@noob-stupid/dsh-plugin-console 0.5.23 → 0.5.25

package/README.md

@@ -252,6 +252,25 @@ Requires: DSH ≥ 0.1.0-rc.6 (web profile, with `dsh-client-modules` / `dsh-host
 >   sources** all support primary→backup plus self-hosted mirrors (internal Gitea/GitLab, local
 >   `file://` bare repos).
 
+#### Download-install channels and dependency forms
+
+Which channel gets used depends on **what the package actually is** — not on a setting:
+
+| Channel | Target | When it is used | Written in the manifest as | Needs plugin-src |
+|---|---|---|---|---|
+| ① pnpm (registry) | npm registry | **if the package is on the registry, this is the main channel** | `<name>: <version>` | no |
+| ② curl tarball (registry) | npm registry tarball | **races in parallel** with ① (takes over when pnpm is blocked/stuck) | same as above | no |
+| ③ GitHub Release asset | prebuilt tgz of an upstream release | when **both registry sources 404** | `link:<absolute path>` | yes |
+| ④ git clone | repository source | no npm package / no release asset | `link:…` | yes |
+| ⑤ archive (tar.gz) | codeload / mirrors | when the git protocol cannot move any bytes | `link:…` | yes |
+
+In one sentence: **has an npm package → ①/②, write a version, keep the lock clean; no npm package →
+fall back to ③/④/⑤, materialize into `~/.dsh/plugin-src/<pkg>` and write `link:`.**
+
+Environment reminder: an accelerator/proxy that rewrites hosts makes the direct sources unreachable
+(see above), and free mirrors are unreliable for the **git protocol** on large packs while
+**archive/raw are usually much faster** — the console already switches by itself.
+
 ### Static index market (plugin & skill tabs)
 
 > **Hybrid architecture**: browsing uses the static index (instant, zero GitHub API calls),

package/README.zh.md

@@ -192,6 +192,24 @@ git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console
 > - 想让某条通道优先，去「软件源」里调整顺序：**Git 源**、**archive 源**、**索引源** 都支持主→备与
 >   自建镜像（内网 Gitea/GitLab、本地 `file://` 裸仓库均可）。
 
+#### 下载安装通道与依赖形态
+
+走哪条通道，取决于**这个包到底是什么**，而不是某个开关：
+
+| 通道 | 目标 | 何时使用 | 清单里写成 | 需要 plugin-src |
+|---|---|---|---|---|
+| ① pnpm（registry） | npm registry | **registry 上有该包就走它**（主通道） | `<name>: <version>` | 否 |
+| ② curl tarball（registry） | npm registry tarball | 与 ① **并行竞速**（pnpm 被拦/卡住时顶上） | 同上 | 否 |
+| ③ GitHub Release 资产 | 上游 release 的预构建 tgz | registry **双源 404** 时 | `link:<绝对路径>` | 是 |
+| ④ git 克隆 | 仓库源码 | 无 npm 包 / 无 release 资产 | `link:…` | 是 |
+| ⑤ archive（tar.gz） | codeload / 镜像 | git 协议拉不动时 | `link:…` | 是 |
+
+一句话结论：**有 npm 包 → 走 ①/②，写版本号、lock 干净；没有 npm 包 → 降级 ③/④/⑤，物化到
+`~/.dsh/plugin-src/<pkg>` 并写 `link:`。**
+
+环境提醒：加速器/代理改 hosts 会让**直连源**失效（见上）；免费镜像的 **git 协议**对大 pack 不可靠，
+而 **archive/raw 通常更快** —— 控制台已按这两条自行切换，不用手动换源。
+
 ### 静态索引市场（插件 / 技能双 tab）
 
 > **混合架构**：浏览走静态索引（秒开、零 API 调用），搜索走实时通道（GitHub 搜索 API / 多源并行）——

package/lib/client.js

@@ -121,7 +121,14 @@ window.__ModuleLoader__.load({
 			actionOk: "执行成功",
 			actionPartial: "部分成功（清单已改，lock 未对齐）",
 			actionFailed: "执行失败",
-			actionLongTitle: "控制台按白名单动作在自己的进程里执行（只认 pin-dependency / reconcile-lock 这类内置动作，绝不接受自定义命令字符串）；命令仅供展示与复制。",
+			actionLongTitle: "控制台按白名单动作在自己的进程里执行（只认 pin-dependency / reconcile-lock / allow-builds 这类内置动作，绝不接受自定义命令字符串）；命令仅供展示与复制。",
+			// 2026-09-27 加法（选项 2）：pnpm 因**构建脚本未获批准**报错时，动作框多出这一个按钮。
+			// 短句进面板，长解释（含"它不执行任何脚本/放行后第一次安装会很慢"）一律进悬浮 title。
+			actionAllowLabel: "允许这些构建脚本",
+			actionAllowLong: "只有你点它才会写盘：在 profile 的 pnpm-workspace.yaml 里把**具体包名**补进 allowBuilds（改前先备份 .bak-<时间戳>、写完读回核实、其它字段一字不动）。它本身不下载、不执行任何脚本；放行后**下一次** pnpm 安装才会真正跑这些脚本（二进制要下载、原生模块要编译，本机实测首次约 19 分钟）。",
+			actionAllowOk: "已写入放行项",
+			actionAllowFailed: "放行失败（文件未改动）",
+			actionAllowBackup: "备份",
 			safetyMode: "运行模式",
 			safetyModeManaged: "托管：框架升级与回滚由本控制台负责（默认，行为与之前一致）",
 			safetyModeManagedOn: "已切到托管模式：框架升级与回滚仍由本控制台负责",
@@ -296,6 +303,9 @@ window.__ModuleLoader__.load({
 			diagIntegrityNone: "来源无摘要，未校验",
 			diagIntegrityMismatch: "摘要不匹配（已安装，未拦截）",
 			diagIntegritySkip: "摘要未校验（读取失败，不影响安装）",
+			presetDot: "。预设：新建会话时选择",
+			presetInstalledMsg: "预设已装配",
+			diagChannelNotes: "通道说明",
 			direct: "（浏览器直连 GitHub；若你的浏览器打不开 GitHub，将自动回退到服务端通道）",
 			details: "详情",
 					expandDesc: "展开",
@@ -646,7 +656,13 @@ window.__ModuleLoader__.load({
 			actionOk: "Done",
 			actionPartial: "Partly done (manifest updated, lock not aligned)",
 			actionFailed: "Failed",
-			actionLongTitle: "The console runs a whitelisted action inside its own process (only built-in kinds such as pin-dependency / reconcile-lock; a custom command string is never accepted). The command itself is display/copy only.",
+			actionLongTitle: "The console runs a whitelisted action inside its own process (only built-in kinds such as pin-dependency / reconcile-lock / allow-builds; a custom command string is never accepted). The command itself is display/copy only.",
+			// 2026-09-27 additive (option 2): shown when pnpm fails because build scripts are not approved.
+			actionAllowLabel: "Allow these build scripts",
+			actionAllowLong: "Nothing is written until you click this: it adds the exact package names to allowBuilds in the profile's pnpm-workspace.yaml (backup .bak-<timestamp> first, read back and verify, other fields untouched). It downloads and runs nothing itself; only the *next* pnpm install actually runs those scripts (a binary download plus native builds — measured ≈19 minutes the first time on this machine).",
+			actionAllowOk: "Approval written",
+			actionAllowFailed: "Approval failed (file untouched)",
+			actionAllowBackup: "Backup",
 			safetyMode: "Operating mode",
 			safetyModeManaged: "Managed: this console owns framework upgrade and rollback (default, unchanged behaviour)",
 			safetyModeManagedOn: "Switched to managed: framework upgrade and rollback stay with this console",
@@ -821,6 +837,9 @@ window.__ModuleLoader__.load({
 			diagIntegrityNone: "No digest from source; not verified",
 			diagIntegrityMismatch: "Digest mismatch (installed, not blocked)",
 			diagIntegritySkip: "Digest not verified (read failed; install unaffected)",
+			presetDot: ". Preset: pick it when starting a new session",
+			presetInstalledMsg: "Presets installed",
+			diagChannelNotes: "Channel notes",
 			direct: "(The browser calls GitHub directly; the server channel is used as fallback.)",
 			details: "Details",
 					expandDesc: "Expand",
@@ -2868,6 +2887,11 @@ window.__ModuleLoader__.load({
 										}
 									} else if (data.ai === true) {
 										setMessage(t("installed") + "：" + data.packageName + "。" + (data.aiNote ?? t("aiRepaired")) + diagMessage(data));
+									} else if (typeof data.presetNote === "string" && data.presetNote !== "") {
+										// 预设装配成功（2026-09-27 批次 D-③）：落盘路径由服务端如实下发，这里补一句
+										// 「预设：新建会话时选择」（点击安装的当下没有新会话，必须先说清楚下一步）。
+										setMessage(t("presetInstalledMsg") + "：" + data.presetNote + t("presetDot") + diagMessage(data));
+										setReloadHint(true);
 									} else {
 										setMessage(t("installed") + "：" + data.packageName + "（" + (data.entryId ?? "") + "）。" + (data.curlNote ?? (data.bundle ? t("bundleNote") : t("installNote"))) + (data.bundleNote ? "。" + data.bundleNote : "") + (data.lockNote ? "。⚠️ " + data.lockNote : "") + (data.depNote ? "。" + data.depNote : "") + diagMessage(data));
 									}
@@ -2879,9 +2903,12 @@ window.__ModuleLoader__.load({
 									}
 									if (data.bundle) {
 										setRestartHint(true);
-									} else if (data.suggestedAction !== null && data.suggestedAction !== undefined) {
+									} else if ((data.suggestedAction !== null && data.suggestedAction !== undefined)
+										|| (typeof data.presetNote === "string" && data.presetNote !== "")) {
 										// 有建议动作时不自动刷新页面（2026-09-27 加法）：旧行为 2.5 秒后 reload，
 										// 用户根本来不及点「执行」；这里改成给一个"请刷新"的可见提示。
+										// 预设装配同理：只是往 ~/.dsh/.agent-presets 落盘，刷新页面没有意义，
+										// 还会把「落盘路径 + 新建会话时选择」这句提示冲掉。
 										setReloadHint(true);
 									} else {
 										// 安装成功：自动刷新页面，让插件立即出现在列表里（可见的成功反馈）
@@ -2999,6 +3026,18 @@ window.__ModuleLoader__.load({
 						title: typeof diagnosis.hint === "string" ? diagnosis.hint : null,
 					});
 				}
+				// ④ 通道备注（2026-09-27 批次 D-④）：服务端一直在下发"为什么没试某个通道"（体积门禁、
+				//    稀疏降级、release/git 预算…），但面板从未展示 → 用户只看到笼统的"失败"。
+				//    失败时逐条显示（最多 6 条），成功时不显示（成功路径已有 presetNote/curlNote 等具体文案）。
+				const channelNotes = Array.isArray(view.channelNotes) ? view.channelNotes.filter((n) => typeof n === "string" && n !== "") : [];
+				if (view.status === "failed" && channelNotes.length > 0) {
+					lines.push({
+						key: "channelNotes",
+						text: t("diagChannelNotes") + t("diagColon") + channelNotes.slice(0, 6).join(t("diagSemi")),
+						level: "warn",
+						title: channelNotes.join("\n"),
+					});
+				}
 				return lines;
 			};
 			/** 诊断短句 → 消息栏后缀（空串 = 没问题）：只在既有文案**末尾追加**，一个字都不替换。 */
@@ -5197,20 +5236,32 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 		 * 不新增徽章、不新增独立面板 —— 长解释一律进悬浮 title。 */
 		function SuggestedActionBox({ job, t }) {
 			const [state, setState] = react.useState({ phase: "idle", text: null, level: null, title: null, closed: false });
+			// 2026-09-27 加法（选项 2）：第二个显式动作的状态（「允许这些构建脚本」）。
+			// 只在**执行结果**说明"pnpm 因构建脚本未获批准而报错"时才出现（服务端下发 state.nextAction）；
+			// 平时一个像素都不多占。
+			const [allow, setAllow] = react.useState({ phase: "idle", text: null, level: null, title: null });
 			const action = job === null || job === undefined ? null : (job.suggestedAction ?? null);
 			if (action === null || typeof action.command !== "string" || state.closed === true) return null;
 			const running = state.phase === "running";
 			const label = action.kind === "pin-dependency" ? t("actionPinLabel")
 				: action.kind === "reconcile-lock" ? t("actionReconcileLabel")
-					: (typeof action.label === "string" && action.label !== "" ? action.label : String(action.kind ?? ""));
+					: action.kind === "allow-builds" ? t("actionAllowLabel")
+						: (typeof action.label === "string" && action.label !== "" ? action.label : String(action.kind ?? ""));
+			const allowAction = state.nextAction !== null && state.nextAction !== undefined && typeof state.nextAction === "object"
+				? state.nextAction
+				: (action.kind === "allow-builds" ? action : null);
+			const allowRunning = allow.phase === "running";
+			const showAllow = allowAction !== null && typeof allowAction.command === "string" && allow.phase !== "done";
 			const run = () => {
 				if (running || action.payload === null || typeof action.payload !== "object") return;
-				setState({ phase: "running", text: t("actionRunning"), level: null, title: null, closed: false });
+				setState({ phase: "running", text: t("actionRunning"), level: null, title: null, closed: false, nextAction: state.nextAction ?? null });
 				callAction(action.payload).then(
 					(done) => {
 						const verdict = done?.ok === true ? t("actionOk") : done?.partial === true ? t("actionPartial") : t("actionFailed");
 						const parts = [verdict];
 						if (typeof done?.reason === "string" && done.reason !== "") parts.push(done.reason);
+						// 服务端下发的 note（例如"已钉住，但 pnpm 因构建脚本未获批准而报错"）优先展示
+						if (Array.isArray(done?.notes) && done.notes.length > 0 && typeof done.notes[0] === "string") parts.push(done.notes[0]);
 						const raw = typeof done?.stderr === "string" && done.stderr.trim() !== "" ? done.stderr.trim() : "";
 						if (raw !== "") parts.push(raw.split("\n").slice(-1)[0]);
 						setState({
@@ -5219,13 +5270,36 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 							level: done?.ok === true ? null : "warn",
 							title: [done?.command, typeof done?.exitCode === "number" ? "exitCode=" + done.exitCode : null, done?.stdout, raw].filter((s) => typeof s === "string" && s !== "").join("\n") || null,
 							closed: false,
+							// 只有真的到了"构建脚本未获批准"这一步才把它带出来（老服务端没有这个字段 → null）
+							nextAction: done?.nextAction ?? null,
 						});
 					},
-					(error) => setState({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionFailed")), level: "error", title: null, closed: false }),
+					(error) => setState({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionFailed")), level: "error", title: null, closed: false, nextAction: state.nextAction ?? null }),
 				);
 			};
 			const copy = () => {
-				if (copyToClipboard(action.command)) setState({ phase: state.phase, text: t("actionCopied"), level: null, title: null, closed: false });
+				if (copyToClipboard(action.command)) setState({ ...state, text: t("actionCopied"), level: null, title: null });
+			};
+			// 「允许这些构建脚本」：同样是**结构化动作**（只发 nextAction.payload），服务端自己改文件；
+			// 面板绝不拼命令、也不碰 profile。
+			const runAllow = () => {
+				if (allowRunning || allowAction === null || typeof allowAction.payload !== "object" || allowAction.payload === null) return;
+				setAllow({ phase: "running", text: t("actionRunning"), level: null, title: null });
+				callAction(allowAction.payload).then(
+					(done) => {
+						const verdict = done?.ok === true ? t("actionAllowOk") : t("actionAllowFailed");
+						const parts = [verdict, typeof done?.reason === "string" ? done.reason : null, Array.isArray(done?.notes) ? done.notes[0] : null].filter((s) => typeof s === "string" && s !== "");
+						setAllow({
+							phase: done?.ok === true ? "done" : "error",
+							text: parts.join(" · "),
+							level: done?.ok === true ? null : "warn",
+							title: [done?.file, Array.isArray(done?.added) && done.added.length > 0 ? t("actionAllowLabel") + "：" + done.added.join("、") : null,
+								typeof done?.sha256Before === "string" ? "sha256 " + String(done.sha256Before).slice(0, 12) + " → " + String(done.sha256After ?? "").slice(0, 12) : null,
+								typeof done?.backup === "string" ? t("actionAllowBackup") + "：" + done.backup : null].filter((s) => typeof s === "string" && s !== "").join("\n") || null,
+						});
+					},
+					(error) => setAllow({ phase: "error", text: (error !== null && typeof error.message === "string" && error.message !== "" ? error.message : t("actionAllowFailed")), level: "error", title: null }),
+				);
 			};
 			return el("div", { className: styles.detail, "data-suggested-action": String(action.kind ?? "") },
 				el("div", { className: styles.rowTop },
@@ -5233,7 +5307,7 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 					el("strong", { className: styles.name, title: t("actionLongTitle") }, label),
 					el("button", {
 						type: "button", className: styles.trashBtn, title: t("closeModal"), "aria-label": t("closeModal"),
-						onClick: () => setState({ phase: "idle", text: null, level: null, title: null, closed: true }),
+						onClick: () => setState({ phase: "idle", text: null, level: null, title: null, closed: true, nextAction: null }),
 					}, "✕")),
 				el("code", {
 					className: styles.note,
@@ -5243,12 +5317,23 @@ setMessage(t("failed") + "：" + (data?.reason ?? "未知"));
 				el("div", { className: styles.rowTop },
 					el("button", { type: "button", className: styles.toggle, disabled: running, onClick: run }, running ? t("actionRunning") : t("actionRun")),
 					el("button", { type: "button", className: styles.toggle, onClick: copy }, t("actionCopy")),
+					// ★ 选项 2 的第二个动作：只在这个场景出现，文案短句 + 悬浮长解释（中英各一份）
+					showAllow
+						? el("button", { type: "button", className: styles.toggle, "data-allow-builds": "true", title: t("actionAllowLong"), disabled: allowRunning, onClick: runAllow }, allowRunning ? t("actionRunning") : t("actionAllowLabel"))
+						: null,
 					el("span", {
 						className: styles.message,
 						"data-warn": state.level === "warn" ? "true" : undefined,
 						"data-error": state.level === "error" ? "true" : undefined,
 						title: state.title === null ? undefined : state.title,
-					}, state.text ?? "")));
+					}, state.text ?? "")),
+				allow.text === null ? null : el("div", { className: styles.rowTop },
+					el("span", {
+						className: styles.message,
+						"data-warn": allow.level === "warn" ? "true" : undefined,
+						"data-error": allow.level === "error" ? "true" : undefined,
+						title: allow.title === null ? undefined : allow.title,
+					}, allow.text)));
 		}
 		
 		function PluginSafetyTab({ t }) {

package/lib/server/domain/allow-builds.js

@@ -0,0 +1,330 @@
+// L1 · domain —— allow-builds.js（**只有用户显式点击时**才写盘：最小放行项 + 改前备份 + 写后读回核实）
+//
+// 为什么单开一个模块（2026-09-27 加法 + 改错）：
+//   pnpm 11 的 `strictDepBuilds` 默认为 true —— 只要 profile 里存在**带安装脚本但未获批准**的依赖，
+//   任何一次 pnpm 安装都会在**装完之后**抛 `ERR_PNPM_IGNORED_BUILDS` 并 exitCode=1，
+//   哪怕这次操作真正想做的事（写清单 + 对齐 lock）已经做完了；用户看到的却是"失败"。
+//   出路必须是**显式的**：用户自己点一下「允许这些构建脚本」，我们才在 profile 的 pnpm-workspace.yaml
+//   里补上**具体包名**的放行项（pnpm 自己的 `approve-builds` 写的就是这个位置）。
+//
+// ⚠️ 安全边界（写死在这里，配套测试 tests/test-allow-builds.mjs 逐条钉死）：
+//   ① **绝不自动执行**：本模块只被 domain/plugin-actions.js 的 `allow-builds` 动作调用，
+//      而那个动作只由用户点击 -> POST /plugin-console/run-suggested 触发；安装/检测路径永不调用它。
+//   ② **绝不下载、绝不执行任何脚本**：本模块只做文本改写（readFile/writeFile/copyFile），
+//      不 spawn 任何进程、不碰 argv、不跑 pnpm。放行只影响"pnpm 下次安装是否还会因未批准而报错"；
+//      真正的构建由 pnpm 在**用户之后自己发起**的安装里执行（本机实测首次 ≈19 分钟，note 里如实说清）。
+//   ③ **只动最小必要行**：命中一个包就只改/加那一行；其它字段一字不动（写后按行比对核实）；
+//      改前先复制 `.bak-<时间戳>`，写后读回核实（含 sha256 前后值）。
+//   ④ 认不出形态就不硬来：退回 `strictDepBuilds: false`（需求里点名的兜底），
+//      并在 note 里写清副作用（对所有依赖生效）。
+//
+// 分层：L1 domain —— 不认识 cordis ctx；时间戳可注入（便于离线断言）。
+import { createHash } from 'node:crypto'
+import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { NPM_NAME_RE } from './dep-source.js'
+
+const WORKSPACE_FILE = 'pnpm-workspace.yaml'
+const MODULES_FILE = join('node_modules', '.modules.yaml')
+const ALLOW_KEY = 'allowBuilds'
+const ALLOWED_VALUE = 'true'
+const DENIED_VALUE = 'false'
+const ONLY_BUILT_KEY = 'onlyBuiltDependencies'
+const STRICT_KEY = 'strictDepBuilds'
+const IGNORED_KEY = 'ignoredBuilds'
+
+function textOf(value) {
+  return typeof value === 'string' ? value : String(value ?? '')
+}
+function sha256Of(text) {
+  return createHash('sha256').update(textOf(text), 'utf8').digest('hex')
+}
+/** 文件行：统一按 LF 认识（CRLF 也拆得开；写回时统一 LF，符合"LF / 无 BOM"的要求）。 */
+function linesOf(text) {
+  return textOf(text).split(/\r?\n/u)
+}
+function unquote(value) {
+  return textOf(value).trim().replace(/^['"]|['"]$/gu, '')
+}
+/** 顶层键（容忍 pnpm 写的带引号形态：`"allowBuilds":`）。 */
+function isTopLevelKey(line, key) {
+  return new RegExp(`^["']?${key}["']?\\s*:`, 'u').test(line)
+}
+/** 表头行上是否直接写了值（如 `allowBuilds: { ssh2: true }` 这种行内/flow 形态）。
+ *  这种形态**不能**再往下面追加块条目（会写出坏 YAML）—— 判为"形态不允许"，走 strictDepBuilds 兜底。 */
+function headerHasInlineValue(line, key) {
+  const m = textOf(line).match(new RegExp(`^["']?${key}["']?\\s*:(.*)$`, 'u'))
+  if (m === null) return false
+  const rest = m[1].trim()
+  return rest !== '' && !rest.startsWith('#')
+}
+/** 顶层块 = `<key>:` 顶格那行 + 其后所有缩进行（空行/注释算块内，直到下一个顶格实义行）。 */
+function topLevelBlock(lines, key) {
+  const headerIndex = lines.findIndex((line) => isTopLevelKey(line, key))
+  if (headerIndex < 0) return null
+  let endIndex = headerIndex
+  for (let i = headerIndex + 1; i < lines.length; i += 1) {
+    const line = lines[i]
+    if (line.trim() === '' || /^\s*#/u.test(line) || /^\s/u.test(line)) { endIndex = i; continue }
+    break
+  }
+  return { headerIndex, endIndex, body: lines.slice(headerIndex + 1, endIndex + 1) }
+}
+/** 块里的 `name: value` 条目（只认简单标量；认不出返回 null → 调用方走兜底）。 */
+function mapEntries(block) {
+  const entries = []
+  for (let i = 0; i < block.body.length; i += 1) {
+    const raw = block.body[i]
+    if (raw.trim() === '' || /^\s*#/u.test(raw)) continue
+    const m = raw.match(/^(\s+)([^\s:#][^:]*?)\s*:\s*(.*)$/u)
+    if (m === null) return null
+    entries.push({ offset: i, indent: m[1], name: unquote(m[2]), value: m[3].trim(), raw })
+  }
+  return entries
+}
+/** 块里的 `- name` 列表项（同上）。 */
+function listEntries(block) {
+  const entries = []
+  for (let i = 0; i < block.body.length; i += 1) {
+    const raw = block.body[i]
+    if (raw.trim() === '' || /^\s*#/u.test(raw)) continue
+    const m = raw.match(/^(\s*)-\s+(.+?)\s*$/u)
+    if (m === null) return null
+    entries.push({ offset: i, indent: m[1], name: unquote(m[2]), raw })
+  }
+  return entries
+}
+function normalizeNames(packages) {
+  return [...new Set((Array.isArray(packages) ? packages : []).map((n) => textOf(n).trim()).filter((n) => n !== ''))]
+}
+
+/** 纯函数：从文本读出放行状态。
+ *  blocked = 还卡在"未决"的包（pnpm 写的占位值，如 `set this to true or false`）；
+ *  allowed = 已明确放行（true）的包。`false` 两边都不算 —— 它本身就是一个已做的决定（不会再报错）。 */
+function readApprovalState(text) {
+  const lines = linesOf(text)
+  const allow = topLevelBlock(lines, ALLOW_KEY)
+  if (allow !== null) {
+    if (headerHasInlineValue(lines[allow.headerIndex], ALLOW_KEY)) {
+      return { form: ALLOW_KEY, parsed: false, blocked: [], allowed: [], reason: `${ALLOW_KEY} 写成了行内形态（不是逐行映射）` }
+    }
+    const entries = mapEntries(allow)
+    if (entries === null) {
+      return { form: ALLOW_KEY, parsed: false, blocked: [], allowed: [], reason: `${ALLOW_KEY} 不是简单的逐行映射` }
+    }
+    return {
+      form: ALLOW_KEY,
+      parsed: true,
+      blocked: entries.filter((e) => e.value !== ALLOWED_VALUE && e.value !== DENIED_VALUE).map((e) => e.name),
+      allowed: entries.filter((e) => e.value === ALLOWED_VALUE).map((e) => e.name),
+      reason: null,
+    }
+  }
+  const list = topLevelBlock(lines, ONLY_BUILT_KEY)
+  if (list !== null) {
+    if (headerHasInlineValue(lines[list.headerIndex], ONLY_BUILT_KEY)) {
+      return { form: ONLY_BUILT_KEY, parsed: false, blocked: [], allowed: [], reason: `${ONLY_BUILT_KEY} 写成了行内形态（不是简单列表）` }
+    }
+    const entries = listEntries(list)
+    if (entries === null) {
+      return { form: ONLY_BUILT_KEY, parsed: false, blocked: [], allowed: [], reason: `${ONLY_BUILT_KEY} 不是简单列表` }
+    }
+    return { form: ONLY_BUILT_KEY, parsed: true, blocked: [], allowed: entries.map((e) => e.name), reason: null }
+  }
+  return { form: null, parsed: true, blocked: [], allowed: [], reason: null }
+}
+
+/** 兜底：`strictDepBuilds: false`（形态不允许逐包放行时）。 */
+function fallbackPlan(lines, names, why) {
+  const out = [...lines]
+  const index = out.findIndex((line) => isTopLevelKey(line, STRICT_KEY))
+  if (index >= 0) {
+    if (new RegExp(`^["']?${STRICT_KEY}["']?\\s*:\\s*${DENIED_VALUE}\\s*$`, 'u').test(out[index])) {
+      return { ok: true, added: [], form: STRICT_KEY, fallback: true, reason: why, changed: false, text: out.join('\n') }
+    }
+    out[index] = `${STRICT_KEY}: ${DENIED_VALUE}`
+  } else {
+    while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+    out.push(`${STRICT_KEY}: ${DENIED_VALUE}`, '')
+  }
+  return { ok: true, added: names, form: STRICT_KEY, fallback: true, reason: why, changed: true, text: out.join('\n') }
+}
+
+/** 纯函数：算出"要写什么"（**不碰盘**）。
+ *  返回 { ok, changed, added[], form, fallback, reason, text }；changed === false 表示无需改动。 */
+function planApprovalEdit(text, packages) {
+  const names = normalizeNames(packages)
+  if (names.length === 0) return { ok: false, changed: false, added: [], form: null, fallback: false, reason: '没有给出要放行的包名', text: textOf(text) }
+  const bad = names.filter((n) => !NPM_NAME_RE.test(n))
+  if (bad.length > 0) return { ok: false, changed: false, added: [], form: null, fallback: false, reason: `不是合法的 npm 包名：${bad.join('、')}`, text: textOf(text) }
+  const source = textOf(text)
+  const lines = linesOf(source)
+  const allow = topLevelBlock(lines, ALLOW_KEY)
+  if (allow !== null) {
+    if (headerHasInlineValue(lines[allow.headerIndex], ALLOW_KEY)) return fallbackPlan(lines, names, `${ALLOW_KEY} 写成了行内形态`)
+    const entries = mapEntries(allow)
+    if (entries === null) return fallbackPlan(lines, names, `${ALLOW_KEY} 不是简单的逐行映射`)
+    const byName = new Map(entries.map((e) => [e.name, e]))
+    const added = names.filter((n) => byName.get(n)?.value !== ALLOWED_VALUE)
+    if (added.length === 0) return { ok: true, changed: false, added: [], form: ALLOW_KEY, fallback: false, reason: null, text: source }
+    const out = [...lines]
+    for (const name of added) {
+      const entry = byName.get(name)
+      if (entry === undefined) continue
+      out[allow.headerIndex + 1 + entry.offset] = `${entry.indent}${entry.name}: ${ALLOWED_VALUE}`
+    }
+    const fresh = added.filter((n) => !byName.has(n))
+    if (fresh.length > 0) {
+      const last = entries[entries.length - 1]
+      const indent = last === undefined ? '  ' : last.indent
+      const at = last === undefined ? allow.headerIndex + 1 : allow.headerIndex + 1 + last.offset + 1
+      out.splice(at, 0, ...fresh.map((n) => `${indent}${n}: ${ALLOWED_VALUE}`))
+    }
+    return { ok: true, changed: true, added, form: ALLOW_KEY, fallback: false, reason: null, text: out.join('\n') }
+  }
+  const list = topLevelBlock(lines, ONLY_BUILT_KEY)
+  if (list !== null) {
+    if (headerHasInlineValue(lines[list.headerIndex], ONLY_BUILT_KEY)) return fallbackPlan(lines, names, `${ONLY_BUILT_KEY} 写成了行内形态`)
+    const entries = listEntries(list)
+    if (entries === null) return fallbackPlan(lines, names, `${ONLY_BUILT_KEY} 不是简单列表`)
+    const known = new Set(entries.map((e) => e.name))
+    const added = names.filter((n) => !known.has(n))
+    if (added.length === 0) return { ok: true, changed: false, added: [], form: ONLY_BUILT_KEY, fallback: false, reason: null, text: source }
+    const out = [...lines]
+    const last = entries[entries.length - 1]
+    const indent = last === undefined ? '  ' : last.indent
+    const at = last === undefined ? list.headerIndex + 1 : list.headerIndex + 1 + last.offset + 1
+    out.splice(at, 0, ...added.map((n) => `${indent}- ${n}`))
+    return { ok: true, changed: true, added, form: ONLY_BUILT_KEY, fallback: false, reason: null, text: out.join('\n') }
+  }
+  // 两个键都没有：新建一个 allowBuilds 块（pnpm 11 的规范位置；pnpm 自己的 writeSettings 也这么干），
+  // 其余内容原样保留。
+  const out = [...lines]
+  while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+  out.push(`${ALLOW_KEY}:`, ...names.map((n) => `  ${n}: ${ALLOWED_VALUE}`), '')
+  return { ok: true, changed: true, added: names, form: ALLOW_KEY, fallback: false, reason: null, text: out.join('\n') }
+}
+
+/** 读该 profile 的 pnpm-workspace.yaml（不存在时 exists=false，仍可走"新建"分支）。 */
+function readWorkspaceApprovals(profileDir) {
+  const file = join(textOf(profileDir), WORKSPACE_FILE)
+  if (!existsSync(file)) {
+    return { file, exists: false, text: '', sha256: null, form: null, parsed: true, blocked: [], allowed: [], reason: null }
+  }
+  const text = readFileSync(file, 'utf8')
+  return { file, exists: true, text, sha256: sha256Of(text), ...readApprovalState(text) }
+}
+
+/** 读 pnpm 自己记的"被忽略的构建"（node_modules/.modules.yaml 的 ignoredBuilds，flow 或列表形态都能认）。 */
+function readIgnoredBuilds(profileDir) {
+  const file = join(textOf(profileDir), MODULES_FILE)
+  if (!existsSync(file)) return []
+  let text = ''
+  try { text = readFileSync(file, 'utf8') } catch { return [] }
+  const flow = text.match(new RegExp(`["']?${IGNORED_KEY}["']?\\s*:\\s*\\[([\\s\\S]*?)\\]`, 'u'))
+  const body = flow !== null ? flow[1] : (() => {
+    const block = topLevelBlock(linesOf(text), IGNORED_KEY)
+    if (block === null) return null
+    const entries = listEntries(block)
+    return entries === null ? null : entries.map((e) => e.name).join(',')
+  })()
+  if (body === null || body === '') return []
+  const found = []
+  for (const part of body.split(',')) {
+    const dep = unquote(part).replace(/[[\]{}]/gu, '').trim()
+    if (dep === '') continue
+    const at = dep.lastIndexOf('@')
+    const name = at > 0 ? dep.slice(0, at) : dep
+    if (!NPM_NAME_RE.test(name)) continue
+    if (!found.includes(name)) found.push(name)
+  }
+  return found
+}
+
+/** 「已放行、但 pnpm 还没真正构建过」= .modules.yaml 里仍有被忽略的构建，且放行项里已经有 true。
+ *  安装动作据此选超时预算：真构建可能十几分钟，180 秒的上限会把**成功**的安装杀成"失败"。 */
+function pendingApprovedBuilds(profileDir) {
+  const ignored = readIgnoredBuilds(profileDir)
+  const state = readWorkspaceApprovals(profileDir)
+  let modulesAllowed = []
+  try {
+    const modules = readFileSync(join(textOf(profileDir), MODULES_FILE), 'utf8')
+    const flow = modules.match(new RegExp(`["']?${ALLOW_KEY}["']?\\s*:\\s*\\{([^}]*)\\}`, 'u'))
+    if (flow !== null) {
+      modulesAllowed = [...flow[1].matchAll(/([^\s,:{}"']+)\s*:\s*true/gu)].map((m) => m[1])
+    } else {
+      const block = topLevelBlock(linesOf(modules), ALLOW_KEY)
+      const entries = block === null ? null : mapEntries(block)
+      modulesAllowed = entries === null ? [] : entries.filter((e) => e.value === ALLOWED_VALUE).map((e) => e.name)
+    }
+  } catch {}
+  const approved = [...new Set([...state.allowed, ...modulesAllowed])]
+  return { ignored, approved, pending: ignored.length > 0 && approved.length > 0 }
+}
+
+/** 时间戳（可注入，便于离线断言）：`2026-09-27T16-12-33-123Z`。 */
+function backupStamp(now) {
+  const date = typeof now === 'function' ? now() : (now instanceof Date ? now : new Date())
+  return date.toISOString().replace(/[:.]/gu, '-')
+}
+
+/** **唯一的写盘点**（只由显式动作调用）：备份 -> 写最小放行项 -> 读回核实。
+ *  返回 { ok, changed, added[], file, form, fallback, sha256Before, sha256After, backup, verified, note, reason }。 */
+function applyAllowBuilds({ profileDir, packages, now = () => new Date() } = {}) {
+  const state = readWorkspaceApprovals(profileDir)
+  if (state.exists !== true) {
+    return { ok: false, changed: false, added: [], file: state.file, reason: `本 profile 里没有 ${WORKSPACE_FILE}，拒绝凭空创建` }
+  }
+  const planned = planApprovalEdit(state.text, packages)
+  if (planned.ok !== true) {
+    return { ok: false, changed: false, added: [], file: state.file, form: planned.form, fallback: false, reason: planned.reason }
+  }
+  if (planned.changed !== true) {
+    return {
+      ok: true, changed: false, added: [], file: state.file, form: planned.form, fallback: planned.fallback === true,
+      sha256Before: state.sha256, sha256After: state.sha256, backup: null,
+      verified: { targetsAllowed: true, othersIntact: true, sha256Matches: true },
+      reason: `无需改动：${planned.form} 里已经是放行状态`,
+      note: '这些构建脚本已经是放行状态，本次没有改动任何文件。',
+    }
+  }
+  const before = state.text
+  const backup = `${state.file}.bak-${backupStamp(now)}`
+  copyFileSync(state.file, backup) // ① 改前备份
+  writeFileSync(state.file, planned.text, 'utf8') // ② 写回（LF / 无 BOM：行由 linesOf 拆分后 join('\n')）
+  const after = readFileSync(state.file, 'utf8') // ③ 写后读回核实
+  const sha256After = sha256Of(after)
+  const stateAfter = readApprovalState(after)
+  const targetsAllowed = planned.fallback === true
+    ? new RegExp(`^["']?${STRICT_KEY}["']?\\s*:\\s*${DENIED_VALUE}\\s*$`, 'mu').test(after)
+    : planned.added.every((n) => stateAfter.allowed.includes(n))
+  // "其它字段一字未动"：原文里**没有**被丢掉的行，必须原样、同序地出现在写回结果里。
+  const afterLines = linesOf(after)
+  const dropped = new Set(linesOf(before).filter((line) => !afterLines.includes(line)))
+  const kept = linesOf(before).filter((line) => !dropped.has(line))
+  let cursor = -1
+  let othersIntact = true
+  for (const line of kept) {
+    const at = afterLines.indexOf(line, cursor + 1)
+    if (at < 0) { othersIntact = false; break }
+    cursor = at
+  }
+  const verified = { targetsAllowed, othersIntact, sha256Matches: true }
+  const note = planned.fallback === true
+    ? `该 profile 的 ${WORKSPACE_FILE} 形态不允许逐包放行（${planned.reason ?? '结构无法安全改写'}），已写入 \`${STRICT_KEY}: ${DENIED_VALUE}\`：`
+      + 'pnpm 之后**不再因任何**未批准的构建脚本报错（副作用：对所有依赖生效；构建仍然不会被执行）。本动作本身不下载、不执行任何脚本。'
+    : `已把 ${planned.added.length} 个包写进 ${WORKSPACE_FILE} 的 ${planned.form}（只加/改这几行，其它字段一字未动）。`
+      + '放行后**下一次 pnpm 安装**才会真正执行这些脚本（二进制要下载、原生模块要编译，本机实测首次可能十几分钟）；'
+      + '本动作本身不下载、不执行任何脚本。'
+  return {
+    ok: verified.targetsAllowed && verified.othersIntact && verified.sha256Matches,
+    changed: true, added: [...planned.added], file: state.file, form: planned.form, fallback: planned.fallback === true,
+    sha256Before: state.sha256, sha256After, backup, verified, reason: null, note,
+  }
+}
+
+export {
+  ALLOW_KEY, ALLOWED_VALUE, DENIED_VALUE, MODULES_FILE, ONLY_BUILT_KEY, STRICT_KEY, WORKSPACE_FILE,
+  applyAllowBuilds, backupStamp, headerHasInlineValue, linesOf, pendingApprovedBuilds, planApprovalEdit,
+  readApprovalState, readIgnoredBuilds, readWorkspaceApprovals, sha256Of,
+}

package/lib/server/domain/dep-source.js

@@ -168,6 +168,24 @@ function suggestedPinAction({ packageName, version = null, profileDir = null, pr
   }
 }
 
+/** `allow-builds` 的建议动作（2026-09-27 加法，选项 2）：pnpm 因**构建脚本未获批准**报错时下发，
+ *  面板据此多出一个「允许这些构建脚本」按钮 + 「复制命令」。
+ *  安全语义与 pin 动作同一套：`command` 只供展示/复制，执行侧只认 `payload.action` 白名单类型，
+ *  传 `command`/`argv` 一律 400；`packages` 只在"恰好一个"时才随 payload 下发（多个 = 放行全部被忽略的），
+ *  服务端还会自己读盘核对"这个名字当前确实被忽略"，客户端说了不算。 */
+function suggestedAllowBuildsAction({ packages = [], profile = null, reason = null } = {}) {
+  const list = Array.isArray(packages) ? packages.filter((p) => typeof p === 'string' && p !== '') : []
+  const name = profile ?? null
+  return {
+    kind: 'allow-builds',
+    label: '允许这些构建脚本',
+    // 展示用命令 = pnpm 自己的等价命令（**本动作不执行它**：服务端只按白名单形状改配置文件）
+    command: 'pnpm approve-builds',
+    payload: { action: 'allow-builds', ...(list.length === 1 ? { packageName: list[0] } : {}), profile: name },
+    reason,
+  }
+}
+
 /** `reconcile-lock` 的建议动作（只重写 pnpm-lock.yaml，argv 由 lockfile-health.repairArgsFor 唯一产出）。 */
 function suggestedReconcileAction({ profileDir = null, profile = null, reason = null } = {}) {
   const name = profile ?? profileNameOf(profileDir)
@@ -180,4 +198,4 @@ function suggestedReconcileAction({ profileDir = null, profile = null, reason =
   }
 }
 
-export { PLUGIN_SRC_DIR, NPM_NAME_RE, probeRegistryPackage, probeFailureKind, materializePackageForLink, linkSpecFor, linkSpecIsIntact, profileNameOf, suggestedPinAction, suggestedReconcileAction }
+export { PLUGIN_SRC_DIR, NPM_NAME_RE, probeRegistryPackage, probeFailureKind, materializePackageForLink, linkSpecFor, linkSpecIsIntact, profileNameOf, suggestedAllowBuildsAction, suggestedPinAction, suggestedReconcileAction }