fix: require verification evidence and auto-invoke DESIGN.md compliance checks

.claude-plugin/plugin.json

@@ -0,0 +1,30 @@
+{
+  "name": "hyperstack",
+  "displayName": "Hyperstack",
+  "description": "Disciplined MCP server + skill system. 11 plugins and 79 tools covering designer (6 personalities, 13 page templates, 9 presets), shadcn/ui, design tokens, ui/ux, React Flow v12, Motion v12, Lenis, React 19, Echo, Go, and Rust. 21 skills with adversarial enforcement: Iron Laws, 1% Rule, rationalization tables, and SessionStart hook injection. Forces your agent to use real docs, real DESIGN.md contracts, and real verification before shipping.",
+  "version": "1.0.0",
+  "author": {
+    "name": "Orkait",
+    "email": "orkaitsolutions@gmail.com"
+  },
+  "homepage": "https://github.com/orkait/hyperstack",
+  "repository": "https://github.com/orkait/hyperstack",
+  "license": "MIT",
+  "keywords": [
+    "mcp",
+    "skills",
+    "designer",
+    "design-md",
+    "shadcn",
+    "ui-ux",
+    "design-tokens",
+    "react-flow",
+    "motion",
+    "golang",
+    "rust",
+    "engineering",
+    "anti-slop"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks.json"
+}

.cursor-plugin/plugin.json

@@ -0,0 +1,25 @@
+{
+  "name": "hyperstack",
+  "displayName": "Hyperstack",
+  "description": "Senior Staff Engineer persona + domain knowledge MCP server for React Flow, Motion, Go, Rust, design tokens, and more",
+  "version": "1.0.0",
+  "author": {
+    "name": "Orkait",
+    "email": "orkaitsolutions@gmail.com"
+  },
+  "homepage": "https://github.com/orkait/hyperstack",
+  "repository": "https://github.com/orkait/hyperstack",
+  "license": "MIT",
+  "keywords": [
+    "mcp",
+    "skills",
+    "react-flow",
+    "motion",
+    "golang",
+    "rust",
+    "design-tokens",
+    "engineering"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks-cursor.json"
+}

.dockerignore

@@ -1,5 +1,4 @@
 node_modules/
-src/
 tests/
 docs/
 .git/

.github/workflows/publish.yml

@@ -0,0 +1,97 @@
+name: Verify and Publish Docker image
+
+on:
+  push:
+    branches: ['main']
+  pull_request:
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  verify:
+    name: Verify (${{ matrix.os }}, Bun ${{ matrix.bun-version }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        bun-version: [latest]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: ${{ matrix.bun-version }}
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: bun test
+
+      - name: Type-check
+        run: bun run build
+
+  release-and-publish:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    needs: verify
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Check if version tag exists
+        id: check
+        run: |
+          VERSION=$(jq -r .version package.json)
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          if git ls-remote --tags origin | grep -q "refs/tags/v${VERSION}$"; then
+            echo "new=false" >> $GITHUB_OUTPUT
+          else
+            echo "new=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Create GitHub release
+        if: steps.check.outputs.new == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "v${{ steps.check.outputs.version }}" \
+            --title "v${{ steps.check.outputs.version }}" \
+            --generate-notes
+
+      - name: Log in to GitHub Container Registry
+        if: steps.check.outputs.new == 'true'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        if: steps.check.outputs.new == 'true'
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      - name: Build and push Docker image
+        if: steps.check.outputs.new == 'true'
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+

.gitignore

@@ -1,3 +1,7 @@
 node_modules/
 dist/
 *.js.map
+
+# Research archive — lives at ../knowledgebase/ outside this repo.
+# Ignored here as a safety net in case it gets re-introduced by mistake.
+knowledgebase/

AGENTS.md

@@ -0,0 +1 @@
+@./skills/using-hyperstack/SKILL.md

CREDITS.md

@@ -0,0 +1,32 @@
+# Credits
+
+---
+
+## [obra/superpowers](https://github.com/obra/superpowers)
+
+**License:** MIT © Jesse Vincent
+
+Hyperstack's gate skill enforcement pattern - Iron Laws, 1% Rule, rationalization tables, `<HARD-GATE>` blocks, and the "spirit of the rule is the letter of the rule" clause - was adopted from superpowers. The core insight is that AI compliance gates need to be written adversarially to survive model pressure. We agreed, and built on it.
+
+Five Hyperstack workflow skills (`ship-gate`, `debug-discipline`, `run-plan`, `deliver`, `forge-plan`) are structurally derived from their superpowers equivalents. They have since been extended with MCP integration, DESIGN.md pipeline hooks, and Hyperstack-specific domain content.
+
+Everything else - the MCP server, 11 plugins, 79 tools, designer engine, DESIGN.md pipeline, React Flow / Motion / Lenis / Echo / Go / Rust / design tokens domain content, shadcn expert, and SessionStart hook - has no equivalent in superpowers and is original work.
+
+---
+
+## Research and Prior Art
+
+The designer plugin's knowledge base is distilled from publicly available design research and real-world design systems:
+
+- **Cognitive psychology** - Fitts's Law, Hick's Law, Miller's Law, Gestalt principles, Von Restorff effect, Serial Position effect, Peak-End Rule, Doherty Threshold
+- **UX heuristics** - Jakob Nielsen's 10 usability heuristics
+- **Typography and layout** - Bringhurst's *Elements of Typographic Style*, Müller-Brockmann's grid systems
+- **Design systems** - Patterns observed across Linear, Stripe, Vercel, Apple HIG, Carbon, shadcn, Notion, Supabase, and Figma - used as reference, not reproduced
+
+The design-patterns-skill draws on principles from:
+
+- *Clean Code* - Robert C. Martin
+- *The Pragmatic Programmer* - Hunt and Thomas
+- *Code Complete* - Steve McConnell
+- *Refactoring* - Martin Fowler
+- *Design Patterns* - Gang of Four

Dockerfile

@@ -1,8 +1,7 @@
-FROM node:24-alpine
+FROM oven/bun:alpine
 WORKDIR /app
-COPY package.json package-lock.json ./
-RUN npm ci --omit=dev
-COPY dist/ dist/
-COPY snippets/ snippets/
-USER node
-ENTRYPOINT ["node", "dist/index.js"]
+COPY package.json bun.lock ./
+RUN bun install --frozen-lockfile
+COPY src/ src/
+USER bun
+ENTRYPOINT ["bun", "src/index.ts"]

GEMINI.md

@@ -0,0 +1 @@
+@./skills/using-hyperstack/SKILL.md