fix: adapt CI for Gitea Actions, remove Docker/GitHub-specific workflows

- Rewrite ci.yml: replace GitHub Actions with run: steps, drop
  Docker publish, MySQL/Postgres schema, and artifact upload jobs
- Delete codeql.yml (GitHub CodeQL, not available on Gitea)
- Delete docs-pages.yml (GitHub Pages specific)
- Delete release.yml (Docker Hub + GitHub Releases)
- Delete claude-code.md, claude-opus-4.7.md (unused)

Signed-off-by: Boos4721 <boos4721@icloud.com>

.github/workflows/ci.yml

@@ -12,469 +12,101 @@ on:
       - 'CODE_OF_CONDUCT.md'
   pull_request:
 
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
 env:
   NODE_VERSION: 25
-  # Non-desktop CI jobs do not need the Electron runtime binary.
   ELECTRON_SKIP_BINARY_DOWNLOAD: '1'
 
 jobs:
-  changes:
-    name: Detect Docs Changes
-    if: github.event_name == 'pull_request'
+  test:
+    name: Test & Check
     runs-on: ubuntu-latest
-    outputs:
-      docs: ${{ steps.filter.outputs.docs }}
+    timeout-minutes: 30
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Detect docs-related changes
-        id: filter
-        uses: dorny/paths-filter@v4
-        with:
-          filters: |
-            docs:
-              - 'docs/**'
-              - 'README.md'
-              - 'README_EN.md'
-              - 'CONTRIBUTING.md'
-              - 'SECURITY.md'
-              - 'CODE_OF_CONDUCT.md'
-              - '.github/workflows/docs-pages.yml'
-
-  test-core:
-    name: Test Core
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
+      - name: Install Node.js ${{ env.NODE_VERSION }}
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          if [ ! -d "$NVM_DIR" ]; then
+            curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
+          fi
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm install ${{ env.NODE_VERSION }}
+          nvm use ${{ env.NODE_VERSION }}
+          echo "NODE=$(which node)" >> "$GITHUB_ENV"
+          echo "NPM=$(which npm)" >> "$GITHUB_ENV"
 
       - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm ci --prefer-offline --no-audit --no-fund
 
-      - name: Run tests
+      - name: Typecheck
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm run typecheck
+
+      - name: Test core
         env:
           DB_PARITY_SKIP_LIVE_SCHEMA: 'true'
-        run: npm test
-
-  build-web:
-    name: Build Web
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm test
 
       - name: Build web
-        run: npm run build:web
-
-  build-server:
-    name: Build Server
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm run build:web
 
       - name: Build server
-        run: npm run build:server
+        run: |
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm run build:server
 
-  build-desktop:
-    name: Build Desktop
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        env:
-          ELECTRON_SKIP_BINARY_DOWNLOAD: ''
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Build desktop
-        run: npm run build:desktop
-
-  typecheck:
-    name: Typecheck
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Run typecheck
-        run: npm run typecheck
-
-  repo-drift:
-    name: Repo Drift Check
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Run repo drift check
-        run: npm run repo:drift-check
-
-  schema-sqlite:
+  sqlite-schema:
     name: Schema Check (SQLite)
     runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Run sqlite schema parity
-        run: npm run test:schema:parity
-
-      - name: Run sqlite schema upgrade
-        run: npm run test:schema:upgrade
-
-  schema-mysql:
-    name: Schema Check (MySQL)
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    services:
-      mysql:
-        image: mysql:8.4
-        env:
-          MYSQL_DATABASE: metapi
-          MYSQL_ROOT_PASSWORD: root
-        ports:
-          - 3306:3306
-        options: >-
-          --health-cmd="mysqladmin ping -h 127.0.0.1 -proot"
-          --health-interval=10s
-          --health-timeout=5s
-          --health-retries=10
-    env:
-      DB_PARITY_MYSQL_URL: mysql://root:root@127.0.0.1:3306/metapi
-      DB_PARITY_SQLITE: 'false'
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Run mysql schema parity
-        run: npm run test:schema:parity
-
-      - name: Run mysql schema upgrade
-        run: npm run test:schema:upgrade
-
-      - name: Run mysql runtime schema bootstrap
-        run: npm run test:schema:runtime
-
-  schema-postgres:
-    name: Schema Check (Postgres)
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    services:
-      postgres:
-        image: postgres:16
-        env:
-          POSTGRES_DB: metapi
-          POSTGRES_PASSWORD: postgres
-          POSTGRES_USER: postgres
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd="pg_isready -U postgres -d metapi"
-          --health-interval=10s
-          --health-timeout=5s
-          --health-retries=10
-    env:
-      DB_PARITY_POSTGRES_URL: postgres://postgres:postgres@127.0.0.1:5432/metapi
-      DB_PARITY_SQLITE: 'false'
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Run postgres schema parity
-        run: npm run test:schema:parity
-
-      - name: Run postgres schema upgrade
-        run: npm run test:schema:upgrade
-
-      - name: Run postgres runtime schema bootstrap
-        run: npm run test:schema:runtime
-
-  docs-build:
-    name: Build Docs
-    if: github.event_name == 'pull_request' && needs.changes.outputs.docs == 'true'
-    needs: changes
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Build docs
-        run: npm run docs:build
-
-  audit:
-    name: Audit Production Dependencies
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    # Keep PR audit informational so build/test/schema remain the merge gate.
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit --no-fund
-
-      - name: Audit production dependencies
+      - name: Install Node.js ${{ env.NODE_VERSION }}
         run: |
-          set +e
-          npm audit --omit=dev --audit-level=high
-          status=$?
-          if [ "$status" -ne 0 ] && [ "${{ github.event_name }}" = "pull_request" ]; then
-            echo "::warning::npm audit reported production dependency vulnerabilities; PR audit stays informational."
-            exit 0
+          export NVM_DIR="$HOME/.nvm"
+          if [ ! -d "$NVM_DIR" ]; then
+            curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
           fi
-          exit "$status"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm install ${{ env.NODE_VERSION }}
+          nvm use ${{ env.NODE_VERSION }}
+          echo "NODE=$(which node)" >> "$GITHUB_ENV"
+          echo "NPM=$(which npm)" >> "$GITHUB_ENV"
 
-  publish-docker-arch:
-    name: Publish Docker Image (${{ matrix.arch }})
-    if: github.event_name == 'push'
-    runs-on: ${{ matrix.runner }}
-    timeout-minutes: 45
-    env:
-      DOCKERHUB_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/metapi
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-latest
-          - arch: arm64
-            platform: linux/arm64
-            runner: ubuntu-24.04-arm
-          - arch: armv7
-            platform: linux/arm/v7
-            runner: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Ensure Docker Hub secrets are configured
+      - name: Install dependencies
         run: |
-          if [ -z "${{ secrets.DOCKERHUB_USERNAME }}" ] || [ -z "${{ secrets.DOCKERHUB_TOKEN }}" ]; then
-            echo "Missing Docker Hub secrets: DOCKERHUB_USERNAME / DOCKERHUB_TOKEN"
-            exit 1
-          fi
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm ci --prefer-offline --no-audit --no-fund
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      - name: Set up QEMU
-        if: matrix.arch == 'armv7'
-        uses: docker/setup-qemu-action@v4
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@v6
-        with:
-          images: ${{ env.DOCKERHUB_IMAGE }}
-          tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=ref,event=branch
-            type=sha,format=short
-
-      - name: Add architecture suffix to tags
-        id: arch-tags
-        shell: bash
+      - name: Schema parity (SQLite)
         run: |
-          set -euo pipefail
-          rm -f tags.txt
-          while IFS= read -r tag; do
-            [ -n "$tag" ] || continue
-            echo "${tag}-${{ matrix.arch }}" >> tags.txt
-          done <<< "${{ steps.meta.outputs.tags }}"
-          {
-            echo 'tags<<EOF'
-            cat tags.txt
-            echo 'EOF'
-          } >> "$GITHUB_OUTPUT"
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm run test:schema:parity
 
-      - name: Build and push ${{ matrix.platform }} image
-        uses: docker/build-push-action@v7
-        with:
-          context: .
-          file: docker/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: ${{ steps.arch-tags.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha,scope=ci-${{ matrix.arch }}
-          cache-to: type=gha,mode=max,scope=ci-${{ matrix.arch }}
-
-  publish-docker:
-    name: Publish Docker Manifest
-    if: github.event_name == 'push'
-    runs-on: ubuntu-latest
-    needs: publish-docker-arch
-    timeout-minutes: 15
-    env:
-      DOCKERHUB_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/metapi
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Ensure Docker Hub secrets are configured
+      - name: Schema upgrade (SQLite)
         run: |
-          if [ -z "${{ secrets.DOCKERHUB_USERNAME }}" ] || [ -z "${{ secrets.DOCKERHUB_TOKEN }}" ]; then
-            echo "Missing Docker Hub secrets: DOCKERHUB_USERNAME / DOCKERHUB_TOKEN"
-            exit 1
-          fi
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@v6
-        with:
-          images: ${{ env.DOCKERHUB_IMAGE }}
-          tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=ref,event=branch
-            type=sha,format=short
-
-      - name: Create multi-arch manifests
-        shell: bash
-        run: |
-          set -euo pipefail
-          while IFS= read -r tag; do
-            [ -n "$tag" ] || continue
-            docker buildx imagetools create \
-              --tag "$tag" \
-              "${tag}-amd64" \
-              "${tag}-arm64" \
-              "${tag}-armv7"
-          done <<< "${{ steps.meta.outputs.tags }}"
+          export NVM_DIR="$HOME/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+          nvm use ${{ env.NODE_VERSION }}
+          npm run test:schema:upgrade

.github/workflows/codeql.yml

@@ -1,56 +0,0 @@
-name: CodeQL
-
-on:
-  push:
-    branches: [main, master]
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'README_EN.md'
-      - 'CONTRIBUTING.md'
-      - 'SECURITY.md'
-      - 'CODE_OF_CONDUCT.md'
-  pull_request:
-    paths-ignore:
-      - 'docs/**'
-      - 'README.md'
-      - 'README_EN.md'
-      - 'CONTRIBUTING.md'
-      - 'SECURITY.md'
-      - 'CODE_OF_CONDUCT.md'
-  schedule:
-    - cron: '19 18 * * 0'
-
-permissions:
-  actions: read
-  contents: read
-  security-events: write
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  analyze:
-    name: Analyze (JavaScript/TypeScript)
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ['javascript-typescript']
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
-        with:
-          languages: ${{ matrix.language }}
-          build-mode: none
-
-      - name: Analyze
-        uses: github/codeql-action/analyze@v4
-        with:
-          category: /language:${{ matrix.language }}

.github/workflows/docs-pages.yml

@@ -1,64 +0,0 @@
-name: Docs Pages
-
-on:
-  push:
-    branches: [main]
-    paths:
-      - 'docs/**'
-      - '.github/workflows/docs-pages.yml'
-      - 'package.json'
-      - 'package-lock.json'
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  pages: write
-  id-token: write
-
-concurrency:
-  group: docs-pages-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  build:
-    name: Build Docs
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 25
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build docs site
-        run: npm run docs:build
-
-      - name: Setup Pages
-        uses: actions/configure-pages@v6
-
-      - name: Upload pages artifact
-        uses: actions/upload-pages-artifact@v4
-        with:
-          path: docs/.vitepress/dist
-
-  deploy:
-    name: Deploy Docs
-    needs: build
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-
-    steps:
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v5

.github/workflows/release.yml

@@ -1,436 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags: ['v*']
-  workflow_dispatch:
-
-permissions:
-  contents: write
-  packages: write
-
-concurrency:
-  group: release-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  verify:
-    name: Verify
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 25
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run tests
-        run: npm test
-
-      - name: Build
-        run: npm run build
-
-      - name: Upload built dist
-        uses: actions/upload-artifact@v7
-        with:
-          name: metapi-dist-${{ github.sha }}
-          path: dist
-          if-no-files-found: error
-
-  build-packages:
-    name: Build Desktop Package (${{ matrix.platform }})
-    needs: verify
-    runs-on: ${{ matrix.runner }}
-    timeout-minutes: 60
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - platform: linux
-            runner: ubuntu-latest
-            artifactLabel: linux-x64
-          - platform: windows
-            runner: windows-latest
-            artifactLabel: windows-x64
-          - platform: mac-arm64
-            runner: macos-15
-            artifactLabel: mac-arm64
-            packageCommand: npm run package:desktop -- --mac --arm64
-            expectedMacArch: arm64
-          - platform: mac-x64
-            runner: macos-15-intel
-            artifactLabel: mac-x64
-            packageCommand: npm run package:desktop:mac:intel
-            expectedMacArch: x64
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: 25
-          cache: npm
-
-      - name: Restore Electron cache (Windows)
-        if: runner.os == 'Windows'
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ runner.temp }}/.cache/electron
-            ${{ runner.temp }}/.cache/electron-builder
-            ${{ env.LOCALAPPDATA }}\electron\Cache
-            ${{ env.LOCALAPPDATA }}\electron-builder\Cache
-          key: electron-cache-${{ runner.os }}-${{ hashFiles('package-lock.json', 'package.json', 'electron-builder.yml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
-
-      - name: Restore Electron cache (Linux)
-        if: runner.os == 'Linux'
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ runner.temp }}/.cache/electron
-            ${{ runner.temp }}/.cache/electron-builder
-            ${{ runner.temp }}/.cache/appimage-tools
-            ~/.cache/electron
-            ~/.cache/electron-builder
-          key: electron-cache-${{ runner.os }}-${{ hashFiles('package-lock.json', 'package.json', 'electron-builder.yml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
-
-      - name: Restore Electron cache (macOS)
-        if: runner.os == 'macOS'
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ runner.temp }}/.cache/electron
-            ${{ runner.temp }}/.cache/electron-builder
-            ~/Library/Caches/electron
-            ~/Library/Caches/electron-builder
-          key: electron-cache-${{ runner.os }}-${{ hashFiles('package-lock.json', 'package.json', 'electron-builder.yml') }}
-          restore-keys: |
-            electron-cache-${{ runner.os }}-
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Install Linux packaging dependencies
-        if: runner.os == 'Linux'
-        run: |
-          sudo apt-get update
-          sudo apt-get install --no-install-recommends -y rpm
-
-      - name: Download built dist
-        uses: actions/download-artifact@v8
-        with:
-          name: metapi-dist-${{ github.sha }}
-          path: dist
-
-      - name: Build desktop artifacts (Windows)
-        if: runner.os == 'Windows'
-        shell: pwsh
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          npm_config_cache: ${{ runner.temp }}/.npm
-          ELECTRON_CACHE: ${{ runner.temp }}/.cache/electron
-          ELECTRON_BUILDER_CACHE: ${{ runner.temp }}/.cache/electron-builder
-          ELECTRON_BUILDER_BINARIES_MIRROR: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-          npm_config_electron_builder_binaries_mirror: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-          WIN_CSC_LINK_INPUT: ${{ secrets.CSC_LINK }}
-          WIN_CSC_KEY_PASSWORD_INPUT: ${{ secrets.CSC_KEY_PASSWORD }}
-        run: |
-          if ($env:WIN_CSC_LINK_INPUT) { $env:WIN_CSC_LINK = $env:WIN_CSC_LINK_INPUT }
-          if ($env:WIN_CSC_KEY_PASSWORD_INPUT) { $env:WIN_CSC_KEY_PASSWORD = $env:WIN_CSC_KEY_PASSWORD_INPUT }
-          for ($attempt = 1; $attempt -le 2; $attempt++) {
-            Write-Host "Desktop build attempt $attempt/2"
-            npm run package:desktop
-            if ($LASTEXITCODE -eq 0) {
-              break
-            }
-            if ($attempt -eq 2) {
-              exit $LASTEXITCODE
-            }
-            Start-Sleep -Seconds 90
-          }
-
-      - name: Smoke test packaged native modules (Windows)
-        if: runner.os == 'Windows'
-        shell: pwsh
-        env:
-          ELECTRON_RUN_AS_NODE: 1
-        run: |
-          $appRoot = Join-Path $PWD 'release\win-unpacked\resources\app'
-          $exePath = Join-Path $PWD 'release\win-unpacked\Metapi.exe'
-          Push-Location $appRoot
-          try {
-            & $exePath -e "require('./node_modules/better-sqlite3'); console.log('better-sqlite3 ok')"
-            if ($LASTEXITCODE -ne 0) {
-              exit $LASTEXITCODE
-            }
-          } finally {
-            Pop-Location
-          }
-
-      - name: Build desktop artifacts (Linux)
-        if: runner.os == 'Linux'
-        shell: bash
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          npm_config_cache: ${{ runner.temp }}/.npm
-          ELECTRON_CACHE: ${{ runner.temp }}/.cache/electron
-          ELECTRON_BUILDER_CACHE: ${{ runner.temp }}/.cache/electron-builder
-          ELECTRON_BUILDER_BINARIES_MIRROR: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-          npm_config_electron_builder_binaries_mirror: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-        run: |
-          set -euo pipefail
-          for attempt in 1 2; do
-            echo "Desktop build attempt ${attempt}/2"
-            if npm run package:desktop; then
-              break
-            fi
-            if [ "$attempt" -eq 2 ]; then
-              exit 1
-            fi
-            sleep 90
-          done
-
-      - name: Build desktop artifacts (macOS)
-        if: startsWith(matrix.platform, 'mac-')
-        shell: bash
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          npm_config_cache: ${{ runner.temp }}/.npm
-          ELECTRON_CACHE: ${{ runner.temp }}/.cache/electron
-          ELECTRON_BUILDER_CACHE: ${{ runner.temp }}/.cache/electron-builder
-          ELECTRON_BUILDER_BINARIES_MIRROR: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-          npm_config_electron_builder_binaries_mirror: https://github.com/electron-userland/electron-builder-binaries/releases/download/
-          APPLE_ID_INPUT: ${{ secrets.APPLE_ID }}
-          APPLE_APP_SPECIFIC_PASSWORD_INPUT: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
-          APPLE_TEAM_ID_INPUT: ${{ secrets.APPLE_TEAM_ID }}
-          PACKAGE_COMMAND: ${{ matrix.packageCommand }}
-        run: |
-          set -euo pipefail
-          if [ -n "${APPLE_ID_INPUT:-}" ]; then export APPLE_ID="$APPLE_ID_INPUT"; fi
-          if [ -n "${APPLE_APP_SPECIFIC_PASSWORD_INPUT:-}" ]; then export APPLE_APP_SPECIFIC_PASSWORD="$APPLE_APP_SPECIFIC_PASSWORD_INPUT"; fi
-          if [ -n "${APPLE_TEAM_ID_INPUT:-}" ]; then export APPLE_TEAM_ID="$APPLE_TEAM_ID_INPUT"; fi
-          for attempt in 1 2; do
-            echo "Desktop build (${PACKAGE_COMMAND}) attempt ${attempt}/2"
-            if eval "${PACKAGE_COMMAND}"; then
-              break
-            fi
-            if [ "$attempt" -eq 2 ]; then
-              exit 1
-            fi
-            sleep 90
-          done
-
-      - name: Verify packaged macOS architecture
-        if: startsWith(matrix.platform, 'mac-')
-        shell: bash
-        env:
-          expectedMacArch: ${{ matrix.expectedMacArch }}
-        run: |
-          node scripts/desktop/verifyMacArchitecture.mjs --release-dir release --expected-arch "$expectedMacArch"
-
-      - name: Upload desktop package
-        uses: actions/upload-artifact@v7
-        with:
-          name: metapi-desktop-${{ github.run_id }}-${{ matrix.artifactLabel }}
-          path: |
-            release/*.exe
-            release/*.dmg
-            release/*.zip
-            release/*.AppImage
-            release/*.deb
-            release/*.rpm
-            release/*.blockmap
-            release/latest*.yml
-            release/latest*.json
-            release/builder-debug.yml
-          if-no-files-found: error
-
-  publish-release:
-    name: Publish GitHub Release
-    needs: build-packages
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    if: startsWith(github.ref, 'refs/tags/')
-
-    steps:
-      - name: Download package artifacts
-        uses: actions/download-artifact@v8
-        with:
-          path: release-assets
-          merge-multiple: true
-
-      - name: Show release files
-        run: ls -la release-assets
-
-      - name: Upload Release Assets
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ github.ref_name }}
-          generate_release_notes: true
-          files: release-assets/*
-
-  publish-docker-arch:
-    name: Publish Docker Image (${{ matrix.arch }})
-    needs: build-packages
-    runs-on: ${{ matrix.runner }}
-    timeout-minutes: 45
-    if: startsWith(github.ref, 'refs/tags/')
-    env:
-      DOCKERHUB_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/metapi
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - arch: amd64
-            platform: linux/amd64
-            runner: ubuntu-latest
-          - arch: arm64
-            platform: linux/arm64
-            runner: ubuntu-24.04-arm
-          - arch: armv7
-            platform: linux/arm/v7
-            runner: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Ensure Docker Hub secrets are configured
-        run: |
-          if [ -z "${{ secrets.DOCKERHUB_USERNAME }}" ] || [ -z "${{ secrets.DOCKERHUB_TOKEN }}" ]; then
-            echo "Missing Docker Hub secrets: DOCKERHUB_USERNAME / DOCKERHUB_TOKEN"
-            exit 1
-          fi
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      - name: Set up QEMU
-        if: matrix.arch == 'armv7'
-        uses: docker/setup-qemu-action@v4
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Docker metadata
-        id: meta
-        uses: docker/metadata-action@v6
-        with:
-          images: |
-            ${{ env.DOCKERHUB_IMAGE }}
-            ghcr.io/${{ github.repository }}
-          tags: |
-            type=ref,event=tag
-            type=raw,value=latest
-
-      - name: Add architecture suffix to tags
-        id: arch-tags
-        shell: bash
-        run: |
-          set -euo pipefail
-          rm -f tags.txt
-          while IFS= read -r tag; do
-            [ -n "$tag" ] || continue
-            echo "${tag}-${{ matrix.arch }}" >> tags.txt
-          done <<< "${{ steps.meta.outputs.tags }}"
-          {
-            echo 'tags<<EOF'
-            cat tags.txt
-            echo 'EOF'
-          } >> "$GITHUB_OUTPUT"
-
-      - name: Build and push ${{ matrix.platform }} image
-        uses: docker/build-push-action@v7
-        with:
-          context: .
-          file: docker/Dockerfile
-          platforms: ${{ matrix.platform }}
-          push: true
-          tags: ${{ steps.arch-tags.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha,scope=release-${{ matrix.arch }}
-          cache-to: type=gha,mode=max,scope=release-${{ matrix.arch }}
-
-  publish-docker:
-    name: Publish Docker Manifests
-    needs: publish-docker-arch
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    if: startsWith(github.ref, 'refs/tags/')
-    env:
-      DOCKERHUB_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/metapi
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Ensure Docker Hub secrets are configured
-        run: |
-          if [ -z "${{ secrets.DOCKERHUB_USERNAME }}" ] || [ -z "${{ secrets.DOCKERHUB_TOKEN }}" ]; then
-            echo "Missing Docker Hub secrets: DOCKERHUB_USERNAME / DOCKERHUB_TOKEN"
-            exit 1
-          fi
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Docker metadata
-        id: meta
-        uses: docker/metadata-action@v6
-        with:
-          images: |
-            ${{ env.DOCKERHUB_IMAGE }}
-            ghcr.io/${{ github.repository }}
-          tags: |
-            type=ref,event=tag
-            type=raw,value=latest
-
-      - name: Create multi-arch manifests
-        shell: bash
-        run: |
-          set -euo pipefail
-          while IFS= read -r tag; do
-            [ -n "$tag" ] || continue
-            docker buildx imagetools create \
-              --tag "$tag" \
-              "${tag}-amd64" \
-              "${tag}-arm64" \
-              "${tag}-armv7"
-          done <<< "${{ steps.meta.outputs.tags }}"