From 5674d53a6407c7969c402e157ad4bc938abc7dbf Mon Sep 17 00:00:00 2001
From: john <cynell@139.com>
Date: Thu, 16 Jul 2026 21:19:04 +0800
Subject: [PATCH] ci: verify main before production release

---
 .gitea/workflows/ci.yml | 57 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 .gitea/workflows/ci.yml

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
new file mode 100644
index 0000000..8d7b75a
--- /dev/null
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,57 @@
+name: Memind CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: memind-ci-${{ gitea.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    name: Test, build, and release guards
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: Check out exact commit
+        uses: actions/checkout@v4
+
+      - name: Use Node.js 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install locked dependencies
+        run: npm ci
+
+      - name: Check patch formatting
+        run: git diff --check HEAD^
+
+      - name: Run full test suite
+        run: npm test
+
+      - name: Build production frontend
+        run: npm run build
+
+      - name: Verify MindSpace publish guards
+        run: npm run verify:mindspace-publish-guards
+
+      - name: Verify MindSpace page sync guards
+        run: npm run verify:mindspace-page-sync-guards
+
+      - name: Verify Page Data delivery
+        run: npm run verify:page-data
+
+      - name: Check published download links
+        run: npm run check:mindspace-public-links