@@ -40,8 +40,9 @@ config/tts-cache/
 # 构建阶段运行单元/集成测试；最终 standalone 镜像不复制测试目录
 coverage
 
-# E2E 与外部测试、性能脚本
-e2e
+# 保留单元测试复用的 E2E 支持模块，排除浏览器用例与测试产物
+e2e/*
+!e2e/support
 playwright.config.ts
 playwright-report
 test-results
 
@@ -167,6 +167,39 @@ jobs:
       - name: Build application
         run: npm run build
 
+  docker-build-check:
+    name: Docker Build Check (${{ matrix.arch }})
+    needs: publication-check
+    if: "!startsWith(github.ref, 'refs/tags/')"
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: amd64
+            platform: linux/amd64
+            os: ubuntu-24.04
+          - arch: arm64
+            platform: linux/arm64
+            os: ubuntu-24.04-arm
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+
+      # 使用正式 Dockerfile 验证构建上下文、Alpine 测试及生产构建
+      - name: Build Docker image without publishing
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+        with:
+          context: .
+          platforms: ${{ matrix.platform }}
+          push: false
+          cache-from: type=gha,scope=docker-${{ matrix.arch }}
+          cache-to: type=gha,scope=docker-${{ matrix.arch }},mode=max
+
   e2e-test:
     runs-on: ubuntu-latest
     name: E2E Tests
 
@@ -505,6 +505,8 @@ npm run test:e2e            # Isolated app, migrated test database and local AI
 bash scripts/ci.sh          # Full CI (Node.js 22+, Python 3, includes production build)
 ```
 
+GitHub CI for `main` and pull requests also uses the production Dockerfile to run tests and production builds on native amd64 and arm64 runners, without publishing images. `.dockerignore` keeps the `e2e/support` modules reused by unit tests while excluding browser test cases and test output from the build context.
+
 The E2E launcher copies the app and dependencies into a system temporary directory, applies migrations, creates test accounts and builds the production app. Browser tests use fixed responses from a local AI service, with separate configuration and a temporary SQLite database. Reports are printed at the end. Filter cases with `npm run test:e2e -- --grep E2E-M01`. See the [E2E design and acceptance criteria](doc/E2E_MOCK_AI_TEST_DESIGN.md).
 
 After changing `prisma/schema.prisma`, create a migration with `npx prisma migrate dev --name <name>` and commit it; migrations must be compatible with existing data. See [AGENTS.md](AGENTS.md) for more development conventions.
 
@@ -503,6 +503,8 @@ npm run test:e2e            # 隔离应用、正式迁移测试库与本地模
 bash scripts/ci.sh          # 完整 CI（Node.js 22+、Python 3，含生产构建）
 ```
 
+GitHub 的 `main` 与 PR CI 还会使用正式 Dockerfile，在原生 amd64、arm64 环境中验证镜像内的测试和生产构建，检查通过后不推送镜像。`.dockerignore` 保留单元测试复用的 `e2e/support` 模块；浏览器用例和测试产物仍排除在构建上下文外。
+
 E2E 启动器会在系统临时目录复制应用和依赖、执行正式迁移、生成测试账号并完成生产构建，随后使用本地固定模型响应运行浏览器用例。不会读取现有应用配置、复用开发服务器或访问外部模型。报告路径在命令结束时输出；可用 `npm run test:e2e -- --grep E2E-M01` 筛选用例。用例与运行边界见 [E2E 设计与验收](doc/E2E_MOCK_AI_TEST_DESIGN.md)。
 
 修改 `prisma/schema.prisma` 后使用 `npx prisma migrate dev --name <名称>` 生成正式迁移并提交；迁移须兼容已有数据。更多开发约定见 [AGENTS.md](AGENTS.md)。
 
@@ -43,6 +43,8 @@ npm run test:e2e
 
 CI 会运行 `npm run lint`，出现任何 ESLint 错误或警告都会失败。
 
+`main` 与 PR CI 还会在原生 amd64、arm64 环境中使用正式 Dockerfile 完整构建镜像，验证 Alpine 内的 Vitest、脚本语法检查、数据库初始化与生产构建，检查过程不推送镜像。`.dockerignore` 须保留单元测试复用的 `e2e/support` 模块，浏览器用例及测试产物仍排除在构建上下文外。
+
 `npm run test:coverage` 统计 `src/lib` 与 `src/app/api` 的测试覆盖率，低于 `vitest.config.mts` 中的阈值时失败；CI 会在任务摘要中显示覆盖率并上传报告。
 
 `npm test` 运行全部 Vitest 测试。E2E 的环境要求与启动方式以仓库中的 [`playwright.config.ts`](https://github.com/margrop/wrong-notebook/blob/main/playwright.config.ts) 为准。
 
@@ -43,6 +43,8 @@ Run `npm run test:e2e` to prepare an isolated production app, a migrated tempora
 
 CI runs `npm run lint` and fails on any ESLint error or warning.
 
+CI for `main` and pull requests also builds the complete image with the production Dockerfile on native amd64 and arm64 runners, covering Vitest in Alpine, script syntax checks, database initialization and the production build without publishing images. `.dockerignore` must keep the `e2e/support` modules reused by unit tests while excluding browser test cases and test output from the build context.
+
 `npm run test:coverage` measures test coverage of `src/lib` and `src/app/api` and fails below the thresholds in `vitest.config.mts`; CI shows the coverage in the job summary and uploads the report.
 
 `npm test` runs all Vitest tests. The E2E environment and startup are defined in the repository's [`playwright.config.ts`](https://github.com/margrop/wrong-notebook/blob/main/playwright.config.ts).