diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 9276651..b8244d2 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -38,14 +38,18 @@ jobs:
       - name: 构建前端（node 容器）
         run: |
           set -e
+          cleanup() { docker rm -f frontbuild 2>/dev/null || true; }
+          trap cleanup EXIT
           docker rm -f frontbuild 2>/dev/null || true
           docker run -d --name frontbuild -w /build node:20 sleep 3600
           docker cp "${PWD}/." frontbuild:/build/
+          # NODE_OPTIONS 堆上限：CI 宿主机内存有限，不设上限会被内核 OOM 杀掉（exit 137）
           docker exec frontbuild sh -c '
             set -e
             cd /build
             if [ -f .npmrc ]; then sed -i "/SASS_BINARY_PATH/d" .npmrc; fi
-            npm ci
+            export NODE_OPTIONS="--max-old-space-size=2048"
+            npm ci --no-audit --no-fund
             npm run build
           '
           echo "=== dist 产物 ==="