git:20260619.f011dd5 to git:20260729.c8863c0

+ author: "Roedy Rustam"

+ # CodeRabbit (2026 Edition — CodeRabbit 2.x)

+ Expert guide for configuring and leveraging **CodeRabbit 2.x** — AI-powered automated code review, pull request summarization, and interactive developer feedback. Covers configuration, custom review rules, integration with CI/CD, and agentic review mode.

+ ### Trigger Conditions

+ - Setting up CodeRabbit on a GitHub or GitLab repository.

+ - Configuring custom review rules for your tech stack.

+ - Using CodeRabbit's agentic mode for deep architectural reviews.

+ - Integrating CodeRabbit feedback into CI/CD quality gates.

+ - Writing CodeRabbit-compatible custom instructions in `.coderabbit.yaml`.

+ ### CodeRabbit 2.x Key Features

+ | Feature | Description |

+ |---|---|

+ | **PR Summary** | Auto-generates structured PR description with walkthrough |

+ | **Line-by-line Review** | Inline comments with specific fix suggestions |

+ | **Agentic Review** | Deep analysis spanning multiple files for architectural issues |

+ | **Learnable Rules** | Learns from review dismissals and approvals over time |

+ | **CI Integration** | Blocks PR merge if critical issues found |

+ | **Chat Mode** | Ask CodeRabbit questions about the PR in review thread |

+ ### Configuration (`.coderabbit.yaml`)

+ ```yaml

+ # .coderabbit.yaml — place in repository root

+ version: "2"

+ language: "en-US"

+ tone_instructions: "Be concise and direct. Prioritize security and performance issues."

+ reviews:

+ auto_review:

+ enabled: true

+ drafts: false # Don't review draft PRs

+ base_branches: ["main", "develop"]

+ profile: "chill" # assertive | chill | default

+ request_changes_workflow: false

+ high_level_summary: true

+ commit_message_instructions: "Use Conventional Commits format: feat/fix/chore/docs"

+ # Ignore paths from review

+ path_filters:

+ - "!**/*.lock"

+ - "!**/migrations/**"

+ - "!**/generated/**"

+ - "!**/__snapshots__/**"

+

+ # Stack-specific review instructions

+ path_instructions:

+ - path: "apps/api/**"

+ instructions: |

+ - Check for missing input validation (Zod schemas required on all handlers)

+ - Flag any database queries without proper RLS consideration

+ - Ensure all async functions have try/catch or error boundaries

+ - Check for N+1 query patterns (missing .include() or DataLoader usage)

+ - path: "apps/web/**"

+ instructions: |

+ - Check for missing `key` props in .map() renders

+ - Flag `useEffect` without proper cleanup functions

+ - Check for missing `alt` attributes on images

+ - Verify Server Actions are properly validated with Zod

+ - path: "apps/admin/**"

+ instructions: |

+ - All admin routes must verify isSuperAdmin === true

+ - Flag any direct DB access without service role client

+ - Check for proper audit logging on destructive operations

+

+ # Custom review rules for the entire codebase

+ instructions: |

+ Review with these priorities:

+ 1. SECURITY: SQL injection, XSS, auth bypass, exposed secrets

+ 2. CORRECTNESS: Logic bugs, off-by-one errors, type unsafety

+ 3. PERFORMANCE: N+1 queries, unnecessary re-renders, bundle size

+ 4. MAINTAINABILITY: Code duplication, naming, SOLID violations

+ 5. STYLE: Only comment if it's a significant clarity issue

+

+ # PR summary format

+ summary:

+ auto_title_placeholder: "🤖 AI Title"

+ description: |-

+ ## Summary

+ <!-- Concise description of what changed -->

+

+ ## Changes

+ <!-- Structured list by area -->

+

+ ## Testing

+ <!-- What was tested -->

+

+ # Enable chat for interactive Q&A

+ chat:

+ auto_reply: true

+ ```

+

+ ### Agentic Review Mode (CodeRabbit 2.x)

+ CodeRabbit 2.x introduces **agentic review** — deep analysis that can read multiple files, run tools, and understand architectural context:

+

+ ```

+ # Trigger agentic review in PR comment:

+ @coderabbitai review

+

+ # Ask specific questions:

+ @coderabbitai What is the security impact of changes in apps/api/src/routes/users.ts?

+ @coderabbitai Can you generate a test for the createWorkspace function?

+ @coderabbitai Is there a N+1 query issue in this PR?

+ @coderabbitai Summarize the architecture changes in this PR

+ ```

+

+ ### CI/CD Integration (GitHub Actions)

+ ```yaml

+ # .github/workflows/pr-quality.yml

+ name: PR Quality Gate

+

+ on: [pull_request]

+

+ jobs:

+ coderabbit-review:

+ runs-on: ubuntu-latest

+ steps:

+ - name: Wait for CodeRabbit Review

+ uses: coderabbit-ai/wait-for-review@v1

+ with:

+ github-token: ${{ secrets.GITHUB_TOKEN }}

+ min-approvals: 1

+ block-on-critical: true # Block merge if critical issues found

+ ```

+

+ ### CodeRabbit vs Manual Review — Best Practices

+ - **CodeRabbit first**: Let it run before human reviewers — catches the obvious issues.

+ - **Human focus**: After CodeRabbit, humans focus on business logic, architecture intent, and product decisions.

+ - **Teach it**: Dismiss false positives with an explanation — CodeRabbit learns your patterns.

+ - **Custom instructions**: Invest time in `path_instructions` for your specific stack — dramatically improves relevance.

+

+ Panduan ahli untuk mengonfigurasi dan memanfaatkan **CodeRabbit 2.x** — review kode otomatis bertenaga AI, ringkasan pull request, dan umpan balik developer interaktif. Mencakup konfigurasi, aturan review kustom, integrasi dengan CI/CD, dan mode review agentik.

+ ### Kondisi Pemicu

+ - Menyiapkan CodeRabbit di repositori GitHub atau GitLab.

+ - Mengonfigurasi aturan review kustom untuk tech stack Anda.

+ - Menggunakan mode agentik CodeRabbit untuk review arsitektur mendalam.

+ - Mengintegrasikan umpan balik CodeRabbit ke dalam quality gate CI/CD.

+ - Menulis instruksi kustom yang kompatibel dengan CodeRabbit di `.coderabbit.yaml`.

+ ### Fitur Utama CodeRabbit 2.x

+ | Fitur | Deskripsi |

+ |---|---|

+ | **Ringkasan PR** | Membuat deskripsi PR terstruktur otomatis dengan walkthrough |

+ | **Review Baris per Baris** | Komentar inline dengan saran perbaikan spesifik |

+ | **Review Agentik** | Analisis mendalam yang mencakup banyak file untuk masalah arsitektur |

+ | **Aturan yang Dapat Dipelajari** | Belajar dari penolakan dan persetujuan review dari waktu ke waktu |

+ | **Integrasi CI** | Memblokir merge PR jika masalah kritis ditemukan |

+ | **Mode Chat** | Tanyakan pertanyaan kepada CodeRabbit di thread review |

+ ### Konfigurasi (`.coderabbit.yaml`)

+ Tempatkan `.coderabbit.yaml` di root repositori. Konfigurasi kunci:

+ - `reviews.profile`: `assertive` (ketat), `chill` (santai), `default`.

+ - `reviews.path_instructions`: Instruksi review kustom per direktori — sangat berguna untuk menerapkan standar spesifik stack.

+ - `reviews.path_filters`: Kecualikan file lock, migrasi, kode yang dihasilkan dari review.

+ - `reviews.instructions`: Aturan global untuk seluruh codebase dengan prioritas eksplisit.

+ ### Mode Review Agentik (CodeRabbit 2.x)

+ Mode agentik memungkinkan CodeRabbit membaca banyak file, menjalankan tool, dan memahami konteks arsitektur. Picu dengan `@coderabbitai review` di komentar PR atau ajukan pertanyaan spesifik tentang dampak keamanan, masalah N+1, atau perubahan arsitektur.

+ ### Integrasi CI/CD (GitHub Actions)

+ Gunakan action `coderabbit-ai/wait-for-review@v1` untuk menunggu review selesai dan memblokir merge jika masalah kritis ditemukan.

+ ### CodeRabbit vs Review Manual — Best Practices

+ - **CodeRabbit dulu**: Biarkan berjalan sebelum reviewer manusia — menangkap masalah yang jelas.

+ - **Fokus manusia**: Setelah CodeRabbit, manusia fokus pada logika bisnis, niat arsitektur, dan keputusan produk.

+ - **Ajarkan**: Tolak false positive dengan penjelasan — CodeRabbit belajar pola Anda.

+ - **Instruksi kustom**: Investasikan waktu di `path_instructions` untuk stack spesifik Anda — meningkatkan relevansi secara dramatis.