chore(tooling): enforce GitHub agent workflow

[tataihono]

Resolves #1

Summary

Enforce mandatory GitHub workflow for agents: issue first, branch, incremental conventional commits, PR, checks pass. Adds AGENTS.md workflow section, gh-workflow.mdc rule, commitlint+husky for conventional commits, and CI job to validate PR commits.

Contracts Changed

• yes
• no

Regeneration Required

• yes
• no

Validation

• Contracts validated
• Generated code verified (no manual edits)
• Tests and build passed
• Terraform plan reviewed (if infra change)

[coderabbitai]

Warning

Rate limit exceeded

@tataihono has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 2 minutes and 4 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

Walkthrough

Adds mandatory workflow documentation and enforces conventional commit messages via Husky/Commitlint locally and a new GitHub Actions "commits" job that validates PR commit messages; updates ESLint config and package scripts for tooling setup.

Changes

Cohort / File(s)	Summary
Workflow docs .cursor/rules/gh-workflow.mdc, AGENTS.md	New mandatory GitHub workflow specification and AGENTS.md subsection describing issue-first flow, branch/commit/PR rules, and required PR metadata.
Commit message enforcement commitlint.config.js, .husky/commit-msg, package.json	Adds commitlint config, Husky commit-msg hook, prepare script, and devDependencies to enforce conventional commits locally. Check hook path and installation step.
CI validation .github/workflows/ci.yml	Introduces a "commits" job on pull_request that runs commitlint between PR base and head SHAs (sets up pnpm and Node.js). Verify cache/fetch-depth and pnpm install flags.
Frontend tooling apps/web/eslint.config.mjs, apps/web/package.json	Adds an ES module ESLint config for Next and switches lint script to run eslint . with new ESLint devDependencies. Confirm integration with existing linting pipeline.

Sequence Diagram(s)

sequenceDiagram
  participant Dev as Developer
  participant Issues as Issue Tracker
  participant Git as Local Git + Husky
  participant Commitlint as commitlint
  participant GH as GitHub (PR + Actions)

  Dev->>Issues: Create structured issue (bounded context, outcome, impacted folders)
  Dev->>Git: Create branch (name per rules)
  Dev->>Git: Make atomic commits
  Git->>Commitlint: commit-msg hook runs commitlint
  Commitlint-->>Git: Accept/Reject commit
  Dev->>GH: Push branch and open PR (template, "Resolves #")
  GH->>GH: Trigger workflows incl. "commits" job
  GH->>Commitlint: Run commitlint across PR commits
  Commitlint-->>GH: Pass/Fail job
  GH-->>Dev: CI results (fix/re-run if failures)

Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

🚥 Pre-merge checks | ✅ 5 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Out of Scope Changes check	⚠️ Warning	Changes to apps/web/eslint.config.mjs and apps/web/package.json for ESLint setup are not part of the linked issue #1 objectives on enforcing agent workflow.	Remove or justify ESLint configuration changes in apps/web/, or create a separate issue to track this unrelated tooling enhancement.

✅ Passed checks (5 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	All coding requirements from issue #1 are met: AGENTS.md workflow section added, gh-workflow.mdc rule created, commitlint+husky configured, and CI job added to validate commits.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Merge Conflict Detection	✅ Passed	✅ No merge conflicts detected when merging into main
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title 'chore(tooling): enforce GitHub agent workflow' accurately summarizes the main changes, which include adding workflow documentation, commitlint/Husky tooling, and CI validation for conventional commits.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/1-enforce-agent-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@AGENTS.md`:
- Line 19: The markdownlint MD038 warning is caused by a trailing space inside
the code span "`[Context] `"; remove the trailing space inside the backticks so
the prefix becomes "`[Context]`" or, if the space is intentional, keep the
current backticks but add an explicit note immediately after the code span
explaining why the trailing space is required (e.g., "Note: trailing space after
the prefix is intentional to separate from title text"). Update the AGENTS.md
text where the prefix appears to use one of these fixes and ensure any examples
or title instructions reference the corrected code span.

🧹 Nitpick comments (1)

.husky/commit-msg (1)

1-1: Quote $1 to prevent word splitting.

Shell best practice — if the temp file path ever contains spaces, this would break.

Proposed fix

-pnpm exec commitlint --edit $1
+pnpm exec commitlint --edit "$1"

[coderabbitai]

🧹 Nitpick comments (1)

apps/web/package.json (1)

18-22: Consider adding @types/react-dom.

react-dom is listed as a dependency (Line 16), but only @types/react is included in devDependencies. Adding @types/react-dom would provide proper type coverage for DOM-related React APIs.

Proposed fix

   "devDependencies": {
     "@eslint/eslintrc": "^3.0.0",
     "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
     "eslint": "^9.0.0",
     "eslint-config-next": "^15.0.0"
   }

[tataihono]

PR feedback resolution

Workflow permissions (github-advanced-security): Fixed. Added permissions: issues: write to issue-labels.yml.

Quote $1 in .husky/commit-msg (CodeRabbit): Fixed. Changed to pnpm exec commitlint --edit "$1" to prevent word splitting.

@types/react-dom (CodeRabbit): Fixed. Added to apps/web devDependencies for proper type coverage.

AGENTS.md MD038 / [Context] (CodeRabbit): Obsolete—template now uses type(scope): format. No action needed.