From d535c2d810d62a72d3a1b09a790514a08e48e822 Mon Sep 17 00:00:00 2001
From: Daniel <braininblack@gmail.com>
Date: Wed, 15 Jul 2026 14:02:10 +0200
Subject: [PATCH] CI hardening

---
 .github/workflows/ci.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 89d1ee8..7645377 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,3 +34,17 @@ jobs:
         run: npm test
       - name: Build (multi-file + single-file)
         run: npm run build
+
+  # Stable required-status gate. Branch protection requires only this job, so a
+  # Node-matrix bump or a rename of `build` never invalidates the required check.
+  ci-success:
+    needs: [build]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Verify the build job succeeded
+        run: |
+          if [ "${{ needs.build.result }}" != "success" ]; then
+            echo "::error::build job did not succeed (result: ${{ needs.build.result }})"
+            exit 1
+          fi