
 					},
-					(error) => setState({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionFailed")), level: "error", title: null, closed: false }),
+					(error) => setState({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionFailed")), level: "error", title: null, closed: false, nextAction: state.nextAction ?? null }),
 				);
 			};
 			const copy = () => {
-				if (copyToClipboard(action.command)) setState({ phase: state.phase, text: t("actionCopied"), level: null, title: null, closed: false });
+				if (copyToClipboard(action.command)) setState({ ...state, text: t("actionCopied"), level: null, title: null });
+			};
+			// 「允许这些构建脚本」：同样是**结构化动作**（只发 nextAction.payload），服务端自己改文件；
+			// 面板绝不拼命令、也不碰 profile。
+			const runAllow = () => {
+				if (allowRunning || allowAction === null || typeof allowAction.payload !== "object" || allowAction.payload === null) return;
+				setAllow({ phase: "running", text: t("actionRunning"), level: null, title: null });
+				callAction(allowAction.payload).then(
+					(done) => {
+						const verdict = done?.ok === true ? t("actionAllowOk") : t("actionAllowFailed");
+						const parts = [verdict, typeof done?.reason === "string" ? done.reason : null, Array.isArray(done?.notes) ? done.notes[0] : null].filter((s) => typeof s === "string" && s !== "");
+						setAllow({
+							phase: done?.ok === true ? "done" : "error",
+							text: parts.join(" · "),
+							level: done?.ok === true ? null : "warn",
+							title: [done?.file, Array.isArray(done?.added) && done.added.length > 0 ? t("actionAllowLabel") + "：" + done.added.join("、") : null,
+								typeof done?.sha256Before === "string" ? "sha256 " + String(done.sha256Before).slice(0, 12) + " → " + String(done.sha256After ?? "").slice(0, 12) : null,
+								typeof done?.backup === "string" ? t("actionAllowBackup") + "：" + done.backup : null].filter((s) => typeof s === "string" && s !== "").join("\n") || null,
+						});
+					},
+					(error) => setAllow({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionAllowFailed")), level: "error", title: null }),
+				);
 			};
 			return el("div", { className: styles.detail, "data-suggested-action": String(action.kind ?? "") },
 				el("div", { className: styles.rowTop },
@@ -5233,7 +5281,7 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 					el("strong", { className: styles.name, title: t("actionLongTitle") }, label),
 					el("button", {
 						type: "button", className: styles.trashBtn, title: t("closeModal"), "aria-label": t("closeModal"),
-						onClick: () => setState({ phase: "idle", text: null, level: null, title: null, closed: true }),
+						onClick: () => setState({ phase: "idle", text: null, level: null, title: null, closed: true, nextAction: null }),
 					}, "✕")),
 				el("code", {
 					className: styles.note,
@@ -5243,12 +5291,23 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 				el("div", { className: styles.rowTop },
 					el("button", { type: "button", className: styles.toggle, disabled: running, onClick: run }, running ? t("actionRunning") : t("actionRun")),
 					el("button", { type: "button", className: styles.toggle, onClick: copy }, t("actionCopy")),
+					// ★ 选项 2 的第二个动作：只在这个场景出现，文案短句 + 悬浮长解释（中英各一份）
+					showAllow
+						? el("button", { type: "button", className: styles.toggle, "data-allow-builds": "true", title: t("actionAllowLong"), disabled: allowRunning, onClick: runAllow }, allowRunning ? t("actionRunning") : t("actionAllowLabel"))
+						: null,
 					el("span", {
 						className: styles.message,
 						"data-warn": state.level === "warn" ? "true" : undefined,
 						"data-error": state.level === "error" ? "true" : undefined,
 						title: state.title === null ? undefined : state.title,
-					}, state.text ?? "")));
+					}, state.text ?? "")),
+				allow.text === null ? null : el("div", { className: styles.rowTop },
+					el("span", {
+						className: styles.message,
+						"data-warn": allow.level === "warn" ? "true" : undefined,
+						"data-error": allow.level === "error" ? "true" : undefined,
+						title: allow.title === null ? undefined : allow.title,
+					}, allow.text)));
 		}
 		
 		function PluginSafetyTab({ t }) {

package/lib/server/domain/allow-builds.js

@@ -0,0 +1,330 @@
+// L1 · domain —— allow-builds.js（**只有用户显式点击时**才写盘：最小放行项 + 改前备份 + 写后读回核实）
+//
+// 为什么单开一个模块（2026-09-27 加法 + 改错）：
+//   pnpm 11 的 `strictDepBuilds` 默认为 true —— 只要 profile 里存在**带安装脚本但未获批准**的依赖，
+//   任何一次 pnpm 安装都会在**装完之后**抛 `ERR_PNPM_IGNORED_BUILDS` 并 exitCode=1，
+//   哪怕这次操作真正想做的事（写清单 + 对齐 lock）已经做完了；用户看到的却是"失败"。
+//   出路必须是**显式的**：用户自己点一下「允许这些构建脚本」，我们才在 profile 的 pnpm-workspace.yaml
+//   里补上**具体包名**的放行项（pnpm 自己的 `approve-builds` 写的就是这个位置）。
+//
+// ⚠️ 安全边界（写死在这里，配套测试 tests/test-allow-builds.mjs 逐条钉死）：
+//   ① **绝不自动执行**：本模块只被 domain/plugin-actions.js 的 `allow-builds` 动作调用，
+//      而那个动作只由用户点击 -> POST /plugin-console/run-suggested 触发；安装/检测路径永不调用它。
+//   ② **绝不下载、绝不执行任何脚本**：本模块只做文本改写（readFile/writeFile/copyFile），
+//      不 spawn 任何进程、不碰 argv、不跑 pnpm。放行只影响"pnpm 下次安装是否还会因未批准而报错"；
+//      真正的构建由 pnpm 在**用户之后自己发起**的安装里执行（本机实测首次 ≈19 分钟，note 里如实说清）。
+//   ③ **只动最小必要行**：命中一个包就只改/加那一行；其它字段一字不动（写后按行比对核实）；
+//      改前先复制 `.bak-<时间戳>`，写后读回核实（含 sha256 前后值）。
+//   ④ 认不出形态就不硬来：退回 `strictDepBuilds: false`（需求里点名的兜底），
+//      并在 note 里写清副作用（对所有依赖生效）。
+//
+// 分层：L1 domain —— 不认识 cordis ctx；时间戳可注入（便于离线断言）。
+import { createHash } from 'node:crypto'
+import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { NPM_NAME_RE } from './dep-source.js'
+
+const WORKSPACE_FILE = 'pnpm-workspace.yaml'
+const MODULES_FILE = join('node_modules', '.modules.yaml')
+const ALLOW_KEY = 'allowBuilds'
+const ALLOWED_VALUE = 'true'
+const DENIED_VALUE = 'false'
+const ONLY_BUILT_KEY = 'onlyBuiltDependencies'
+const STRICT_KEY = 'strictDepBuilds'
+const IGNORED_KEY = 'ignoredBuilds'
+
+function textOf(value) {
+  return typeof value === 'string' ? value : String(value ?? '')
+}
+function sha256Of(text) {
+  return createHash('sha256').update(textOf(text), 'utf8').digest('hex')
+}
+/** 文件行：统一按 LF 认识（CRLF 也拆得开；写回时统一 LF，符合"LF / 无 BOM"的要求）。 */
+function linesOf(text) {
+  return textOf(text).split(/\r?\n/u)
+}
+function unquote(value) {
+  return textOf(value).trim().replace(/^['"]|['"]$/gu, '')
+}
+/** 顶层键（容忍 pnpm 写的带引号形态：`"allowBuilds":`）。 */
+function isTopLevelKey(line, key) {
+  return new RegExp(`^["']?${key}["']?\\s*:`, 'u').test(line)
+}
+/** 表头行上是否直接写了值（如 `allowBuilds: { ssh2: true }` 这种行内/flow 形态）。
+ *  这种形态**不能**再往下面追加块条目（会写出坏 YAML）—— 判为"形态不允许"，走 strictDepBuilds 兜底。 */
+function headerHasInlineValue(line, key) {
+  const m = textOf(line).match(new RegExp(`^["']?${key}["']?\\s*:(.*)$`, 'u'))
+  if (m === null) return false
+  const rest = m[1].trim()
+  return rest !== '' && !rest.startsWith('#')
+}
+/** 顶层块 = `<key>:` 顶格那行 + 其后所有缩进行（空行/注释算块内，直到下一个顶格实义行）。 */
+function topLevelBlock(lines, key) {
+  const headerIndex = lines.findIndex((line) => isTopLevelKey(line, key))
+  if (headerIndex < 0) return null
+  let endIndex = headerIndex
+  for (let i = headerIndex + 1; i < lines.length; i += 1) {
+    const line = lines[i]
+    if (line.trim() === '' || /^\s*#/u.test(line) || /^\s/u.test(line)) { endIndex = i; continue }
+    break
+  }
+  return { headerIndex, endIndex, body: lines.slice(headerIndex + 1, endIndex + 1) }
+}
+/** 块里的 `name: value` 条目（只认简单标量；认不出返回 null → 调用方走兜底）。 */
+function mapEntries(block) {
+  const entries = []
+  for (let i = 0; i < block.body.length; i += 1) {
+    const raw = block.body[i]
+    if (raw.trim() === '' || /^\s*#/u.test(raw)) continue
+    const m = raw.match(/^(\s+)([^\s:#][^:]*?)\s*:\s*(.*)$/u)
+    if (m === null) return null
+    entries.push({ offset: i, indent: m[1], name: unquote(m[2]), value: m[3].trim(), raw })
+  }
+  return entries
+}
+/** 块里的 `- name` 列表项（同上）。 */
+function listEntries(block) {
+  const entries = []
+  for (let i = 0; i < block.body.length; i += 1) {
+    const raw = block.body[i]
+    if (raw.trim() === '' || /^\s*#/u.test(raw)) continue
+    const m = raw.match(/^(\s*)-\s+(.+?)\s*$/u)
+    if (m === null) return null
+    entries.push({ offset: i, indent: m[1], name: unquote(m[2]), raw })
+  }
+  return entries
+}
+function normalizeNames(packages) {
+  return [...new Set((Array.isArray(packages) ? packages : []).map((n) => textOf(n).trim()).filter((n) => n !== ''))]
+}
+
+/** 纯函数：从文本读出放行状态。
+ *  blocked = 还卡在"未决"的包（pnpm 写的占位值，如 `set this to true or false`）；
+ *  allowed = 已明确放行（true）的包。`false` 两边都不算 —— 它本身就是一个已做的决定（不会再报错）。 */
+function readApprovalState(text) {
+  const lines = linesOf(text)
+  const allow = topLevelBlock(lines, ALLOW_KEY)
+  if (allow !== null) {
+    if (headerHasInlineValue(lines[allow.headerIndex], ALLOW_KEY)) {
+      return { form: ALLOW_KEY, parsed: false, blocked: [], allowed: [], reason: `${ALLOW_KEY} 写成了行内形态（不是逐行映射）` }
+    }
+    const entries = mapEntries(allow)
+    if (entries === null) {
+      return { form: ALLOW_KEY, parsed: false, blocked: [], allowed: [], reason: `${ALLOW_KEY} 不是简单的逐行映射` }
+    }
+    return {
+      form: ALLOW_KEY,
+      parsed: true,
+      blocked: entries.filter((e) => e.value !== ALLOWED_VALUE && e.value !== DENIED_VALUE).map((e) => e.name),
+      allowed: entries.filter((e) => e.value === ALLOWED_VALUE).map((e) => e.name),
+      reason: null,
+    }
+  }
+  const list = topLevelBlock(lines, ONLY_BUILT_KEY)
+  if (list !== null) {
+    if (headerHasInlineValue(lines[list.headerIndex], ONLY_BUILT_KEY)) {
+      return { form: ONLY_BUILT_KEY, parsed: false, blocked: [], allowed: [], reason: `${ONLY_BUILT_KEY} 写成了行内形态（不是简单列表）` }
+    }
+    const entries = listEntries(list)
+    if (entries === null) {
+      return { form: ONLY_BUILT_KEY, parsed: false, blocked: [], allowed: [], reason: `${ONLY_BUILT_KEY} 不是简单列表` }
+    }
+    return { form: ONLY_BUILT_KEY, parsed: true, blocked: [], allowed: entries.map((e) => e.name), reason: null }
+  }
+  return { form: null, parsed: true, blocked: [], allowed: [], reason: null }
+}
+
+/** 兜底：`strictDepBuilds: false`（形态不允许逐包放行时）。 */
+function fallbackPlan(lines, names, why) {
+  const out = [...lines]
+  const index = out.findIndex((line) => isTopLevelKey(line, STRICT_KEY))
+  if (index >= 0) {
+    if (new RegExp(`^["']?${STRICT_KEY}["']?\\s*:\\s*${DENIED_VALUE}\\s*$`, 'u').test(out[index])) {
+      return { ok: true, added: [], form: STRICT_KEY, fallback: true, reason: why, changed: false, text: out.join('\n') }
+    }
+    out[index] = `${STRICT_KEY}: ${DENIED_VALUE}`
+  } else {
+    while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+    out.push(`${STRICT_KEY}: ${DENIED_VALUE}`, '')
+  }
+  return { ok: true, added: names, form: STRICT_KEY, fallback: true, reason: why, changed: true, text: out.join('\n') }
+}
+
+/** 纯函数：算出"要写什么"（**不碰盘**）。
+ *  返回 { ok, changed, added[], form, fallback, reason, text }；changed === false 表示无需改动。 */
+function planApprovalEdit(text, packages) {
+  const names = normalizeNames(packages)
+  if (names.length === 0) return { ok: false, changed: false, added: [], form: null, fallback: false, reason: '没有给出要放行的包名', text: textOf(text) }
+  const bad = names.filter((n) => !NPM_NAME_RE.test(n))
+  if (bad.length > 0) return { ok: false, changed: false, added: [], form: null, fallback: false, reason: `不是合法的 npm 包名：${bad.join('、')}`, text: textOf(text) }
+  const source = textOf(text)
+  const lines = linesOf(source)
+  const allow = topLevelBlock(lines, ALLOW_KEY)
+  if (allow !== null) {
+    if (headerHasInlineValue(lines[allow.headerIndex], ALLOW_KEY)) return fallbackPlan(lines, names, `${ALLOW_KEY} 写成了行内形态`)
+    const entries = mapEntries(allow)
+    if (entries === null) return fallbackPlan(lines, names, `${ALLOW_KEY} 不是简单的逐行映射`)
+    const byName = new Map(entries.map((e) => [e.name, e]))
+    const added = names.filter((n) => byName.get(n)?.value !== ALLOWED_VALUE)
+    if (added.length === 0) return { ok: true, changed: false, added: [], form: ALLOW_KEY, fallback: false, reason: null, text: source }
+    const out = [...lines]
+    for (const name of added) {
+      const entry = byName.get(name)
+      if (entry === undefined) continue
+      out[allow.headerIndex + 1 + entry.offset] = `${entry.indent}${entry.name}: ${ALLOWED_VALUE}`
+    }
+    const fresh = added.filter((n) => !byName.has(n))
+    if (fresh.length > 0) {
+      const last = entries[entries.length - 1]
+      const indent = last === undefined ? '  ' : last.indent
+      const at = last === undefined ? allow.headerIndex + 1 : allow.headerIndex + 1 + last.offset + 1
+      out.splice(at, 0, ...fresh.map((n) => `${indent}${n}: ${ALLOWED_VALUE}`))
+    }
+    return { ok: true, changed: true, added, form: ALLOW_KEY, fallback: false, reason: null, text: out.join('\n') }
+  }
+  const list = topLevelBlock(lines, ONLY_BUILT_KEY)
+  if (list !== null) {
+    if (headerHasInlineValue(lines[list.headerIndex], ONLY_BUILT_KEY)) return fallbackPlan(lines, names, `${ONLY_BUILT_KEY} 写成了行内形态`)
+    const entries = listEntries(list)
+    if (entries === null) return fallbackPlan(lines, names, `${ONLY_BUILT_KEY} 不是简单列表`)
+    const known = new Set(entries.map((e) => e.name))
+    const added = names.filter((n) => !known.has(n))
+    if (added.length === 0) return { ok: true, changed: false, added: [], form: ONLY_BUILT_KEY, fallback: false, reason: null, text: source }
+    const out = [...lines]
+    const last = entries[entries.length - 1]
+    const indent = last === undefined ? '  ' : last.indent
+    const at = last === undefined ? list.headerIndex + 1 : list.headerIndex + 1 + last.offset + 1
+    out.splice(at, 0, ...added.map((n) => `${indent}- ${n}`))
+    return { ok: true, changed: true, added, form: ONLY_BUILT_KEY, fallback: false, reason: null, text: out.join('\n') }
+  }
+  // 两个键都没有：新建一个 allowBuilds 块（pnpm 11 的规范位置；pnpm 自己的 writeSettings 也这么干），
+  // 其余内容原样保留。
+  const out = [...lines]
+  while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+  out.push(`${ALLOW_KEY}:`, ...names.map((n) => `  ${n}: ${ALLOWED_VALUE}`), '')
+  return { ok: true, changed: true, added: names, form: ALLOW_KEY, fallback: false, reason: null, text: out.join('\n') }
+}
+
+/** 读该 profile 的 pnpm-workspace.yaml（不存在时 exists=false，仍可走"新建"分支）。 */
+function readWorkspaceApprovals(profileDir) {
+  const file = join(textOf(profileDir), WORKSPACE_FILE)
+  if (!existsSync(file)) {
+    return { file, exists: false, text: '', sha256: null, form: null, parsed: true, blocked: [], allowed: [], reason: null }
+  }
+  const text = readFileSync(file, 'utf8')
+  return { file, exists: true, text, sha256: sha256Of(text), ...readApprovalState(text) }
+}
+
+/** 读 pnpm 自己记的"被忽略的构建"（node_modules/.modules.yaml 的 ignoredBuilds，flow 或列表形态都能认）。 */
+function readIgnoredBuilds(profileDir) {
+  const file = join(textOf(profileDir), MODULES_FILE)
+  if (!existsSync(file)) return []
+  let text = ''
+  try { text = readFileSync(file, 'utf8') } catch { return [] }
+  const flow = text.match(new RegExp(`["']?${IGNORED_KEY}["']?\\s*:\\s*\\[([\\s\\S]*?)\\]`, 'u'))
+  const body = flow !== null ? flow[1] : (() => {
+    const block = topLevelBlock(linesOf(text), IGNORED_KEY)
+    if (block === null) return null
+    const entries = listEntries(block)
+    return entries === null ? null : entries.map((e) => e.name).join(',')
+  })()
+  if (body === null || body === '') return []
+  const found = []
+  for (const part of body.split(',')) {
+    const dep = unquote(part).replace(/[[\]{}]/gu, '').trim()
+    if (dep === '') continue
+    const at = dep.lastIndexOf('@')
+    const name = at > 0 ? dep.slice(0, at) : dep
+    if (!NPM_NAME_RE.test(name)) continue
+    if (!found.includes(name)) found.push(name)
+  }
+  return found
+}
+
+/** 「已放行、但 pnpm 还没真正构建过」= .modules.yaml 里仍有被忽略的构建，且放行项里已经有 true。
+ *  安装动作据此选超时预算：真构建可能十几分钟，180 秒的上限会把**成功**的安装杀成"失败"。 */
+function pendingApprovedBuilds(profileDir) {
+  const ignored = readIgnoredBuilds(profileDir)
+  const state = readWorkspaceApprovals(profileDir)
+  let modulesAllowed = []
+  try {
+    const modules = readFileSync(join(textOf(profileDir), MODULES_FILE), 'utf8')
+    const flow = modules.match(new RegExp(`["']?${ALLOW_KEY}["']?\\s*:\\s*\\{([^}]*)\\}`, 'u'))
+    if (flow !== null) {
+      modulesAllowed = [...flow[1].matchAll(/([^\s,:{}"']+)\s*:\s*true/gu)].map((m) => m[1])
+    } else {
+      const block = topLevelBlock(linesOf(modules), ALLOW_KEY)
+      const entries = block === null ? null : mapEntries(block)
+      modulesAllowed = entries === null ? [] : entries.filter((e) => e.value === ALLOWED_VALUE).map((e) => e.name)
+    }
+  } catch {}
+  const approved = [...new Set([...state.allowed, ...modulesAllowed])]
+  return { ignored, approved, pending: ignored.length > 0 && approved.length > 0 }
+}
+
+/** 时间戳（可注入，便于离线断言）：`2026-09-27T16-12-33-123Z`。 */
+function backupStamp(now) {
+  const date = typeof now === 'function' ? now() : (now instanceof Date ? now : new Date())
+  return date.toISOString().replace(/[:.]/gu, '-')
+}
+
+/** **唯一的写盘点**（只由显式动作调用）：备份 -> 写最小放行项 -> 读回核实。
+ *  返回 { ok, changed, added[], file, form, fallback, sha256Before, sha256After, backup, verified, note, reason }。 */
+function applyAllowBuilds({ profileDir, packages, now = () => new Date() } = {}) {
+  const state = readWorkspaceApprovals(profileDir)
+  if (state.exists !== true) {
+    return { ok: false, changed: false, added: [], file: state.file, reason: `本 profile 里没有 ${WORKSPACE_FILE}，拒绝凭空创建` }
+  }
+  const planned = planApprovalEdit(state.text, packages)
+  if (planned.ok !== true) {
+    return { ok: false, changed: false, added: [], file: state.file, form: planned.form, fallback: false, reason: planned.reason }
+  }
+  if (planned.changed !== true) {
+    return {
+      ok: true, changed: false, added: [], file: state.file, form: planned.form, fallback: planned.fallback === true,
+      sha256Before: state.sha256, sha256After: state.sha256, backup: null,
+      verified: { targetsAllowed: true, othersIntact: true, sha256Matches: true },
+      reason: `无需改动：${planned.form} 里已经是放行状态`,
+      note: '这些构建脚本已经是放行状态，本次没有改动任何文件。',
+    }
+  }
+  const before = state.text
+  const backup = `${state.file}.bak-${backupStamp(now)}`
+  copyFileSync(state.file, backup) // ① 改前备份
+  writeFileSync(state.file, planned.text, 'utf8') // ② 写回（LF / 无 BOM：行由 linesOf 拆分后 join('\n')）
+  const after = readFileSync(state.file, 'utf8') // ③ 写后读回核实
+  const sha256After = sha256Of(after)
+  const stateAfter = readApprovalState(after)
+  const targetsAllowed = planned.fallback === true
+    ? new RegExp(`^["']?${STRICT_KEY}["']?\\s*:\\s*${DENIED_VALUE}\\s*$`, 'mu').test(after)
+    : planned.added.every((n) => stateAfter.allowed.includes(n))
+  // "其它字段一字未动"：原文里**没有**被丢掉的行，必须原样、同序地出现在写回结果里。
+  const afterLines = linesOf(after)
+  const dropped = new Set(linesOf(before).filter((line) => !afterLines.includes(line)))
+  const kept = linesOf(before).filter((line) => !dropped.has(line))
+  let cursor = -1
+  let othersIntact = true
+  for (const line of kept) {
+    const at = afterLines.indexOf(line, cursor + 1)
+    if (at < 0) { othersIntact = false; break }
+    cursor = at
+  }
+  const verified = { targetsAllowed, othersIntact, sha256Matches: true }
+  const note = planned.fallback === true
+    ? `该 profile 的 ${WORKSPACE_FILE} 形态不允许逐包放行（${planned.reason ?? '结构无法安全改写'}），已写入 \`${STRICT_KEY}: ${DENIED_VALUE}\`：`
+      + 'pnpm 之后**不再因任何**未批准的构建脚本报错（副作用：对所有依赖生效；构建仍然不会被执行）。本动作本身不下载、不执行任何脚本。'
+    : `已把 ${planned.added.length} 个包写进 ${WORKSPACE_FILE} 的 ${planned.form}（只加/改这几行，其它字段一字未动）。`
+      + '放行后**下一次 pnpm 安装**才会真正执行这些脚本（二进制要下载、原生模块要编译，本机实测首次可能十几分钟）；'
+      + '本动作本身不下载、不执行任何脚本。'
+  return {
+    ok: verified.targetsAllowed && verified.othersIntact && verified.sha256Matches,
+    changed: true, added: [...planned.added], file: state.file, form: planned.form, fallback: planned.fallback === true,
+    sha256Before: state.sha256, sha256After, backup, verified, reason: null, note,
+  }
+}
+
+export {
+  ALLOW_KEY, ALLOWED_VALUE, DENIED_VALUE, MODULES_FILE, ONLY_BUILT_KEY, STRICT_KEY, WORKSPACE_FILE,
+  applyAllowBuilds, backupStamp, headerHasInlineValue, linesOf, pendingApprovedBuilds, planApprovalEdit,
+  readApprovalState, readIgnoredBuilds, readWorkspaceApprovals, sha256Of,
+}

package/lib/server/domain/dep-source.js

@@ -168,6 +168,24 @@ function suggestedPinAction({ packageName, version = null, profileDir = null, pr
   }
 }
 
+/** `allow-builds` 的建议动作（2026-09-27 加法，选项 2）：pnpm 因**构建脚本未获批准**报错时下发，
+ *  面板据此多出一个「允许这些构建脚本」按钮 + 「复制命令」。
+ *  安全语义与 pin 动作同一套：`command` 只供展示/复制，执行侧只认 `payload.action` 白名单类型，
+ *  传 `command`/`argv` 一律 400；`packages` 只在"恰好一个"时才随 payload 下发（多个 = 放行全部被忽略的），
+ *  服务端还会自己读盘核对"这个名字当前确实被忽略"，客户端说了不算。 */
+function suggestedAllowBuildsAction({ packages = [], profile = null, reason = null } = {}) {
+  const list = Array.isArray(packages) ? packages.filter((p) => typeof p === 'string' && p !== '') : []
+  const name = profile ?? null
+  return {
+    kind: 'allow-builds',
+    label: '允许这些构建脚本',
+    // 展示用命令 = pnpm 自己的等价命令（**本动作不执行它**：服务端只按白名单形状改配置文件）
+    command: 'pnpm approve-builds',
+    payload: { action: 'allow-builds', ...(list.length === 1 ? { packageName: list[0] } : {}), profile: name },
+    reason,
+  }
+}
+
 /** `reconcile-lock` 的建议动作（只重写 pnpm-lock.yaml，argv 由 lockfile-health.repairArgsFor 唯一产出）。 */
 function suggestedReconcileAction({ profileDir = null, profile = null, reason = null } = {}) {
   const name = profile ?? profileNameOf(profileDir)
@@ -180,4 +198,4 @@ function suggestedReconcileAction({ profileDir = null, profile = null, reason =
   }
 }
 
-export { PLUGIN_SRC_DIR, NPM_NAME_RE, probeRegistryPackage, probeFailureKind, materializePackageForLink, linkSpecFor, linkSpecIsIntact, profileNameOf, suggestedPinAction, suggestedReconcileAction }
+export { PLUGIN_SRC_DIR, NPM_NAME_RE, probeRegistryPackage, probeFailureKind, materializePackageForLink, linkSpecFor, linkSpecIsIntact, profileNameOf, suggestedAllowBuildsAction, suggestedPinAction, suggestedReconcileAction }

package/lib/server/domain/install-diagnose.js

@@ -9,6 +9,9 @@
 //   `allowBuilds` / `ignored build scripts` 这一类**只提示，绝不自动写**用户的 allowBuilds / 构建白名单。
 //   allowBuilds 决定哪些依赖可以执行安装期脚本（postinstall），自动放行 = 替用户授权任意代码执行；
 //   这是必须由人做的安全决策，所以本模块对它只产出文案，且 retry 恒为 null。
+//   2026-09-27 追加：控制台现在提供一个**显式**动作（`allow-builds`，见 domain/allow-builds.js）——
+//   只有用户**自己点**「允许这些构建脚本」才会写盘（改前备份 + 写后读回核实 + 只动 allowBuilds 块）。
+//   本模块仍然一行都不写盘：这里的 hint 只是把用户引到那个按钮上。
 //
 // 分类依据是**失败文本**（pnpm 的 stderr / ExecError message），同一个 kind 的文案只维护一份。
 
@@ -49,6 +52,21 @@ const DIAGNOSIS_RULES = [
     hint: 'registry 的 minimumReleaseAge（供应链安全间隔）拦下了这个版本：稍后重试即可（版本"过龄"后自动放行）；'
       + '确有紧急需要时由你自行放宽（pnpm 侧 --config.minimum-release-age=0）——本控制台不替你放宽安全间隔。',
   },
+  {
+    // 2026-09-27 加法：pnpm 11 的**构建脚本未获批准**硬错误（`strictDepBuilds` 默认为 true）。
+    // 与下面泛化的 allowBuilds 分开的理由：这一条要能**点名**是哪些包、并且说清一件事 ——
+    // 报这个错的时候安装其实已经完成（清单与 lock 都就位），它既不执行任何脚本、也不影响加载。
+    // 真机证据（2026-09-27 官方桌面端实例，pnpm 11.7.0）：
+    //   [ERR_PNPM_IGNORED_BUILDS] Ignored build scripts: cloudflared@0.7.3, cpu-features@0.0.10, ssh2@1.17.0
+    //   → `pnpm add link:…` exitCode=1，而清单/lock/node_modules 都已经是目标状态。
+    // 出路只有一条：用户**自己**点「允许这些构建脚本」（显式动作 allow-builds，写盘前先备份）。
+    kind: 'ignored-builds',
+    re: /ERR_PNPM_IGNORED_BUILDS|Ignored build scripts|ignored build scripts/iu,
+    retry: null,
+    withPackages: true,
+    hint: '该依赖带安装脚本（postinstall 一类）且未获批准：清单与 lock 通常已经就位，这一步不执行任何脚本、也不影响加载；'
+      + '如需放行，请在动作框里点「允许这些构建脚本」（只在你点击时才写入最小放行项），本控制台绝不自动放行。',
+  },
   {
     kind: 'allowBuilds',
     re: /allowBuilds|allow-builds|ignored build scripts|Ignored build scripts|approve-builds|ERR_PNPM_IGNORED_BUILDS/iu,
@@ -117,6 +135,29 @@ function missingPackagesFrom(text) {
   return found
 }
 
+/** 从**构建脚本被忽略**的报错文本里点名依赖（纯函数，2026-09-27 加法）。
+ *
+ * pnpm 的两种文案形态：
+ *   `[ERR_PNPM_IGNORED_BUILDS] Ignored build scripts: cloudflared@0.7.3, cpu-features@0.0.10, ssh2@1.17.0`
+ *   `Ignored build scripts: sharp, esbuild`
+ * 只认冒号后面那一行；包名去掉尾部 `@版本`（scoped 包名开头的 `@` 是作用域，不能用第一个 `@` 切）。
+ * 认不出来就返回空数组（调用方据此保留原样文案，绝不编造包名 —— 这条与 missingPackagesFrom 同一规矩）。 */
+function ignoredBuildsFrom(text) {
+  const raw = typeof text === 'string' ? text : String(text ?? '')
+  const line = raw.match(/Ignored build scripts:\s*([^\n\r]+)/iu)
+  if (line === null) return []
+  const found = []
+  for (const part of line[1].split(',')) {
+    const spec = part.trim().replace(/[.。;；,]+$/u, '')
+    if (spec === '') continue
+    const at = spec.lastIndexOf('@')
+    const name = at > 0 ? spec.slice(0, at) : spec
+    if (!/^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/iu.test(name)) continue
+    if (!found.includes(name)) found.push(name)
+  }
+  return found
+}
+
 /** 按分类取短句 hint（纯函数；2026-09-27 加法）：**文案只有一份**——
  * lockfile-health.js 的体检结论也走这里，避免"同一分类两处措辞"。认不出的分类返回 null。 */
 function hintForKind(kind, packages = []) {
@@ -131,7 +172,11 @@ function hintForKind(kind, packages = []) {
  * packages（2026-09-27 加法）：文本里能点名的依赖包名（认不出就是空数组）——只用于展示，不参与任何判定。 */
 function classifyInstallFailure(stderrOrMessage) {
   const text = typeof stderrOrMessage === 'string' ? stderrOrMessage : String(stderrOrMessage ?? '')
-  const packages = missingPackagesFrom(text)
+  // 构建脚本类报错的"涉及依赖"在 `Ignored build scripts:` 这一行里（不在 URL 里），单独认一次；
+  // 其余分类仍走 URL 还原（与之前一模一样）。
+  const urlish = missingPackagesFrom(text)
+  const buildish = ignoredBuildsFrom(text)
+  const packages = buildish.length > 0 ? buildish : urlish
   for (const rule of DIAGNOSIS_RULES) {
     if (!rule.re.test(text)) continue
     return { kind: rule.kind, hint: hintForKind(rule.kind, packages), retry: rule.retry, packages }
@@ -180,4 +225,4 @@ async function retryPnpmOnce({ ch, profileDir, name, registries, pnpmError, job,
   }
 }
 
-export { classifyInstallFailure, longerTimeoutFor, diagnosisText, retryPnpmOnce, missingPackagesFrom, hintForKind, DIAGNOSIS_RULES }
+export { classifyInstallFailure, longerTimeoutFor, diagnosisText, retryPnpmOnce, missingPackagesFrom, ignoredBuildsFrom, hintForKind, DIAGNOSIS_RULES }

package/lib/server/domain/plugin-actions.js

@@ -12,7 +12,16 @@
 //   · pin-dependency：把清单里的该包钉成 `link:<DSH_HOME>/plugin-src/<包名>`，再跑一次
 //     `pnpm add <link:…>` 把 lock / node_modules 对齐（argv 由 infra/exec.js#pnpmAddArgs 产出）；
 //   · reconcile-lock：只重写 pnpm-lock.yaml，复用 lockfile-health 的 repair（argv 由 repairArgsFor
-//     唯一产出，**不带**任何绕过供应链闸的开关）。
+//     唯一产出，**不带**任何绕过供应链闸的开关）；
+//   · allow-builds（2026-09-27 加法，选项 2 的核心）：在 profile 的 pnpm-workspace.yaml 里
+//     **补上具体包名**的构建放行项（domain/allow-builds.js：改前备份 + 写后读回核实 + 只动那几行）。
+//     它**不跑任何命令**，更不下载/执行脚本 —— 只影响"pnpm 下次安装是否还会因未批准而报错"。
+//     只有用户自己点「允许这些构建脚本」才会走到这里（绝不自动放行）。
+//
+// 等待预算（2026-09-27 真机实测后的改错）：放行之后**第一次**安装会真的执行那些脚本
+// （cloudflared 下二进制、cpu-features/ssh2 走 node-gyp 原生编译；本机实测 18m59.6s 才结束，exitCode=0）。
+// 原先这里固定 180s，会把一次**成功**的安装杀成"失败"。所以：profile 处于"已放行但还没构建过"时，
+// 改用更长的预算（ACTION_BUILD_TIMEOUT_MS），其余情况**保持 180s 不变**。
 //
 // 供应链闸的一次性放宽（写清代价，绝不静默）：pnpm 11 的 `minimumReleaseAge` 默认 24h，
 // 本控制台自己刚发的版本 (<24h) 会让**任何** lockfile 校验失败 —— 连"把本地 link: 记进 lock"都做不成。
@@ -23,7 +32,9 @@
 // 分层：L1 domain —— 不认识 cordis ctx，IO/执行器一律可注入（便于离线单测）。
 import { existsSync, readFileSync } from 'node:fs'
 import { join } from 'node:path'
-import { NPM_NAME_RE } from './dep-source.js'
+import { applyAllowBuilds, pendingApprovedBuilds, readWorkspaceApprovals } from './allow-builds.js'
+import { NPM_NAME_RE, suggestedAllowBuildsAction } from './dep-source.js'
+import { classifyInstallFailure, ignoredBuildsFrom } from './install-diagnose.js'
 import { runLockfileRepair } from './lockfile-health.js'
 import { pinProfileDependency, specOf } from './manifest.js'
 import { lockVersion } from './selfupdate.js'
@@ -31,10 +42,16 @@ import { buildPnpmEnv, pnpmAddArgs, runPnpmWithFallback, unknownPnpmOption } fro
 
 const DEFAULT_REGISTRY = 'https://registry.npmmirror.com'
 /** 动作白名单（客户端只能给这些 kind；执行分支与 argv 全在服务端）。 */
-const ACTION_KINDS = ['pin-dependency', 'reconcile-lock']
+const ACTION_KINDS = ['pin-dependency', 'reconcile-lock', 'allow-builds']
 /** 一旦出现这些键就整条拒绝：本接口不存在"传命令"的位置。 */
 const COMMAND_KEYS = ['command', 'cmd', 'argv', 'args', 'exec', 'execute', 'shell', 'script', 'run', 'spawn', 'bin', 'shellCommand']
 const OUTPUT_LIMIT = 4000
+/** pin 动作里 pnpm 那一步的等待上限（默认不变 = 180s）。 */
+const ACTION_ADD_TIMEOUT_MS = 180000
+/** 已放行但还没构建过时的等待上限（30 分钟）：真机构建实测 18m59.6s，180s 会把它杀成失败。 */
+const ACTION_BUILD_TIMEOUT_MS = 1800000
+/** A-② 里用户点名的 note 文案（**逐字**，配套断言钉死）。 */
+const IGNORED_BUILDS_REACHED_NOTE = '依赖已钉住（清单+lock 已就位）；pnpm 因构建脚本未获批准而报错 —— 这不会执行任何脚本，也不影响加载；如需放行请点「允许这些构建脚本」'
 
 /** 校验并翻译成结构化请求。返回 { ok, error, status, action, packageName, version, profile }。 */
 function parseActionRequest(body) {
@@ -45,7 +62,7 @@ function parseActionRequest(body) {
     }
   }
   const action = typeof raw.action === 'string' ? raw.action.trim() : ''
-  if (action === '') return { ok: false, status: 400, error: '缺少 action（只允许 pin-dependency / reconcile-lock）' }
+  if (action === '') return { ok: false, status: 400, error: `缺少 action（只允许 ${ACTION_KINDS.join(' / ')}）` }
   if (!ACTION_KINDS.includes(action)) {
     return { ok: false, status: 400, error: `未知动作 ${action}（只允许 ${ACTION_KINDS.join(' / ')}）` }
   }
@@ -54,6 +71,10 @@ function parseActionRequest(body) {
     if (packageName === '') return { ok: false, status: 400, error: 'pin-dependency 需要 packageName' }
     if (packageName.length > 214 || !NPM_NAME_RE.test(packageName)) return { ok: false, status: 400, error: 'packageName 不是合法的 npm 包名' }
   }
+  // allow-builds 的 packageName 可省略（缺省 = 放行当前被忽略的全部）；给了就必须是合法 npm 名。
+  if (action === 'allow-builds' && packageName !== '' && (packageName.length > 214 || !NPM_NAME_RE.test(packageName))) {
+    return { ok: false, status: 400, error: 'packageName 不是合法的 npm 包名' }
+  }
   const version = typeof raw.version === 'string' && raw.version.length <= 120 ? raw.version : null
   const profile = typeof raw.profile === 'string' && raw.profile.length <= 64 ? raw.profile : null
   return { ok: true, error: null, status: 200, action, packageName: packageName === '' ? null : packageName, version, profile }
@@ -146,6 +167,44 @@ async function runSuggestedAction({ body, profileDir, registries = [], deps = {}
     ok: false, status: 200, action: parsed.action, packageName: parsed.packageName, profile: parsed.profile,
     registry, exitCode: null, command: null, stdout: '', stderr: '', relaxedReleaseAge: false,
     manifest: null, lock: null, notes: [], reason: null, hint: null, detail: null,
+    kind: parsed.action, ignoredBuilds: [], nextAction: null,
+  }
+  if (parsed.action === 'allow-builds') {
+    const applyAllow = typeof deps.applyAllow === 'function' ? deps.applyAllow : applyAllowBuilds
+    const pending = pendingApprovedBuilds(profileDir)
+    // 缺省 = 放行当前真被忽略的全部：优先用 pnpm 自己记的 ignoredBuilds（.modules.yaml），
+    // 回落到 workspace 文件里的未决占位项。**绝不**接受客户端点名一个"当前没被忽略"的包。
+    const blocked = pending.ignored.length > 0 ? pending.ignored : readWorkspaceApprovals(profileDir).blocked
+    const targets = parsed.packageName === null ? blocked : [parsed.packageName]
+    if (targets.length === 0) {
+      return { ...base, ok: false, status: 400, error: '当前没有待批准的构建脚本（pnpm 没记录被忽略的构建，workspace 里也没有未决占位项），无需放行' }
+    }
+    if (parsed.packageName !== null && !blocked.includes(parsed.packageName)) {
+      return { ...base, ok: false, status: 400, error: `${parsed.packageName} 不在当前被忽略的构建脚本名单里（${blocked.join('、') || '空'}），拒绝改写` }
+    }
+    const applied = await applyAllow({ profileDir, packages: targets, now: deps.now })
+    return {
+      ...base,
+      ok: applied.ok === true,
+      exitCode: applied.ok === true ? 0 : 1,
+      // 展示/复制的命令 = pnpm 自己的等价命令（本动作**不执行**它；服务端只写文件）
+      command: 'pnpm approve-builds',
+      changed: applied.changed === true,
+      added: Array.isArray(applied.added) ? applied.added : [],
+      file: applied.file ?? null,
+      form: applied.form ?? null,
+      fallback: applied.fallback === true,
+      sha256Before: applied.sha256Before ?? null,
+      sha256After: applied.sha256After ?? null,
+      backup: applied.backup ?? null,
+      verified: applied.verified ?? null,
+      allow: applied,
+      notes: [applied.note, applied.reason].filter((n) => typeof n === 'string' && n !== ''),
+      reason: applied.ok === true
+        ? (applied.changed === true ? `已放行：${(applied.added ?? []).join('、') || '（无新增）'}` : (applied.reason ?? '无需改动'))
+        : (applied.reason ?? '放行失败（未改动文件）'),
+      detail: applied,
+    }
   }
   if (parsed.action === 'reconcile-lock') {
     const view = await repair({ profileDir, registries: Array.isArray(registries) && registries.length > 0 ? registries : [registry] })
@@ -178,7 +237,13 @@ async function runSuggestedAction({ body, profileDir, registries = [], deps = {}
     return { ...base, ok: false, status: 200, manifest: { before, after: before, changed: false, pinned: false }, reason: error instanceof Error ? error.message : String(error) }
   }
   const argv = pnpmAddArgs(pinned.spec, registry)
-  const run = await runAddWithReleaseAgeRetry({ profileDir, spec: pinned.spec, registry, runAdd, timeoutMs: deps.timeoutMs })
+  // 等待预算：profile 若处于"已放行但还没构建过"，这一步会真的去构建（实测 18m59.6s）——用长预算；
+  // 其余情况一个字都不变（仍是 180s）。
+  const pendingBuilds = pendingApprovedBuilds(profileDir)
+  const timeoutMs = Number.isFinite(deps.timeoutMs) && deps.timeoutMs > 0
+    ? deps.timeoutMs
+    : (pendingBuilds.pending === true ? ACTION_BUILD_TIMEOUT_MS : ACTION_ADD_TIMEOUT_MS)
+  const run = await runAddWithReleaseAgeRetry({ profileDir, spec: pinned.spec, registry, runAdd, timeoutMs })
   const after = await specOf(profileDir, parsed.packageName)
   const entry = lockVersion(profileDir, parsed.packageName)
   const lockSynced = typeof entry === 'string' && entry.startsWith('link:')
@@ -186,11 +251,27 @@ async function runSuggestedAction({ body, profileDir, registries = [], deps = {}
   // 规范化成相对路径，那同样是"不经 registry 解析"的来源型 spec，判据见 domain/dep-source.js#linkSpecIsIntact）
   const pinnedOk = typeof after === 'string' && after.startsWith('link:')
   const manifests = { before, after, changed: before !== after, planned: pinned.spec, pinned: pinnedOk }
+  // 失败分类只认一份真源（install-diagnose 的规则表）：这里只关心"是不是构建脚本未获批准"。
+  const failure = run.ok === true ? null : classifyInstallFailure(`${run.stderr}\n${String(run.error?.message ?? '')}`)
+  const ignored = failure?.kind === 'ignored-builds'
+  const ignoredBuilds = ignored === true ? ignoredBuildsFrom(run.stderr) : []
+  const nextAction = ignored === true ? suggestedAllowBuildsAction({ packages: ignoredBuilds, profile: parsed.profile, reason: 'pnpm 因构建脚本未获批准而报错' }) : null
   const notes = []
   if (run.relaxedReleaseAge) notes.push('本机 pnpm 的 24h 供应链闸（minimumReleaseAge）拦下了这次 lock 校验，已**仅对这一条命令**追加 --config.minimumReleaseAge=0 重试一次（有安全代价，未写进任何配置文件）。')
-  // 三种"pnpm 那一步没跑成"的形态都如实记一句（2026-09-27 真机桌面端实例实测：corepack 在该进程里
-  // 解析不到 → pnpm 那一步失败，而清单/lock 其实已达成目标；只留 stderr 会让用户自己猜发生了什么）
-  if (!run.ok) {
+  if (pendingBuilds.pending === true) {
+    notes.push(`本 profile 已有放行项但还没构建过：本次 pnpm 那一步会真的执行构建脚本（本机实测约 19 分钟），`
+      + `所以等待上限提到了 ${Math.round(timeoutMs / 60000)} 分钟，不会中途把一次**成功**的安装杀掉。`)
+  }
+  if (!run.ok && ignored === true) {
+    // A-② 语义：清单与 lock 已到目标状态时，这类报错**不是失败** —— 它一个脚本都不执行、也不影响加载。
+    // exitCode 如实回报（绝不抹成 0）；只把定性、涉及哪些包、以及出口（显式放行按钮）讲清楚。
+    notes.push(manifests.pinned && lockSynced
+      ? IGNORED_BUILDS_REACHED_NOTE
+      : `清单与 lock 还没到目标状态，而 pnpm 又因构建脚本未获批准（ERR_PNPM_IGNORED_BUILDS）中止（exitCode=${run.exitCode}）：可先点「允许这些构建脚本」，再重跑本动作。`)
+    if (ignoredBuilds.length > 0) notes.push(`被忽略的构建脚本涉及：${ignoredBuilds.join('、')}（exitCode=${run.exitCode} 如实回报，未抹成 0）。`)
+  } else if (!run.ok) {
+    // 其余"pnpm 那一步没跑成"的形态照旧如实记一句（2026-09-27 真机桌面端实例实测：corepack 在该进程里
+    // 解析不到 → pnpm 那一步失败，而清单/lock 其实已达成目标；只留 stderr 会让用户自己猜发生了什么）
     notes.push(manifests.pinned
       ? (lockSynced
         ? `pnpm 那一步没跑完（exitCode=${run.exitCode}，原始输出见 stderr）：清单与 lock 已经是 link:，目标状态已达成。`
@@ -199,6 +280,9 @@ async function runSuggestedAction({ body, profileDir, registries = [], deps = {}
   }
   return {
     ...base,
+    kind: ignored === true ? 'ignored-builds' : parsed.action,
+    ignoredBuilds,
+    nextAction,
     // 只有"清单真的是 link: **且** lock 里也有这条 link"才算成功；只成一半时 partial=true 并如实说明
     ok: manifests.pinned && lockSynced,
     partial: manifests.pinned && !lockSynced,
@@ -207,13 +291,15 @@ async function runSuggestedAction({ body, profileDir, registries = [], deps = {}
     stdout: run.stdout,
     stderr: run.stderr,
     relaxedReleaseAge: run.relaxedReleaseAge,
+    timeoutMs,
     manifest: manifests,
     lock: { entry: entry ?? null, synced: lockSynced },
     notes,
+    failureKind: failure?.kind ?? null,
     reason: manifests.pinned
       ? (lockSynced ? `${parsed.packageName} 已钉住：清单与 pnpm-lock.yaml 都指向 link:${pinned.dir}` : `${parsed.packageName} 的清单已钉住，lock 未对齐`)
       : `${parsed.packageName} 的清单写回未生效（实际是 ${after ?? '（无该条目）'}）`,
   }
 }
 
-export { ACTION_KINDS, COMMAND_KEYS, DEFAULT_REGISTRY, OUTPUT_LIMIT, isProfilePackage, isReleaseAgeBlock, parseActionRequest, runAddWithReleaseAgeRetry, runSuggestedAction }
+export { ACTION_ADD_TIMEOUT_MS, ACTION_BUILD_TIMEOUT_MS, ACTION_KINDS, COMMAND_KEYS, DEFAULT_REGISTRY, IGNORED_BUILDS_REACHED_NOTE, OUTPUT_LIMIT, isProfilePackage, isReleaseAgeBlock, parseActionRequest, runAddWithReleaseAgeRetry, runSuggestedAction }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noob-stupid/dsh-plugin-console",
-  "version": "0.5.23",
+  "version": "0.5.24",
   "description": "DSH 框架升级安全与插件升级门控：一键升级、失败自动回滚、升级后回滚上版、旧插件不适配自动禁用；内置多源插件市场为发现层，插件源全部可自定义，可指向公司内网私有源 / 私有索引 / 本地 Git 仓库，纯内网离线可用 | Framework upgrade safety & plugin version gating for DSH, with a customizable multi-source plugin market: point every source at internal mirrors or a local file:// repo for intranet-only, offline installs.",
   "repository": {
     "type": "git",