feat #3: Add d-lmdb-server — Docker image, HTTP API, and 3-node HA compose cluster

.dockerignore

@@ -0,0 +1,14 @@
+target/
+.git/
+.zed/
+.DS_Store
+data/
+db/
+logs/
+*.mdb
+d-lmdb-server/config.toml
+
+# The rust:1.89-slim-bookworm base image already IS the pinned version — this
+# file's only effect inside the build is making rustup fetch clippy/rustfmt
+# (unused for `cargo build`) on every build.
+rust-toolchain.toml

.github/workflows/docker-release.yml

@@ -0,0 +1,119 @@
+name: Docker Release
+
+# Triggered by creating a GitHub Release, not every push to main.
+on:
+  release:
+    types: [created]
+
+permissions:
+  contents: read
+
+env:
+  IMAGE: deventlab/d-lmdb
+
+jobs:
+  # Build, smoke-test, then push by digest — per platform. arm64 runs
+  # under QEMU: verifies correctness, not real hardware timing.
+  build-test-push:
+    name: Build, test, push (${{ matrix.platform }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        platform: [linux/amd64, linux/arm64]
+    steps:
+      - name: Set platform tag for artifact naming
+        run: |
+          platform=${{ matrix.platform }}
+          echo "PLATFORM_PAIR=${platform//\//-}" >> "$GITHUB_ENV"
+
+      - uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build image for this platform (local only, not pushed yet)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: ${{ matrix.platform }}
+          tags: d-lmdb-server:compose
+          load: true
+
+      - name: Run 3-node smoke test against the freshly built image
+        run: DLMDB_SKIP_BUILD=1 ./compose/smoke-test.sh
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
+      - name: Push tested image by digest (no rebuild)
+        id: push
+        run: |
+          TARGET="docker.io/${{ env.IMAGE }}:${{ github.sha }}"
+          docker tag d-lmdb-server:compose "$TARGET"
+          docker push "$TARGET"
+          DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' "$TARGET" | grep -o 'sha256:[a-f0-9]\{64\}')
+          echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          DIGEST="${{ steps.push.outputs.digest }}"
+          touch "/tmp/digests/${DIGEST#sha256:}"
+
+      - name: Upload digest
+        uses: actions/upload-artifact@v4
+        with:
+          name: digests-${{ env.PLATFORM_PAIR }}
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  # Only runs if every platform above succeeded.
+  merge:
+    name: Merge multi-platform manifest
+    runs-on: ubuntu-latest
+    needs: build-test-push
+    steps:
+      - name: Strip 'v' prefix from release tag
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          printf 'STRIPPED_VERSION=%s\n' "${RELEASE_TAG#v}" >> "$GITHUB_ENV"
+
+      - name: Download digests
+        uses: actions/download-artifact@v4
+        with:
+          path: /tmp/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
+      - name: Create and push manifest list
+        working-directory: /tmp/digests
+        env:
+          IMAGE: ${{ env.IMAGE }}
+        run: |
+          docker buildx imagetools create \
+            -t "docker.io/${IMAGE}:${STRIPPED_VERSION}" \
+            -t "docker.io/${IMAGE}:latest" \
+            $(printf 'docker.io/%s@sha256:%s ' "${IMAGE}" *)
+
+      - name: Verify manifest
+        env:
+          IMAGE: ${{ env.IMAGE }}
+        run: docker buildx imagetools inspect "docker.io/${IMAGE}:${STRIPPED_VERSION}"

.gitignore

@@ -29,9 +29,16 @@ target
 /logs/
 **/*.mdb
 
-# OS / editor
+# OS / editor / local AI-agent tooling config
 .DS_Store
 .zed/
+.agents/
 
-# Library crate: consumers resolve their own dependency versions.
-Cargo.lock
+# Workspace now includes d-lmdb-server, a deployable binary — commit Cargo.lock
+# for reproducible builds. (d-lmdb the library still doesn't need one committed
+# on its own, but Cargo workspaces share a single lockfile at the root.)
+
+# Developer's real d-lmdb-server config, copied from config.example.toml — may
+# contain machine-local paths, gets regenerated per-developer, never committed.
+/d-lmdb-server/config.toml
+.envrc