trusty-review

Fast local PR-review service — LLM-backed code review with search and analysis context.

trusty-review fetches GitHub PR diffs, retrieves code context from trusty-search, queries trusty-analyze for complexity data, then calls an LLM (AWS Bedrock by default) to produce a structured review verdict with actionable findings.

It ships as:

• a one-shot CLI (run / compare subcommands)
• a long-lived HTTP webhook server (serve subcommand, port 7880)
• a JSON-RPC 2.0 / MCP stdio service (serve --stdio) for Claude Code integration

Install

cargo install trusty-review --locked

This installs the trusty-review binary.

Prerequisites

Two sidecar daemons must be running for full context retrieval:

• trusty-search on :7878 — code-context hybrid search
• trusty-analyze on :7879 — complexity and quality metrics (optional)

cargo install trusty-search --locked && trusty-search start
cargo install trusty-analyze --locked && trusty-analyze start

Quick start — one-shot review

# Review a GitHub PR (Bedrock credentials required)
trusty-review run owner repo 123

# Review a local unified diff
trusty-review run --local-diff /path/to/patch.diff

# Override the reviewer model
trusty-review run owner repo 123 --reviewer-model bedrock/us.anthropic.claude-haiku-4-5

# Compare models
trusty-review compare owner repo 123

HTTP server

# Start the HTTP daemon on port 7880
trusty-review serve

# Custom port / bind address
trusty-review serve --port 8080 --bind 0.0.0.0

Endpoints:

MCP stdio service (Claude Code integration)

# Start the MCP stdio server
trusty-review serve --stdio

Wire into Claude Code via .mcp.json:

{
  "mcpServers": {
    "trusty-review": {
      "command": "trusty-review",
      "args": ["serve", "--stdio"]
    }
  }
}

MCP tools

review_pr

{
  "name": "review_pr",
  "arguments": {
    "owner": "bobmatnyc",
    "repo":  "trusty-tools",
    "pr":    625,
    "reviewer_model": "bedrock/us.anthropic.claude-haiku-4-5"
  }
}

Returns a ReviewResult JSON object with:

• verdict (APPROVE | APPROVE* | REQUEST_CHANGES | BLOCK | Unknown)
• findings (array of findings with severity + confidence)
• input_tokens / output_tokens — LLM token usage
• cost_estimate_usd — estimated API cost

When posted to GitHub, the review comment includes a footer:

🤖 Reviewed by us.anthropic.claude-sonnet-4-6 · tokens ↑1234 ↓567 · est. $0.01

(↑ = input tokens, ↓ = output tokens). The footer appears identically in dry-run output.

review_diff

{
  "name": "review_diff",
  "arguments": {
    "diff": "diff --git a/src/lib.rs ...",
    "context": "Refactoring the auth module",
    "reviewer_model": "bedrock/us.anthropic.claude-sonnet-4-6"
  }
}

review_health

{ "name": "review_health", "arguments": {} }

Returns a health status object:

{
  "status": "ok",
  "version": "0.3.2",
  "dry_run": true,
  "reviewer_model": "us.anthropic.claude-sonnet-4-6",
  "inference": "ok",
  "deps": {
    "trusty_search": {
      "required": true,
      "reachable": true
    },
    "trusty_analyze": {
      "required": false,
      "reachable": true
    }
  }
}

Status values:

• ok — all dependencies healthy and inference reachable.
• degraded — a required dependency (trusty-search) or inference is unreachable.
• unknown — cannot determine health state.

Inference field values:

• ok — AWS Bedrock and/or OpenRouter accessible.
• unreachable — both inference providers unreachable (network/DNS error).
• auth_error — inference provider reachable but auth failed (bad API key).
• unknown — inference probe could not determine status.

Environment variables

AWS credentials can also be supplied via ~/.aws/credentials, IAM roles, or SSO. The full AWS credential chain is supported.

Reviewer model

The default reviewer model is us.anthropic.claude-sonnet-4-6 on AWS Bedrock.

Override via:

• CLI flag: --reviewer-model bedrock/us.anthropic.claude-haiku-4-5
• Env var: PR_INTELLIGENCE_REVIEWER_MODEL=bedrock/us.anthropic.claude-haiku-4-5
• Config file: $XDG_CONFIG_HOME/trusty-review/config.toml

Provider prefix convention:

• bedrock/<id> — AWS Bedrock Converse API (no API key needed, uses AWS credential chain)
• openrouter/<id> — OpenRouter (requires OPENROUTER_API_KEY)
• Bare id — uses the configured default provider

Cargo features

License

Elastic License 2.0 — see LICENSE.