trusty-analyze

Sidecar code-analysis daemon for trusty-search. Fetches chunk corpora from the trusty-search daemon, runs static analysis, and serves results via HTTP (port 7879) and MCP stdio.

📚 Documentation

Full documentation lives at the workspace top level in docs/trusty-analyze/: the research, sessions, and regression-testing subdirs. This README and the rustdoc stay in-crate; everything else lives under docs/.

Installation

cargo install trusty-analyze

The installed binary is named trusty-analyze. The crate name on crates.io is trusty-analyze.

Quick Start

# trusty-search must be running first (hard runtime dependency)
trusty-search daemon

# Run the analyzer sidecar
trusty-analyze serve --search-url http://127.0.0.1:7878

# Analyze a named index
trusty-analyze analyze <index-id> --top-k 20

# Check liveness
trusty-analyze health

Features

Cyclomatic and cognitive complexity per chunk, file, and index
Code smell detection with configurable thresholds and named categories
Quality grade aggregation (A–F) per file and per index
Git blame temporal decay scoring (stale high-complexity code surfaces first)
Concept clustering (k-means over embeddings, BoW or neural)
Facts store: (subject, predicate, object) knowledge triples, persisted in redb
SCIP protobuf ingest for LSP-quality symbol data
Full HTTP API + MCP stdio server (every endpoint has a tool equivalent)

Claude Code Integration

Add to your project's .mcp.json:

{
  "mcpServers": {
    "trusty-analyzer": {
      "command": "trusty-analyze",
      "args": ["serve", "--mcp"],
      "env": {}
    }
  }
}

trusty-search must already be running. The analyzer performs a startup health check against http://127.0.0.1:7878/health and exits with code 1 if unreachable.

MCP Tools

The MCP server registers 17 tools (authoritative source: src/mcp/mod.rs tool_definitions):

Tool	HTTP equivalent
`analyzer_health`	`GET /health`
`complexity_hotspots`	`GET /indexes/:id/complexity_hotspots`
`find_smells`	`GET /indexes/:id/smells`
`analyze_quality`	`GET /indexes/:id/quality`
`run_diagnostics`	(composite diagnostics run)
`list_facts`	`GET /facts`
`upsert_fact`	`POST /facts`
`delete_fact`	`DELETE /facts/:id`
`ingest_scip`	`POST /indexes/:id/scip`
`cluster_concepts`	`GET /indexes/:id/clusters`
`extract_graph`	knowledge-graph extraction
`extract_ner`	named-entity extraction (optional ONNX)
`list_entities`	enumerate extracted entities
`suggest_refactors`	refactor suggestions
`review_diff`	review a unified diff
`review_github_pr`	review a GitHub pull request
`deep_analysis`	combined deep-analysis pass

HTTP API

Port 7879. Requires trusty-search on port 7878.

GET  /health
GET  /indexes/:id/complexity_hotspots[?top_k=N]
GET  /indexes/:id/smells[?category=<name>]
GET  /indexes/:id/quality
GET  /indexes/:id/clusters?k=N&method=bow|neural
GET  /facts[?subject=<s>&predicate=<p>]
POST /facts
DELETE /facts/:id
POST /indexes/:id/scip

Configuration

Variable	Default	Description
`TRUSTY_SEARCH_URL`	`http://127.0.0.1:7878`	trusty-search daemon address
`TRUSTY_ANALYZER_PORT`	`7879`	Analyzer listen port
`RUST_LOG`	`warn`	Tracing filter

Features Flag

Flag	Description
`ner`	Optional ONNX-backed named entity recognition

Architecture

The crate is a single trusty-analyze package containing the CLI binary (trusty-analyze) and a library. All analysis engines, the HTTP server, and the MCP stdio server live within this one crate. Shared types (complexity metrics, code smells, knowledge-graph entities, facts) come from trusty-common.

trusty-search (port 7878)                trusty-analyze (port 7879)
  GET /indexes/:id/chunks  ──────────►   complexity analysis (tree-sitter)
  (bulk corpus export)                   blame + temporal decay
                                         quality grade aggregation
                                         k-means concept clustering
                                         facts store (redb)
                                         axum HTTP API + MCP stdio

Development

# Build
cargo build -p trusty-analyze

# Test
cargo test -p trusty-analyze

# Lint
cargo clippy -p trusty-analyze --all-targets -- -D warnings

See CLAUDE.md for full architecture, API reference, and project history.

License

Licensed under the MIT License.

Repository

https://github.com/bobmatnyc/trusty-tools

trusty-analyze 0.2.0