review.hexum.dev

Review the boundary, not the vibe.

Paste a unified diff. Review runs the same doctor as MCP. Webhook at POST /webhooks/github fetches the PR, posts REQUEST_CHANGES or COMMENT. Diffs are not stored.

review.hexum.dev

Pull request reviewer

Doctor on the diff. Token delta. GitHub-ready markdown. No style LLM.

Git Unified Diff PR diff to inspect

diff --git a/src/web/dashboard.ts b/src/web/dashboard.ts
index 10294ab..987efc2 100644
--- a/src/web/dashboard.ts
+++ b/src/web/dashboard.ts
@@ -1,5 +1,6 @@
 import { formatCurrency } from "../shared/utils";
+import { queryDatabaseDirectly } from "../db/client";
 
 export function renderDashboard() {
-  return "<div>Loaded</div>";
+  const data = queryDatabaseDirectly();
+  return "<div>" + data + "</div>";
 }

architecture.hexum Layer rules & boundaries

layer web = src/web/**
layer db = src/db/**
layer shared = src/shared/**

forbid web -> db

GitHub webhook

Set GITHUB_WEBHOOK_SECRET and GITHUB_TOKEN on the host. Payload URL https://hexum.dev/webhooks/github. Events: pull_request opened, synchronize, reopened. Hexum fetches changed files, architecture.hexum at HEAD, then posts a review. Unsigned payloads are refused.

review.hexum.dev/mcp

One key. This surface.

Mint hexum_live_ at /app. Same key on every subdomain. This host lists only this product's tools.

Get an API key

{
  "mcpServers": {
    "hexum": {
      "serverUrl": "https://review.hexum.dev/mcp",
      "headers": { "Authorization": "Bearer hexum_live_…" }
    }
  }
}