diff --git a/.github/workflows/mac-menubar-ci.yml b/.github/workflows/mac-menubar-ci.yml
new file mode 100644
index 00000000..f7d9cc1c
--- /dev/null
+++ b/.github/workflows/mac-menubar-ci.yml
@@ -0,0 +1,34 @@
+name: macOS Menubar CI
+
+# The macOS menubar (mac/) ships from release-menubar.yml, which only packages the app.
+# Its Swift test suite (170+ tests covering the credential stores, Keychain cache,
+# serve connection, quota parsing) gated nothing until this workflow. Runs on every
+# PR touching mac/** so a red test fails the PR, the same way tests.yml does for the CLI.
+on:
+  push:
+    branches: [main]
+    paths:
+      - .github/workflows/mac-menubar-ci.yml
+      - mac/**
+  pull_request:
+    paths:
+      - .github/workflows/mac-menubar-ci.yml
+      - mac/**
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: macos-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v6
+      - name: Swift toolchain
+        run: swift --version
+      - name: Build
+        run: swift build --package-path mac
+      - name: Test
+        run: swift test --package-path mac
+      - name: Package (same script the release uses)
+        run: mac/Scripts/package-app.sh ci-smoke