Redesign hstack.sh in Paper Mono

PARITY.md

@@ -11,7 +11,7 @@ Measured from the checkouts named in [RESEARCH.md](RESEARCH.md), on 28 October 2
 | [cursor/plugins](https://github.com/cursor/plugins) `pstack/` | `c742dd61706fbacc1b95f1a20b7b988cf096ce6c` | 58 skills, 23 playbooks, Benny automations, agents, `watch-pr`, statechart scripts |
 | [NousResearch/hermes-agent](https://github.com/NousResearch/hermes-agent) | `ee7e0f517232fb619c72e49d7e648436bddc598e` | Skills, plugins, MCP, hooks, memory, cron, delegation, browser, terminal backends |
 
-All three stacks are MIT. This repo still does not copy their skill text, word lists, or scripts. No `NOTICE` file until a substantial portion is included. The helpers in the build that follows this file are original.
+All three stacks are MIT. This repo still does not copy their skill text, word lists, or scripts. MIT notices for the adapted material are in [THIRD_PARTY_NOTICES](https://github.com/Belweave/hstack/blob/main/THIRD_PARTY_NOTICES). The helpers in the build that follows this file are original.
 
 ## How a row is typed
 

site/_headers

@@ -37,3 +37,7 @@
 /dl/hstack-v0.1.0.tar.gz.sha256
   Content-Type: text/plain; charset=utf-8
   Cache-Control: public, max-age=31536000, immutable
+
+/fonts/*
+  Access-Control-Allow-Origin: *
+  Cache-Control: public, max-age=31536000, immutable

site/content/changelog.md

@@ -0,0 +1,13 @@
+---
+title: Changelog
+description: HStack 0.1.0. Twelve skills, an idle index of 204 tokens, optional add-ons, and a sha256-checked install from hstack.sh.
+---
+
+## 0.1.0
+
+28 October 2026.
+
+- Twelve skills. The idle index is 204 tokens, including the `hstack` category header. The planning path is `hstack`, `reframe`, and `shape` at 965 tokens. All `SKILL.md` bodies are 3,820.
+- One router loads a single playbook from `skills/hstack/hstack/references/`. The parity inventory is 520 rows: 67 skills, 260 playbooks, 3 Hermes tools, 15 helper scripts, and 175 skips.
+- Optional add-ons, off by default: `browser`, `github`, `docs`, `search`, `perf`, `test`, `security`, `trail`. `--with` and `--uninstall` can name one add-on.
+- `install.sh` and `install.ps1` download the archive from hstack.sh, check sha256, and reject absolute paths, `..`, and symlink members. `HSTACK_VERSION=0.1.0` pins the archive. `HSTACK_BASE_URL` points at another host.

site/content/docs/addons.md

@@ -0,0 +1,36 @@
+---
+title: Add-ons
+description: Optional HStack add-ons for browser, GitHub, docs, search, perf, test, security, and a decision trail. Off unless you pass --with.
+---
+
+A default install is skills only. Pass `--with` to turn on helpers and MCP entries. The installer does not download Playwright, gitleaks, or osv-scanner.
+
+:::tabs
+:::tab macOS / Linux
+```sh install.sh
+sh install.sh --with browser,github,docs,search,perf,test,security,trail
+sh install.sh --dry-run --with browser
+sh install.sh --uninstall --with browser
+```
+:::tab Windows
+```powershell install.ps1
+powershell -ExecutionPolicy Bypass -File .\install.ps1 --with browser,github,docs,search,perf,test,security,trail
+powershell -ExecutionPolicy Bypass -File .\install.ps1 --dry-run --with browser
+powershell -ExecutionPolicy Bypass -File .\install.ps1 --uninstall --with browser
+```
+:::
+
+Helpers are copied to `$HERMES_HOME/hstack/bin`. MCP entries use an `hstack_` prefix in `config.yaml`. `--dry-run` writes nothing. `--uninstall` without `--with` removes the skills and every add-on this installer created.
+
+| Flag | What you get |
+|---|---|
+| `browser` | Playwright MCP at `@playwright/mcp@0.0.83`, plus `hstack-visdiff` |
+| `github` | `hstack-pr`, one `gh` snapshot |
+| `docs` | Context7 MCP, URL only |
+| `search` | DeepWiki MCP, URL only |
+| `perf` | `hstack-bench` |
+| `test` | `hstack-test` |
+| `security` | `hstack-scan`, only if gitleaks or osv-scanner is already installed |
+| `trail` | `hstack-decisions` |
+
+The browser server is `npx -y @playwright/mcp@0.0.83` under `mcp_servers.hstack_playwright`. Docs and search store a URL and no token: `https://mcp.context7.com/mcp` and `https://mcp.deepwiki.com/mcp`.

site/content/docs/index.md

@@ -0,0 +1,20 @@
+---
+title: Getting started
+description: Twelve Hermes Agent skills. One router stays in the index. A playbook loads only when the task needs it.
+---
+
+HStack is twelve skills for Hermes Agent. Frame the job, shape the change, prove it, and open the pull request. The index stays small because only the router is required reading.
+
+Skills land in `~/.hermes/skills/hstack/`. Set `HERMES_HOME` when Hermes lives somewhere else. A default install is skills only. Browser, GitHub, docs, search, benchmarks, tests, security scans, and the decision trail stay off until you name them.
+
+`/hstack` is the one to remember. It loads a catalog, picks one playbook, and stops. Name another skill when you already know the step.
+
+```text session
+/hstack the export drops rows over 10 MB
+/reframe
+/ship
+```
+
+The planning path is `hstack`, `reframe`, and `shape`: 965 tokens, under 2% of GStack's planning load on Hermes. The idle index is 204 tokens. All twelve `SKILL.md` bodies are 3,820. Counts use Hermes's estimator, `ceil(bytes / 4)`.
+
+Playbooks live under `skills/hstack/hstack/references/` and load one at a time. The [skills index](/skills) lists each skill. [Parity](/parity) has one row for every GStack, TStack, and PStack feature that was inventoried.

site/content/docs/install.md

@@ -0,0 +1,67 @@
+---
+title: Install
+description: Install HStack from hstack.sh on macOS, Linux, or Windows. Dry-run, uninstall, and version pin use the same flags.
+---
+
+The installer downloads `install.sh` and the skill archive from hstack.sh, checks the sha256, and extracts into the Hermes skills directory. It does not clone the repository.
+
+:::tabs
+:::tab macOS / Linux
+```sh install.sh
+# archive is checked with sha256 before extract
+curl -fsSL https://hstack.sh/install | sh
+```
+:::tab Windows
+```powershell install.ps1
+irm https://hstack.sh/install.ps1 -OutFile install.ps1
+powershell -ExecutionPolicy Bypass -File .\install.ps1
+```
+:::
+
+:::note
+`irm | iex` does not pass `--dry-run`, `--uninstall`, or `--with`. `install.ps1` reads those flags from `$args` when PowerShell runs the file with `-File`.
+:::
+
+From a checkout of the repo, `sh install.sh` installs the skills beside the script. A second run replaces the HStack skills and leaves every other skill alone.
+
+## Dry-run
+
+Dry-run prints the plan and writes nothing.
+
+:::tabs
+:::tab macOS / Linux
+```sh install.sh
+curl -fsSL https://hstack.sh/install | sh -s -- --dry-run
+```
+:::tab Windows
+```powershell install.ps1
+powershell -ExecutionPolicy Bypass -File .\install.ps1 --dry-run
+```
+:::
+
+## Uninstall
+
+Uninstall removes `skills/hstack` only when this installer created it, and it removes add-ons this installer created. `--uninstall --with browser` removes only that add-on.
+
+:::tabs
+:::tab macOS / Linux
+```sh install.sh
+curl -fsSL https://hstack.sh/install | sh -s -- --uninstall
+```
+:::tab Windows
+```powershell install.ps1
+powershell -ExecutionPolicy Bypass -File .\install.ps1 --uninstall
+```
+:::
+
+## Version and host
+
+`HSTACK_VERSION=0.1.0` pins `hstack-v0.1.0.tar.gz` instead of the latest alias. `HSTACK_BASE_URL` points the download at another host, such as a `*.vercel.app` URL before DNS is in place.
+
+```sh install.sh
+curl -fsSL https://hstack.sh/install | HSTACK_VERSION=0.1.0 sh
+```
+
+The archive is one directory. Inside it: the skills, `scripts/apply_addons.py`, and the `bin/` helpers. The published checksum files are `HEX  filename`, two spaces. A mismatch stops the install and does not write skills.
+
+WSL can run `install.sh`. The Windows script takes the same flags and the same archive.

site/content/integrations.md

@@ -0,0 +1,27 @@
+---
+title: Integrations
+description: What HStack connects to Hermes. Skills are the default. Browser, GitHub, Context7, DeepWiki, and the helper scripts are opt-in.
+---
+
+Hermes already has a browser, a terminal, delegation, and a bundled GitHub skill. HStack does not replace those. Optional add-ons sit beside them and remove cleanly.
+
+| Flag | Configured name | Removes cleanly |
+|---|---|---|
+| `browser` | `mcp_servers.hstack_playwright`, `bin/hstack-visdiff` | yes |
+| `github` | `bin/hstack-pr` | yes |
+| `docs` | `mcp_servers.hstack_context7` | yes |
+| `search` | `mcp_servers.hstack_deepwiki` | yes |
+| `perf` | `bin/hstack-bench` | yes |
+| `test` | `bin/hstack-test` | yes |
+| `security` | `bin/hstack-scan` | yes |
+| `trail` | `bin/hstack-decisions` | yes |
+
+`browser` points at `npx -y @playwright/mcp@0.0.83`. Hermes `browser_exec` stays the default browser. The add-on adds accessibility snapshots and a visual diff helper.
+
+`github` wraps the GitHub CLI. Hermes docs prefer `gh` over the GitHub MCP server. `hstack-pr` takes one snapshot.
+
+`docs` and `search` are URL-only. Context7 is `https://mcp.context7.com/mcp`. DeepWiki is `https://mcp.deepwiki.com/mcp`. No token is written. Local code search stays Hermes `search_files`.
+
+`security` runs gitleaks or osv-scanner only when one of them is already on `PATH`. The installer does not fetch either binary. It also does not download Playwright.
+
+Commands, dry-run, and the Windows `-File` form are on the [add-ons](/docs/addons) page. Upstream inventories are [GStack](https://github.com/garrytan/gstack), [TStack](https://github.com/t3dotgg/tstack), and [PStack](https://github.com/cursor/plugins/tree/main/pstack). Hermes itself is documented at [hermes-agent.nousresearch.com](https://hermes-agent.nousresearch.com/docs/).

site/fonts/LICENSE.txt

@@ -0,0 +1,98 @@
+Paper Mono
+Copyright (c) 2025 Lost Coast Labs, Inc. (Paper Design)
+
+Based on Geist Mono
+Copyright (c) 2023 Vercel, in collaboration with basement.studio
+
+-----------------------------------------------------------
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION AND CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.