Implement DDD architecture with domain layer, use cases, and infrastructure

.github/workflows/ci.yml

@@ -0,0 +1,66 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - "**"
+  pull_request:
+    branches:
+      - "**"
+
+permissions:
+  contents: read
+
+jobs:
+  build-test:
+    name: Build, lint and test
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - ubuntu-latest
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install egui system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libgl1-mesa-dev \
+            libegl1-mesa-dev \
+            libssl-dev \
+            libx11-dev \
+            libfontconfig1-dev \
+            libfreetype6-dev \
+            pkg-config
+
+      - name: Install Rust stable toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy, rustfmt
+
+      - name: Cache cargo registry, git index and target/
+        uses: Swatinem/rust-cache@v2
+
+      - name: Check formatting
+        run: cargo fmt --all -- --check
+
+      # Workspace-wide clippy mirrors the per-target gate the
+      # contributor workflow uses; `--all-targets` covers benches too
+      # so domain-type drift breaks CI before it reaches a release.
+      - name: Run clippy
+        run: cargo clippy --all-targets -- -D warnings
+
+      - name: Build all targets
+        run: cargo build --all-targets --locked
+
+      - name: Run tests
+        run: cargo test --all-targets --locked
+
+      # Bench-compile gate: full runs are manual (recorded baseline is
+      # in `benches/BASELINE.md`) but the benches must keep compiling
+      # so they don't rot.
+      - name: Compile benchmarks (no run)
+        run: cargo bench --no-run --locked --bench http_performance --bench ui_performance

.github/workflows/release.yml

@@ -0,0 +1,202 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+permissions:
+  contents: write
+
+jobs:
+  linux-x86_64:
+    name: Build linux-x86_64
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install egui system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libgl1-mesa-dev \
+            libegl1-mesa-dev \
+            libssl-dev \
+            libx11-dev \
+            libfontconfig1-dev \
+            libfreetype6-dev \
+            pkg-config
+
+      - name: Install Rust stable toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo registry, git index and target/
+        uses: Swatinem/rust-cache@v2
+        with:
+          key: release-linux-x86_64
+
+      - name: Build release binary
+        run: cargo build --release --locked --bin requester
+
+      # ADR-0013: the release profile sets `strip = true`, so the
+      # shipped binary has no debug info. Split the debug bundle out
+      # before stripping so panics from a released binary can still be
+      # symbolicated. `objcopy --only-keep-debug` produces a sibling
+      # file containing just the .debug_* sections.
+      - name: Extract debug symbols
+        run: |
+          objcopy --only-keep-debug target/release/requester target/release/requester.debug
+          strip target/release/requester
+          objcopy --add-gnu-debuglink=target/release/requester.debug target/release/requester
+
+      - name: Upload binary artefact
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-linux-x86_64
+          path: target/release/requester
+          if-no-files-found: error
+
+      - name: Upload debug-symbols artefact
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-linux-x86_64-debug
+          path: target/release/requester.debug
+          if-no-files-found: error
+
+  macos-aarch64:
+    name: Build macos-aarch64
+    runs-on: macos-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Rust stable toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: aarch64-apple-darwin
+
+      - name: Cache cargo registry, git index and target/
+        uses: Swatinem/rust-cache@v2
+        with:
+          key: release-macos-aarch64
+
+      - name: Build release binary
+        run: cargo build --release --locked --bin requester --target aarch64-apple-darwin
+
+      # ADR-0013: dsymutil produces a `.dSYM` bundle of debug info we
+      # can ship alongside the stripped binary so crash logs can be
+      # symbolicated post-release.
+      - name: Extract dSYM and strip binary
+        run: |
+          dsymutil target/aarch64-apple-darwin/release/requester \
+                   -o target/aarch64-apple-darwin/release/requester.dSYM
+          strip target/aarch64-apple-darwin/release/requester
+
+      - name: Upload binary artefact
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-macos-aarch64
+          path: target/aarch64-apple-darwin/release/requester
+          if-no-files-found: error
+
+      - name: Upload dSYM bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-macos-aarch64-dSYM
+          path: target/aarch64-apple-darwin/release/requester.dSYM
+          if-no-files-found: error
+
+  windows-x86_64:
+    name: Build windows-x86_64
+    runs-on: windows-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install Rust stable toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo registry, git index and target/
+        uses: Swatinem/rust-cache@v2
+        with:
+          key: release-windows-x86_64
+
+      - name: Build release binary
+        run: cargo build --release --locked --bin requester
+
+      - name: Upload binary artefact
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-windows-x86_64
+          path: target/release/requester.exe
+          if-no-files-found: error
+
+      # ADR-0013: cargo emits the MSVC `.pdb` alongside the binary by
+      # default; the `strip = true` profile setting strips the binary
+      # but does not delete the pdb. Upload it so released panics can
+      # be symbolicated against the matching build.
+      - name: Upload PDB symbols
+        uses: actions/upload-artifact@v4
+        with:
+          name: requester-windows-x86_64-pdb
+          path: target/release/requester.pdb
+          if-no-files-found: error
+
+  release:
+    name: Publish GitHub Release
+    needs:
+      - linux-x86_64
+      - macos-aarch64
+      - windows-x86_64
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Download all artefacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artefacts
+
+      - name: Stage release assets
+        run: |
+          mkdir -p release-assets
+          cp artefacts/requester-linux-x86_64/requester release-assets/requester-linux-x86_64
+          cp artefacts/requester-linux-x86_64-debug/requester.debug release-assets/requester-linux-x86_64.debug
+          cp artefacts/requester-macos-aarch64/requester release-assets/requester-macos-aarch64
+          # `requester.dSYM` is a directory bundle; tar it for upload.
+          tar -C artefacts/requester-macos-aarch64-dSYM -czf \
+              release-assets/requester-macos-aarch64.dSYM.tar.gz .
+          cp artefacts/requester-windows-x86_64/requester.exe release-assets/requester-windows-x86_64.exe
+          cp artefacts/requester-windows-x86_64-pdb/requester.pdb release-assets/requester-windows-x86_64.pdb
+          ls -l release-assets
+
+      - name: Create draft release with binaries
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: true
+          files: release-assets/*
+          fail_on_unmatched_files: true
+          body: |
+            ## Requester ${{ github.ref_name }}
+
+            Binaries for Linux x86_64, macOS aarch64, and Windows x86_64.
+
+            ### Symbolicating panics from a released binary
+
+            The shipped binaries are stripped of debug info (per
+            [ADR-0013](https://github.com/${{ github.repository }}/blob/${{ github.ref_name }}/docs/adr/0013-build-and-release-profiles.md))
+            to keep the download small. The matching debug-symbol
+            bundles are attached alongside each platform binary:
+
+            - `requester-linux-x86_64.debug` — split debug-info file
+              produced by `objcopy --only-keep-debug`. Pair with
+              `gdb` / `addr2line` / `lldb` for line-level traces.
+            - `requester-macos-aarch64.dSYM.tar.gz` — extract and pair
+              with `lldb` / `atos` / `symbolicatecrash`.
+            - `requester-windows-x86_64.pdb` — MSVC PDB. Pair with
+              `WinDbg` / Visual Studio.
+
+            Match the symbol file against the exact binary version the
+            crash came from — the build IDs must agree.

.gitignore

@@ -1,4 +1,7 @@
 
+# Claude Code harness internals (worktrees for isolated sub-agents, etc.)
+.claude/worktrees/
+
 # Claude Flow generated files
 .claude/settings.local.json
 .mcp.json
@@ -27,3 +30,7 @@ claude-flow
 hive-mind-prompt-*.txt
 node_modules
 target/
+
+# `cargo test --instrument-coverage` (and some toolchains by default)
+# scatter these at the workspace root. Don't ever commit them.
+*.profraw