chore: add CodeRabbit configuration

[frederikprijck]

Summary

• Add .coderabbit.yaml with review guidance tailored to a modern TypeScript-based Nuxt authentication SDK.
• Organized into two parts so it can be shared across our sibling TS auth SDKs:
  • [BASELINE] — generic to any TS auth SDK: review behavior, path filters, TS rules, an auth security review block (secrets/token leakage, cookie flags, state/nonce/PKCE, open redirects, token validation, timing-safe comparison, prototype pollution, fail-closed auth), test/example/CI guidance, and tools.
  • [NUXT] — repo-specific: Nuxt module runtimeConfig secret exposure (private vs. public), Nitro OAuth/OIDC server route handlers + toSafeRedirect, route/auth middleware fail-closed behavior, server utils (cookie/session/url safety), and server-only composable leakage / SSR-safe state.
• Enables eslint, gitleaks, semgrep, actionlint, markdownlint, languagetool; excludes dist/, coverage/, .nuxt/, .output/, *.d.ts, and the lockfile; skips release PRs.

Summary by CodeRabbit

• Chores
  • Enabled automated code reviews and continuous integration checks, including security scanning, code quality analysis, linting, and workflow validation.

[coderabbitai]

Warning

Ignoring CodeRabbit configuration file changes. For security, only the configuration from the base branch is applied for open source repositories.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: dd870511-dcb6-4276-b69a-2ac6281f7d06

📥 Commits

Reviewing files that changed from the base of the PR and between 0ffb8d3 and 982a0f6.

📒 Files selected for processing (1)

• .coderabbit.yaml

---

📝 Walkthrough

Walkthrough

Adds a complete .coderabbit.yaml that configures automated review behavior, repo-wide path filters and instruction templates, Nuxt/OAuth-OIDC-specific review guidance, enables multiple static/tooling checks, and turns on chat auto-replies.

Changes

CodeRabbit Configuration

Layer / File(s)	Summary
Repository baseline and path filters .coderabbit.yaml	Base CodeRabbit settings: review profile, automated review enablement, draft/branch/title filters, and repository-wide path filters plus instruction templates for TypeScript SDK, tests, examples, and GitHub Actions workflows.
Nuxt and OAuth/OIDC review guidance .coderabbit.yaml	Nuxt-specific instruction blocks for module entrypoint, Nitro OAuth/OIDC API routes (state/nonce/PKCE lifecycle, safe redirects, backchannel logout validation), route/auth middleware fail-closed behavior, server utilities (cookie/redirect/session safety), and SSR/auth composables to avoid leaking tokens/secrets.
Tooling checks enablement .coderabbit.yaml	Enables languagetool, eslint, actionlint, gitleaks, semgrep, and markdownlint checks in the configuration.
Chat auto-reply configuration .coderabbit.yaml	Configures CodeRabbit chat behavior to auto-reply.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Poem

A rabbit reviews the config with care,
Rules for Nuxt and OAuth live there,
Lints and scans keep the repo bright,
Auto-replies bounce back at night,
Tiny paws set review paths fair. 🐰✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: add CodeRabbit configuration' directly and accurately describes the primary change—adding a new .coderabbit.yaml configuration file to the repository.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/add-coderabbit-config

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}