Add PR quality gate workflow and AGENTS.md

[Copilot]

Adds a per-PR CI quality gate and a root-level AGENTS.md for coding agent context. No existing files modified.

PR Quality Gate (.github/workflows/pr-quality-gate.yml)

Triggers on pull_request targeting main and workflow_dispatch. Uses pull_request (not pull_request_target), no secrets, no docker login, no GHCR push.

Jobs:

• Rust Fast Gate — frontend build + eslint, cargo fmt --check, clippy, cargo test
• Rust Integration Tests (sqlite / postgres) — cargo test --tests with DATABASE_BACKEND set per backend; postgres uses postgres:18-alpine service container matching integration-tests.yml
• Build Docker Image — builds from PR commit with push: false, load: true, saves tarball as artifact for downstream e2e jobs
• E2E Tests (sqlite / postgres) — loads image artifact, runs integration_test.sh, concurrent_test.sh 100, SIGTERM/SIGINT persistence tests; all copied verbatim from integration-tests.yml

Clippy scoping: cargo clippy --all-features -- -D warnings -A clippy::too_many_arguments — --all-targets omitted due to pre-existing violations in test files; too_many_arguments allowed for existing storage functions (8-9 params).

Branch protection check names:
Rust Fast Gate, Rust Integration Tests (sqlite), Rust Integration Tests (postgres), Build Docker Image, E2E Tests (sqlite), E2E Tests (postgres)

Performance benchmarks explicitly excluded — no cargo bench, no benchmark scripts invoked.

AGENTS.md

Covers project overview, repo layout, prerequisites, copy-pasteable commands (frontend, rust, e2e), CI workflow map, PR instructions, security considerations, and troubleshooting. Consistent with actual scripts and CI steps.

Local Verification

All workflow steps were executed locally and passed: frontend build/lint, fmt, clippy, cargo test, integration tests (both backends), docker build, full e2e suite (both backends) including SIGTERM/SIGINT persistence tests.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• example.com
  • Triggering command: /usr/bin/curl curl -s -o /dev/null -L http://localhost:3000/rapid-1 4-REDACTED-linux-gnu/lib /rustc ut/7510312e0f5aagrep ut/7510312e0f5aa-qE ut/7510312e0f5aa(create|run) /rustc ut/7�� ut/7510312e0f5aa-pie ut/7510312e0f5aa-fuse-ld=lld u-ansi-term-0.50.3/src/lib.rs ut/30a9a10d3f989grep ut/f8e4fd781484b-q ut/001247bc65c2f"short_code":.*"rapid-8" ut/65fbbb68d007b/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o (dns block)
  • Triggering command: /usr/bin/curl curl -s -o /dev/null -L http://localhost:3000/rapid-1 ut/ebcd52e9457b6--eh-frame-hdr /rustc ut/ebcd52e9457b6grep ut/ebcd52e9457b6-q ut/ebcd52e9457b6-- /rustc ut/e�� ut/ebcd52e9457b6-pie ut/ebcd52e9457b6-o ana-time-zone-0.1.65/src/lib.rs ut/ebcd52e9457b6curl ut/ebcd52e9457b6-s ut/ebcd52e9457b6-X ut/ebcd52e9457b6POST (dns block)
  • Triggering command: /usr/bin/curl curl -s -o /dev/null -L http://localhost:3000/rapid-1 ut/ebcd52e9457b6-plugin-opt=-fresolution=/tmp/ccORXu2W.res /rustc ut/ebcd52e9457b6rm ut/ebcd52e9457b6-rf ut/ebcd52e9457b6/tmp/runc-shim-error.log /rustc ut/e�� ut/ebcd52e9457b6-dynamic-linker ut/ebcd52e9457b6/lib64/ld-linux-x86-64.so.2 atchit-0.8.4/src/lib.rs ut/ebcd52e9457b6grep ut/ebcd52e9457b6-q ut/ebcd52e9457b6"short_code" ut/ebcd52e9457b6/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.