Access is denied error during build windows10 本地pnpm打包失败

[liucf1224-del]

流程

由之前的版本git项目后
pnpm run clean
pnpm install
pnpm run build
pnpm dsh web
问题在 >pnpm run build的时候报错 说temp的问题之前的是在c盘写入报错切换盘符也是报错

报错问题：D:\harness\deepseek-harness>pnpm run build
$ tsx scripts/build.ts
run-gates: build running 9 gate(s) with 9 worker(s) from 12 local default worker(s) of 12 CPU(s).
run-gates: start native addon
run-gates: PASS native addon (1.05s)
run-gates: start host compiler
run-gates: PASS host compiler (144.70s)
run-gates: start Host bundle
run-gates: start host aggregate check
run-gates: PASS Host bundle (42.35s)
run-gates: start Desktop bundle
run-gates: PASS Desktop bundle (5.25s)
run-gates: start client compiler
run-gates: PASS host aggregate check (125.71s)
run-gates: PASS client compiler (130.95s)
run-gates: start Client bundle
run-gates: start client aggregate check
run-gates: PASS Client bundle (38.42s)
run-gates: start Web build

== FAILED Web build (13.77s) ==
command: pnpm run build:web
outcome: exit 1
$ pnpm --filter @deepseek-ai/dsh-web-frontend run build
native/system/packages/darwin-arm64 | [WARN] Unsupported platform: wanted: {"cpu":["arm64"],"os":["darwin"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
native/system/packages/darwin-x64 | [WARN] Unsupported platform: wanted: {"cpu":["x64"],"os":["darwin"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
native/system/packages/linux-arm64 | [WARN] Unsupported platform: wanted: {"cpu":["arm64"],"os":["linux"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
native/system/packages/linux-x64 | [WARN] Unsupported platform: wanted: {"cpu":["x64"],"os":["linux"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
$ vite build
vite v6.4.3 building for production...
transforming...
✓ 512 modules transformed.
rendering chunks...
✗ Build failed in 8.53s
error during build:
[vite:esbuild-transpile] remove D:\temp\esbuild-cac5355fb1433464c1cfd16b6f5397bd8e8736a2735f86b372ec0e4bef66635f: Access is denied.
at D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:718:38
at responseCallbacks. (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:603:9)
at handleIncomingPacket (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:657:31)
at Socket.readFromStdout (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:581:7)
at Socket.emit (node:events:519:28)
at addChunk (node:internal/streams/readable:561:12)
at readableAddChunkPushByteMode (node:internal/streams/readable:512:3)
at Readable.push (node:internal/streams/readable:392:5)
at Pipe.onStreamRead (node:internal/stream_base_commons:189:23)
D:\harness\deepseek-harness\apps\web:
[ERR_PNPM_RECURSIVE_RUN_FIRST_FAIL] @deepseek-ai/dsh-web-frontend@0.2.1-rc.2 build: vite build
Exit status 1
[ELIFECYCLE] Command failed with exit code 1.
run-gates: PASS client aggregate check (2437.90s)

run-gates: 8 passed, 1 failed, 0 skipped in 2798.82s.
run-gates: unsuccessful gates:

• FAILED Web build (13.77s, exit 1)
  pnpm run build:web
  [ELIFECYCLE] Command failed with exit code 1.
  或者是这种
  == FAILED Web build (13.77s) ==
  command: pnpm run build:web
  outcome: exit 1
  $ pnpm --filter @deepseek-ai/dsh-web-frontend run build
  native/system/packages/darwin-arm64 | [WARN] Unsupported platform: wanted: {"cpu":["arm64"],"os":["darwin"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
  native/system/packages/darwin-x64 | [WARN] Unsupported platform: wanted: {"cpu":["x64"],"os":["darwin"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
  native/system/packages/linux-arm64 | [WARN] Unsupported platform: wanted: {"cpu":["arm64"],"os":["linux"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
  native/system/packages/linux-x64 | [WARN] Unsupported platform: wanted: {"cpu":["x64"],"os":["linux"],"libc":["any"]} (current: {"os":"win32","cpu":"x64","libc":"unknown"})
  $ vite build
  vite v6.4.3 building for production...
  transforming...
  ✓ 512 modules transformed.
  rendering chunks...
  ✗ Build failed in 8.53s
  error during build:
  [vite:esbuild-transpile] remove D:\temp\esbuild-cac5355fb1433464c1cfd16b6f5397bd8e8736a2735f86b372ec0e4bef66635f: Access is denied.
  at D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:718:38
  at responseCallbacks. (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:603:9)
  at handleIncomingPacket (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:657:31)
  at Socket.readFromStdout (D:\harness\deepseek-harness\node_modules.pnpm\esbuild@0.25.12\node_modules\esbuild\lib\main.js:581:7)
  at Socket.emit (node:events:519:28)
  at addChunk (node:internal/streams/readable:561:12)
  at readableAddChunkPushByteMode (node:internal/streams/readable:512:3)
  at Readable.push (node:internal/streams/readable:392:5)
  at Pipe.onStreamRead (node:internal/stream_base_commons:189:23)
  D:\harness\deepseek-harness\apps\web:
  [ERR_PNPM_RECURSIVE_RUN_FIRST_FAIL] @deepseek-ai/dsh-web-frontend@0.2.1-rc.2 build: vite build
  Exit status 1
  [ELIFECYCLE] Command failed with exit code 1.
  run-gates: PASS client aggregate check (2437.90s)

run-gates: 8 passed, 1 failed, 0 skipped in 2798.82s.
run-gates: unsuccessful gates:

• FAILED Web build (13.77s, exit 1)
  pnpm run build:web
  [ELIFECYCLE] Command failed with exit code 1.

对此这种除开回退版本还有别的办法吗

[timerring]

感觉和 #8314 很像，很可能是 Windows 沙箱留下的 Low 完整性标签导致的 : )

如果之前把源码目录或它的父目录作为 DSH 工作区运行过受限命令，沙箱会给目录里的文件加上这个标签。esbuild.exe 带上标签后，即使从普通终端启动，也会以 Low 完整性运行，删不掉 Node 创建的临时文件，所以换 TEMP 路径也可能继续报错。pnpm 的硬链接还可能把影响带到共享 store。

可以在仓库根目录的 PowerShell 里检查一下 类似：

icacls 'node_modules\.pnpm\@esbuild+win32-x64@0.25.12\node_modules\@esbuild\win32-x64\esbuild.exe'

如果里面有 Low Mandatory Level 或“低强制级别”，就能基本确认，再按实际受影响范围恢复标签就好。可以先查下。

[liucf1224-del]

好的 谢谢 我试试

[liucf1224-del]

解决方式 进对应的 deepseek-harness目录 然后 执行 icacls 'node_modules.pnpm@esbuild+win32-x64@0.25.12\node_modules@esbuild\win32-x64\esbuild.exe'这个 后续 如果有问题对这个目录执行 icacls "D:\harness\deepseek-harness\node_modules" | findstr /i "Mandatory Label" 这个吧权限更替后可以解决这个问题

[wtslh]

确实这个办法好用，我这边是先icacls "node_modules.pnpm@esbuild+win32-x64@0.25.12\node_modules@esbuild\win32-x64\esbuild.exe"，看到结果是“Mandatory Label\Low Mandatory”，然后icacls "node_modules.pnpm@esbuild+win32-x64@0.25.12\node_modules@esbuild\win32-x64\esbuild.exe" /setintegritylevel H后，再执行pnpm run build:web就通过了。