vibemcp/.coderabbit.yaml at main · VibeTensor/vibemcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
# CodeRabbit Configuration
# https://docs.coderabbit.ai/guides/configure-coderabbit

language: en-US

# Review settings
reviews:
  # Enable automatic reviews on pull requests
  auto_review:
    enabled: true
    # Review drafts so checks complete before the owner authorizes shipping
    drafts: true
    # Review base branches
    base_branches:
      - main
      - develop

  # Review profile (quiet, chill, assertive)
  profile: assertive

  # Request changes on high severity issues
  request_changes_workflow: true

  # Keep approval decisions with the maintainer
  auto_approvals:
    enabled: false
    allow_author_approval: false

  # High-level summary in PR comment
  high_level_summary: true

  # Add poem in summary (fun but optional)
  poem: false

  # Review status in commit status
  review_status: true

  # Collapse walkthrough in comments
  collapse_walkthrough: true

  # Path-based review instructions
  path_instructions:
    - path: "src/**/*.ts"
      instructions: |
        - Check for TypeScript best practices
        - Ensure proper error handling
        - Verify input validation for security
        - Check for potential memory leaks
        - Ensure TOON output format is used where applicable

    - path: "src/auth/**"
      instructions: |
        - CRITICAL: Review for security vulnerabilities
        - Ensure OAuth 2.1 best practices
        - Check for token leakage
        - Verify no hardcoded secrets
        - Check credential storage security

    - path: "src/tools/**"
      instructions: |
        - Verify tool schemas are complete
        - Check for input validation
        - Ensure consistent error messages
        - Verify TOON output support

    - path: "src/toon/**"
      instructions: |
        - Check for token efficiency
        - Verify encoding/decoding correctness
        - Test edge cases handling

    - path: "**/*.md"
      instructions: |
        - Check for spelling and grammar
        - Verify links are valid
        - Ensure code examples are correct

  # Tools integration
  tools:
    # GitHub Actions integration
    github-checks:
      enabled: true

    # Language-specific tools
    biome:
      enabled: true
    eslint:
      enabled: true

    # Security scanning
    shellcheck:
      enabled: true

    # Markdown linting
    markdownlint:
      enabled: true


  # Exclude generated files from reviews
  path_filters:
    - "!**/*.lock"
    - "!**/node_modules/**"
    - "!**/dist/**"
    - "!**/coverage/**"
    - "!**/*.min.js"
    - "!**/package-lock.json"

# Chat settings (for interactive comments)
chat:
  auto_reply: true

# Knowledge base (learns from codebase)
knowledge_base:
  opt_out: false
  learnings:
    scope: auto

# Early access features
early_access: true

# Tone of reviews
tone_instructions: |
  - Be constructive and helpful
  - Focus on code quality and security
  - Suggest improvements, not just problems
  - Consider token efficiency for all data output
  - Prioritize security issues in auth-related code