From ddd85bb7d3262880b927147a390d3823616b31b5 Mon Sep 17 00:00:00 2001
From: Sehtej Khehra <sehtej@coderabbit.ai>
Date: Sat, 23 May 2026 13:01:29 -0700
Subject: [PATCH] Add custom finishing-touch recipes

---
 configs/custom-recipes/.coderabbit-a11y.yaml  | 16 ++++++++++++++
 configs/custom-recipes/.coderabbit-api.yaml   | 17 +++++++++++++++
 .../custom-recipes/.coderabbit-cleanup.yaml   | 14 +++++++++++++
 configs/custom-recipes/.coderabbit-db.yaml    | 15 +++++++++++++
 configs/custom-recipes/.coderabbit-docs.yaml  | 16 ++++++++++++++
 configs/custom-recipes/.coderabbit-env.yaml   | 20 ++++++++++++++++++
 .../custom-recipes/.coderabbit-imports.yaml   | 16 ++++++++++++++
 .../custom-recipes/.coderabbit-security.yaml  | 21 +++++++++++++++++++
 .../custom-recipes/.coderabbit-testing.yaml   | 16 ++++++++++++++
 9 files changed, 151 insertions(+)
 create mode 100644 configs/custom-recipes/.coderabbit-a11y.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-api.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-cleanup.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-db.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-docs.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-env.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-imports.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-security.yaml
 create mode 100644 configs/custom-recipes/.coderabbit-testing.yaml

diff --git a/configs/custom-recipes/.coderabbit-a11y.yaml b/configs/custom-recipes/.coderabbit-a11y.yaml
new file mode 100644
index 0000000..4ae4984
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-a11y.yaml
@@ -0,0 +1,16 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "associate form labels"
+        instructions: |
+          For newly added or modified form controls in this PR, ensure each
+          visible input, textarea, and select has an accessible name through
+          a correctly associated <label>, wrapping label, aria-label, or
+          aria-labelledby, whichever matches the existing component pattern.
+          If using htmlFor, add a stable id only when missing and follow the
+          repo's naming pattern. Add aria-describedby when nearby help text
+          or error text is rendered. Do not add redundant labels to hidden
+          inputs or controls already correctly labeled through grouped
+          patterns such as fieldset and legend.
diff --git a/configs/custom-recipes/.coderabbit-api.yaml b/configs/custom-recipes/.coderabbit-api.yaml
new file mode 100644
index 0000000..edac77a
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-api.yaml
@@ -0,0 +1,17 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "regenerate openapi/graphql schema"
+        instructions: |
+          When this PR changes route handlers, request or response contracts,
+          GraphQL schema inputs, resolvers, or other API-surface definitions
+          that normally drive generated specs, run the repository's existing
+          OpenAPI, GraphQL, or contract-generation command and commit the
+          generated output. Do not hand-edit generated schema or spec files.
+          If the spec is generated in another repository or pipeline, update
+          the source of truth here and report the handoff rather than
+          editing downstream generated artifacts manually. If no generation
+          command can be found, report that the repository is missing an
+          explicit schema regeneration workflow.
diff --git a/configs/custom-recipes/.coderabbit-cleanup.yaml b/configs/custom-recipes/.coderabbit-cleanup.yaml
new file mode 100644
index 0000000..9626710
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-cleanup.yaml
@@ -0,0 +1,14 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "cleanup stale imports"
+        instructions: |
+          Remove unused imports only in files changed by this PR. Preserve
+          type-only imports, side-effect imports, CSS imports, and any import
+          still required by the project's compiler, typechecker, linter, or
+          build tooling. Do not reorder, regroup, or reformat imports. Delete
+          only imports that the repo's existing tooling proves are unused. If
+          no authoritative unused-import signal exists for a file, leave it
+          unchanged.
diff --git a/configs/custom-recipes/.coderabbit-db.yaml b/configs/custom-recipes/.coderabbit-db.yaml
new file mode 100644
index 0000000..8496a66
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-db.yaml
@@ -0,0 +1,15 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "regenerate orm types"
+        instructions: |
+          When this PR changes database schema through migrations or schema
+          files, run the repository's existing ORM or query type generation
+          command, such as prisma generate, sqlc generate, or the
+          repo-defined equivalent, and commit only the generated artifacts
+          that are already tracked or normally committed in this repository.
+          Do not hand-edit generated files. If no authoritative generation
+          command is defined, report that regeneration could not be
+          performed.
diff --git a/configs/custom-recipes/.coderabbit-docs.yaml b/configs/custom-recipes/.coderabbit-docs.yaml
new file mode 100644
index 0000000..ff39837
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-docs.yaml
@@ -0,0 +1,16 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "document new public APIs"
+        instructions: |
+          For functions, classes, and types newly exported by this PR from a
+          package's public surface, add or improve docstrings following the
+          repository's existing documentation style. Cover purpose,
+          parameters, return value when applicable, and one short usage
+          example. Skip internal-only exports, local helpers, and symbols not
+          exposed through the package's public entry points or declared
+          export barrels. If the repo has no established inline API-doc
+          convention, report the missing documentation rather than inventing
+          a new style.
diff --git a/configs/custom-recipes/.coderabbit-env.yaml b/configs/custom-recipes/.coderabbit-env.yaml
new file mode 100644
index 0000000..9c21c67
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-env.yaml
@@ -0,0 +1,20 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "propagate new env var"
+        instructions: |
+          When this PR introduces a new environment variable read such as
+          process.env.X or the language-equivalent pattern, propagate X to the
+          repository's existing configuration surfaces where applicable:
+          .env.example, config schema or validator, documented env tables,
+          compose or deployment manifests, and CI config or secret lists that
+          already exist in the repo. Match the repo's existing naming and
+          classification conventions. If X is sensitive, add only a
+          placeholder and wire it through existing secret/config surfaces
+          without exposing a value. Use a placeholder value with a short
+          comment describing the var's purpose where the existing files
+          include comments. Do not create new infra files. Do not edit
+          generated documentation or derived config artifacts by hand; update
+          the source of truth or report the missing propagation path.
diff --git a/configs/custom-recipes/.coderabbit-imports.yaml b/configs/custom-recipes/.coderabbit-imports.yaml
new file mode 100644
index 0000000..bf6dd71
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-imports.yaml
@@ -0,0 +1,16 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "update import paths after file moves"
+        instructions: |
+          When files are moved or renamed in this PR, update broken import
+          and export specifiers that reference the old paths across changed
+          files and directly affected dependents. Prefer the repository's
+          existing path alias conventions when the new location is normally
+          imported that way; otherwise preserve the prevailing local import
+          style. Update re-export barrels when needed. Do not rewrite
+          unrelated paths, plain strings, or documentation text unless they
+          are clearly part of a moved-code reference that this PR already
+          touches.
diff --git a/configs/custom-recipes/.coderabbit-security.yaml b/configs/custom-recipes/.coderabbit-security.yaml
new file mode 100644
index 0000000..09d5ae0
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-security.yaml
@@ -0,0 +1,21 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "scrub hardcoded secrets"
+        instructions: |
+          Detect high-confidence hardcoded secrets introduced or modified in
+          this PR, including API keys, tokens, signing keys, passwords, and
+          connection strings. Replace each real secret with the repository's
+          normal environment/config lookup pattern, using names that match
+          existing conventions. Add the variable to .env.example with a
+          placeholder, and update existing env documentation if the repo
+          maintains it. Never preserve or re-emit the real secret value
+          anywhere. Skip obvious placeholders, test fixtures, mock
+          credentials, and documentation examples (such as "YOUR_API_KEY",
+          "changeme", "test-token", or values inside README/docs snippets)
+          unless they appear to be real credentials. If confidence is not
+          high, report the finding instead of rewriting. In the PR summary,
+          note that any real secret already committed must be revoked and
+          rotated outside the PR.
diff --git a/configs/custom-recipes/.coderabbit-testing.yaml b/configs/custom-recipes/.coderabbit-testing.yaml
new file mode 100644
index 0000000..0da1ae1
--- /dev/null
+++ b/configs/custom-recipes/.coderabbit-testing.yaml
@@ -0,0 +1,16 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+reviews:
+  finishing_touches:
+    custom:
+      - name: "sync tests with signature changes"
+        instructions: |
+          When a function changed in this PR has a signature change in
+          parameters or return shape, update directly affected test files so
+          their call sites, mocks, fixtures, expected values, and type
+          assertions match the new signature. Preserve each test's original
+          intent and behavioral assertion. Do not broaden test edits beyond
+          directly affected tests. Do not rewrite assertions to fit a
+          semantic behavior change unless the production diff clearly shows
+          the behavior is unchanged and only the interface changed; otherwise
+          report that the tests need human review.