Skip to content

#10670: Add AGENTS.md for AI coding assistant guidance - #126

Merged
ckm007 merged 6 commits into
mosip:developfrom
chetankh239:agents-md-doc
Aug 26, 2026
Merged

#10670: Add AGENTS.md for AI coding assistant guidance#126
ckm007 merged 6 commits into
mosip:developfrom
chetankh239:agents-md-doc

Conversation

@chetankh239

@chetankh239 chetankh239 commented Aug 10, 2026

Copy link
Copy Markdown

Addresses mosip/mosip-config#10670 — adds a root AGENTS.md covering the repo's three independent modules (mds-test-ui Angular app, mosip-device-service Spring Boot backend, mosip-device-reg Java CLI utilities), their real build/run commands, configuration/secrets locations, and contribution guidelines for AI agents and human contributors.

Summary by CodeRabbit

  • Documentation
    • Added comprehensive repository guidance covering project structure, technology stacks, development workflows, testing, builds, configuration, credentials, and contribution practices.

@coderabbitai

coderabbitai Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review Change Stack

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: f1f7f754-37b3-45a9-88d8-e1291310637a

Walkthrough

Added root-level AGENTS.md. It documents repository modules, technology stacks, commands, configuration, credential handling, workflows, project structure, and agent rules.

Changes

Repository Guidance

Layer / File(s) Summary
Repository guidance documentation
AGENTS.md
Documents module structure, build and test commands, runtime configuration, credential handling, project layout, development workflows, pull-request requirements, and agent rules.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Poem

Three modules, one clear guide,
Commands and rules stand side by side.
Keys stay guarded, builds stay clean,
Workflows mark the paths between.
Agents know each step and scene.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: adding AGENTS.md for AI coding assistant guidance.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@AGENTS.md`:
- Around line 105-108: Update the test documentation in AGENTS.md to describe
test support per module, removing the repository-wide claim that none of the
three modules has an automated test suite. Preserve the existing mds-test-ui npm
test and e2e commands, and accurately distinguish the Maven modules’ available
test targets from the UI module’s workflows.
- Around line 123-130: Update the AGENTS.md guidance for PrivateKey.pem,
PrivateKey_old.pem, and commonData.properties, including the corresponding
section around the later duplicate entries, to treat all committed credentials,
provider data, and private keys as exposed secrets: remove or redact the
sensitive values, direct contributors to managed local or environment-based
secret configuration, and require rotation or revocation of existing repository
credentials and keys.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 187b4895-9c33-4294-8c1d-92cb037301b8

📥 Commits

Reviewing files that changed from the base of the PR and between c4d9a83 and 17084e7.

📒 Files selected for processing (1)
  • AGENTS.md

Comment thread AGENTS.md Outdated
Comment thread AGENTS.md Outdated
Addresses mosip/mosip-config#10670 - provides a repository overview, tech stack, per-module build/test commands, configuration notes, and contribution guidelines for AI agents and contributors working in this repo.

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>
@chetankh239
chetankh239 changed the base branch from master to develop August 10, 2026 06:18
…wording

Correct the internal contradiction where AGENTS.md claimed no module has an
automated test suite while also documenting mds-test-ui's npm run test/e2e
commands (Karma/Protractor tests genuinely exist there; the Java modules
have no src/test sources). Also reword the committed-credentials guidance
(PrivateKey.pem/PrivateKey_old.pem, commonData.properties) so it doesn't
read as minimizing real, already-committed sandbox credentials.

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@AGENTS.md`:
- Around line 177-182: Update the workflow guidance in AGENTS.md to scope the
module build/test requirement to module source or configuration changes,
explicitly excluding repository-root documentation such as AGENTS.md. For
root-only documentation edits, require Markdown and command-reference validation
instead of running an unrelated module build, and apply the same exception to
the repeated guidance referenced elsewhere.
- Around line 119-121: Update the AGENTS.md documentation entry for
mosip-device-service so the <pwd> placeholder is not described as the database
password. Identify the exact database property from bootstrap.properties, or
explicitly describe <pwd> as the IDA authentication secret, while preserving the
surrounding endpoint and configuration guidance.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 233494a6-7773-4da8-8812-793ebdf4b811

📥 Commits

Reviewing files that changed from the base of the PR and between 17084e7 and 8830890.

📒 Files selected for processing (1)
  • AGENTS.md

Comment thread AGENTS.md Outdated
Comment thread AGENTS.md Outdated
- Treat the committed PrivateKey.pem/PrivateKey_old.pem and
  commonData.properties credentials as compromised (public repo),
  not just sandbox fixtures — recommend rotation and a managed
  secret store instead of a tracked file.
- Correctly attribute the two separate <pwd> placeholders:
  ida.auth.secretkey in application.properties vs.
  javax.persistence.jdbc.password (the actual DB password) in
  bootstrap.properties.
- Add a repository-root documentation exception to the
  per-module-build workflow rule, since AGENTS.md itself covers all
  three modules and has no module build to run.

Addresses review comments on mosip#126

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>
@chetankh239

Copy link
Copy Markdown
Author

Addressed the remaining CodeRabbit findings in the latest commit (test-suite statement was already fixed earlier).

⚠️ Confirmed while verifying this: mosip-device-service/data/keys/PrivateKey.pem/PrivateKey_old.pem (full RSA private keys) and mosip-device-reg/DeviceRegisterAndDeRegister/src/main/resources/commonData.properties (plaintext admin_password/partner_password) are already committed on develop, not introduced by this PR. Since this is a public repo, treat these as compromised — worth rotating and moving to a managed secret store / environment config, separate from this AGENTS.md change.

Comment thread AGENTS.md Outdated
Fix wrong default port (8080 -> 8081) for mosip-device-service and the
UI's base_url, name the TestManagerController mounting path explicitly,
correct MDS to MOSIP Device Service, point branch/PR guidance at
develop (the active integration branch, confirmed via recent PR
targets) instead of master, list rp-partner.p12 and the live-looking
application.properties values in the secrets inventory, and correct
the dbFiles description to multiple configs per environment.

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>
Shorten the PrivateKey.pem/rp-partner.p12 and commonData.properties
Configuration bullets to a pointer instead of repeating the full
"treat as compromised, rotate, flag to maintainer" explanation
already stated in Repository-Specific Considerations.

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>
Consolidate facts restated 3-4x across sections (master-vs-develop
branch guidance, no-CI/no-Dockerfile fact, DeviceRegister vs
DeviceRegisterAndDeRegister confusion note, committed-credentials
warning) down to one clear statement each, and tighten prose.

264 -> 86 lines. Every command, path, port number, and safety-critical
fact kept, just no restated explanations.

Signed-off-by: Chetan Kumar Hirematha <chetankumar.h.239@gmail.com>
@ckm007
ckm007 merged commit dcd3f21 into mosip:develop Aug 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants