diff --git a/.drone.yml b/.drone.yml
index 36e8b509..386ac102 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -44,7 +44,8 @@ steps:
       - echo "==> web tag=${DRONE_TAG}"
       - mkdir -p "/hzdyjs-releases/${DRONE_TAG}"
       - cd web
-      - npm ci
+      # package-lock.json 被 gitignore，仓库内无 lock，改用 npm install
+      - npm install
       - npm run build:prod
       - test -f dist/index.html
       - tar -C dist -czf "/hzdyjs-releases/${DRONE_TAG}/web-${DRONE_TAG}.tar.gz" .
diff --git a/docs/superpowers/specs/2026-10-24-drone-tag-package-design.md b/docs/superpowers/specs/2026-10-24-drone-tag-package-design.md
index 3aadca70..ff3bbfa9 100644
--- a/docs/superpowers/specs/2026-10-24-drone-tag-package-design.md
+++ b/docs/superpowers/specs/2026-10-24-drone-tag-package-design.md
@@ -43,7 +43,8 @@
    源文件：`backend/ruoyi-admin/target/ruoyi-admin.jar` → `backend-<tag>.jar`
 
 2. **web**（`node:20-bookworm`）  
-   `npm ci` → `npm run build:prod`  
+   `npm install` → `npm run build:prod`  
+   （`web/package-lock.json` 被 gitignore，仓库无 lock，不能用 `npm ci`）  
    打包 `web/dist` → `web-<tag>.tar.gz`
 
 3. **mobile**（`node:20-bookworm` + corepack/pnpm）