saguaro

[![npm version](https://img.shields.io/npm/v/@mesadev/saguaro)](https://www.npmjs.com/package/@mesadev/saguaro)
[![CI](https://github.com/mesa-dot-dev/saguaro/actions/workflows/ci.yml/badge.svg)](https://github.com/mesa-dot-dev/saguaro/actions/workflows/ci.yml)
[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)

# Saguaro Local Review

Local code review for coding agents. Rules enforced inside Claude Code, Codex, and Cursor. Your agent fixes its own mistakes while context is hot. Free. Apache 2.0.

## Install

### npm (macOS + Linux, requires Node.js 20+)

```bash
npm install -g @mesadev/saguaro
```

Or run without installing:

```bash
npx @mesadev/saguaro review
```

### Homebrew (macOS)

```bash
brew install mesa-dot-dev/homebrew-tap/saguaro
```

### Shell script (macOS + Linux)

```bash
curl -fsSL https://raw.githubusercontent.com/mesa-dot-dev/saguaro/main/install.sh | sh
```

---

Saguaro uses your existing agent CLI subscription (Claude Code, Codex, Cursor) when available, no API key needed. If no agent CLI is installed, set `ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, or `GOOGLE_API_KEY` in your environment.

## Quickstart

```bash
# 1. Initialize Saguaro in your repo
sag init

# 2. Generate rules from your codebase (or use the starter rules)
sag rules generate

# 3. Run a review
sag review
```

`sag init` walks you through setup:
- Creates `.saguaro/config.yaml` and `.saguaro/rules/`
- Offers three options: generate rules from your codebase, use starter rules, or start from scratch
- Sets up Claude Code integration automatically (MCP server, hooks, slash commands)
- Stores your API key in `.env.local` if provided

## How It Works

1. **Match rules to files** — Rules load from `.saguaro/rules/` as markdown with YAML frontmatter. Changed files match against rule globs using minimatch. Rules without globs apply to all changed files.
2. **Gather context** — Saguaro builds an import graph (tree-sitter + SWC) showing the "blast radius" — files t