Coderabbit

---
name: coderabbit
description: "AI-powered automated code review, PR summarization, and interactive developer feedback / Review kode otomatis berbasis AI, ringkasan PR, dan umpan balik developer interaktif."
author: "vibes-plug-swarm"
---

# CodeRabbit (2026 Edition — CodeRabbit 2.x)

[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)

---

<a name="english"></a>
## English

### Orchestration & Integration
Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.

### Description
Expert guide for configuring and leveraging **CodeRabbit 2.x** — AI-powered automated code review, pull request summarization, and interactive developer feedback. Covers configuration, custom review rules, integration with CI/CD, and agentic review mode.

### Trigger Conditions
- Setting up CodeRabbit on a GitHub or GitLab repository.
- Configuring custom review rules for your tech stack.
- Using CodeRabbit's agentic mode for deep architectural reviews.
- Integrating CodeRabbit feedback into CI/CD quality gates.
- Writing CodeRabbit-compatible custom instructions in `.coderabbit.yaml`.

### CodeRabbit 2.x Key Features

| Feature | Description |
|---|---|
| **PR Summary** | Auto-generates structured PR description with walkthrough |
| **Line-by-line Review** | Inline comments with specific fix suggestions |
| **Agentic Review** | Deep analysis spanning multiple files for architectural issues |
| **Learnable Rules** | Learns from review dismissals and approvals over time |
| **CI Integration** | Blocks PR merge if critical issues found |
| **Chat Mode** | Ask CodeRabbit questions about the PR in review thread |

### Configuration (`.coderabbit.yaml`)

```yaml
# .coderabbit.yaml — place in repository root
version: "2"
language: "en-US"
tone_instructions: "Be concise and direct. Prioritize security and performance issues."

reviews:
  auto_review:
    enabled: true
    drafts: false           # Don't review draft PRs
    base_branches: ["main", "develop"]

  profile: "chill"          # assertive | chill | default
  request_changes_workflow: false
  high_level_summary: true
  commit_message_instructions: "Use Conventional Commits format: feat/fix/chore/docs"

  # Ignore paths from review
  path_filters:
    - "!**/*.lock"
    - "!**/migrations/**"
    - "!**/generated/**"
    - "!**/__snapshots__/**"

  # Stack-specific review instructions
  path_instructions:
    - path: "apps/api/**"
      instructions: |
        - Check for missing input validation (Zod schemas required on all handlers)
        - Flag any database queries without proper RLS consideration
        - Ensure all async functions have try/catch or error boundaries
        - Check for N+1 query patterns (missing .include() or DataLoader usage)
    - path: "apps/web/**"
      instructions: |
        - Check for missing `key` props in .map() renders
        - Flag `useEffect` without proper cleanup functions
        - Check for missing `alt` attributes on images
        - Verify Server Actions are properly validated with Zod
    - path: "apps/admin/**"
      instructions: |
        - All admin routes must verify isSuperAdmin === true
        - Flag any direct DB access without service role client
        - Check for proper audit logging on destructive operations

  # Custom review rules for the entire codebase
  instructions: |
    Review with these priorities:
    1. SECURITY: SQL injection, XSS, auth bypass, exposed secrets
    2. CORRECTNESS: Logic bugs, off-by-one errors, type unsafety
    3. PERFORMANCE: N+1 queries, unnecessary re-renders, bundle size
    4. MAINTAINABILITY: Code duplication, naming, SOLID violations
    5. STYLE: Only comment if it's a significant clarity issue

# PR summary format
summary:
  auto_title_placeholder: "🤖 AI Title"
  description: |-
    ## Summary
    <!-- Concise description of what changed -->
    
    ## Changes
    <!-- Structured list by area -->
    
    ## Testing
    <!-- What was tested -->

# Enable chat for interactive Q&A
chat:
  auto_reply: true
```

### Agentic Review Mode (CodeRabbit 2.x)
CodeRabbit 2.x introduces **agentic review** — deep analysis that can read multiple files, run tools, and understand architectural context:

```
# Trigger agentic review in PR comment:
@coderabbitai review

# Ask specific questions:
@coderabbitai What is the security impact of changes in apps/api/src/routes/users.ts?
@coderabbitai Can you generate a test for the createWorkspace function?
@coderabbitai Is there a N+1 query issue in this PR?
@coderabbitai Summarize the architecture changes in this PR
```

### CI/CD Integration (GitHub Actions)
```yaml
# .github/workflows/pr-quality.yml
name: PR Quality Gate

on: [pull_request]

jobs:
  coderabbit-review:
    runs-on: ubuntu-latest
    steps:
      - name: Wait for CodeRabbit Review
        uses: coderabbit-ai/wait-for-review@v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          min-approvals: 1
          block-on-critical: true  # Block merge if critical issues found
```

### CodeRabbit vs Manual Review — Best Practices
- **CodeRabbit first**: Let it run before human reviewers — catches the obvious issues.
- **Human focus**: After CodeRabbit, humans focus on business logic, architecture intent, and product decisions.
- **Teach it**: Dismiss false positives with an explanation — CodeRabbit learns your patterns.
- **Custom instructions**: Invest time in `path_instructions` for your specific stack — dramatically improves relevance.

---

<a name="bahasa-indonesia"></a>
## Bahasa Indonesia

### Integrasi Orkestrasi
Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.

### Deskripsi
Panduan ahli untuk mengonfigurasi dan memanfaatkan **CodeRabbit 2.x** — review kode otomatis bertenaga AI, ringkasan pull request, dan umpan balik developer interaktif. Mencakup konfigurasi, aturan review kustom, integrasi dengan CI/CD, dan mode review agentik.

### Kondisi Pemicu
- Menyiapkan CodeRabbit di repositori GitHub atau GitLab.
- Mengonfigurasi aturan review kustom untuk tech stack Anda.
- Menggunakan mode agentik CodeRabbit untuk review arsitektur mendalam.
- Mengintegrasikan umpan balik CodeRabbit ke dalam quality gate CI/CD.
- Menulis instruksi kustom yang kompatibel dengan CodeRabbit di `.coderabbit.yaml`.

### Fitur Utama CodeRabbit 2.x

| Fitur | Deskripsi |
|---|---|
| **Ringkasan PR** | Membuat deskripsi PR terstruktur otomatis dengan walkthrough |
| **Review Baris per Baris** | Komentar inline dengan saran perbaikan spesifik |
| **Review Agentik** | Analisis mendalam yang mencakup banyak file untuk masalah arsitektur |
| **Aturan yang Dapat Dipelajari** | Belajar dari penolakan dan persetujuan review dari waktu ke waktu |
| **Integrasi CI** | Memblokir merge PR jika masalah kritis ditemukan |
| **Mode Chat** | Tanyakan pertanyaan kepada CodeRabbit di thread review |

### Konfigurasi (`.coderabbit.yaml`)
Tempatkan `.coderabbit.yaml` di root repositori. Konfigurasi kunci:
- `reviews.profile`: `assertive` (ketat), `chill` (santai), `default`.
- `reviews.path_instructions`: Instruksi review kustom per direktori — sangat berguna untuk menerapkan standar spesifik stack.
- `reviews.path_filters`: Kecualikan file lock, migrasi, kode yang dihasilkan dari review.
- `reviews.instructions`: Aturan global untuk seluruh codebase dengan prioritas eksplisit.

### Mode Review Agentik (CodeRabbit 2.x)
Mode agentik memungkinkan CodeRabbit membaca banyak file, menjalankan tool, dan memahami konteks arsitektur. Picu dengan `@coderabbitai review` di komentar PR atau ajukan pertanyaan spesifik tentang dampak keamanan, masalah N+1, atau perubahan arsitektur.

### Integrasi CI/CD (GitHub Actions)
Gunakan action `coderabbit-ai/wait-for-review@v1` untuk menunggu review selesai dan memblokir merge jika masalah kritis ditemukan.

### CodeRabbit vs Review Manual — Best Practices
- **CodeRabbit dulu**: Biarkan berjalan sebelum reviewer manusia — menangkap masalah yang jelas.
- **Fokus manusia**: Setelah CodeRabbit, manusia fokus pada logika bisnis, niat arsitektur, dan keputusan produk.
- **Ajarkan**: Tolak false positive dengan penjelasan — CodeRabbit belajar pola Anda.
- **Instruksi kustom**: Investasikan waktu di `path_instructions` untuk stack spesifik Anda — meningkatkan relevansi secara dramatis.