[pkyanam]

The installer no longer fetches from GitHub. install.sh and install.ps1 download the archive from https://hstack.sh, verify the sha256, and keep every --with flag, --dry-run, and --uninstall.

The primary host is Vercel, project hstack, on Preetham's Pro plan. Cloudflare Pages is the fallback.

Install

curl -fsSL https://hstack.sh/install | sh downloads install.sh as text/plain, then dl/hstack.tar.gz and its .sha256. It checks the digest with sha256sum or shasum, refuses absolute paths, .., and links, and extracts into ~/.hermes/skills/hstack/.

The archive has one top-level directory: skills/hstack/, scripts/apply_addons.py, the bin/ helpers, and VERSION. --with browser,github,docs,search,perf,test,security,trail works from the curl form. --uninstall --with browser removes only that addon.

HSTACK_BASE_URL points the download at another host, including a *.vercel.app URL before DNS. HSTACK_VERSION=0.1.0 pins hstack-v0.1.0.tar.gz. A checkout of this repo still installs the tree beside the script. Windows uses https://hstack.sh/install.ps1 with the same flags and the same archive.

Deploy

site/vercel.json sets framework to null, buildCommand to npm run build, outputDirectory to dist, and cleanUrls. Root directory is site.

/install and /install/ are text/plain; charset=utf-8 with a 60 second cache. .tar.gz is application/gzip. .sha256 is text/plain. Any other path under /install/ rewrites to a plain-text 404. www.hstack.sh redirects to https://hstack.sh with status 308. HTTP on the apex redirects to HTTPS with status 308.

At Porkbun, leave the nameservers alone. Add an A record at @ (usually 76.76.21.21; use the address on the Vercel domain card) and a CNAME for www to the card's target. Do not add an AAAA record. site/DEPLOY.md has the steps, and the Pages fallback.

Checks

scripts/check_skills.py reports idle 204, planning 965, and bodies 3,820. scripts/check_install.sh passed, including every --with addon. Piped install passed with GNU tar and with BSD tar plus shasum, with --with browser, a version pin, and a checksum mismatch that writes nothing. check-pages.mjs and check-vercel.mjs both passed. vercel.json validates against the Vercel schema. npx vercel build needs a linked project, so the header check serves dist with the config applied.

Desktop hero
Desktop stack fanned open
Mobile hero
Mobile stack fanned open

_{To show artifacts inline, enable in settings.}

  

---

^{Need help on this PR? Tag @codesmith with what you need.}