review.hexum.dev

Review the boundary, not the vibe.

Install the GitHub App on the org. Hexum reviews each PR with the same doctor as MCP. No style LLM. No PAT. Diffs are not stored.

GitHub App

Install Hexum Review. No PAT.

Customers install one GitHub App on the org or repo. GitHub sends pull requests to Hexum. Hexum mints a short-lived installation token, runs the doctor, posts the review, and drops the token. Diffs are not stored. You never paste a personal access token.

The Hexum Review GitHub App is not registered on this host yet. Sign in, then create it once. After GitHub redirects, put App ID, slug, webhook secret, and private key into Azure and restart.

review.hexum.dev

Pull request reviewer

Doctor on the diff. Token delta. GitHub-ready markdown. No style LLM.

Git Unified Diff PR diff to inspect

diff --git a/src/web/dashboard.ts b/src/web/dashboard.ts
index 10294ab..987efc2 100644
--- a/src/web/dashboard.ts
+++ b/src/web/dashboard.ts
@@ -1,5 +1,6 @@
 import { formatCurrency } from "../shared/utils";
+import { queryDatabaseDirectly } from "../db/client";
 
 export function renderDashboard() {
-  return "<div>Loaded</div>";
+  const data = queryDatabaseDirectly();
+  return "<div>" + data + "</div>";
 }

architecture.hexum Layer rules & boundaries

layer web = src/web/**
layer db = src/db/**
layer shared = src/shared/**

forbid web -> db

review.hexum.dev/mcp

One key. This surface.

Mint hexum_live_ at /app. Same key on every subdomain. This host lists only this product's tools.

Get an API key

{
  "mcpServers": {
    "hexum": {
      "serverUrl": "https://review.hexum.dev/mcp",
      "headers": { "Authorization": "Bearer hexum_live_…" }
    }
  }
}