superpowers-mcp - npm Package Compare versions

Comparing version

4.3.1

4.3.2

+214

skills/brainstorming/scripts/frame-template.html

		<!DOCTYPE html>
		<html>
		<head>
		<meta charset="utf-8">
		<title>Superpowers Brainstorming</title>
		<style>
		/*
		* BRAINSTORM COMPANION FRAME TEMPLATE
		*
		* This template provides a consistent frame with:
		* - OS-aware light/dark theming
		* - Fixed header and selection indicator bar
		* - Scrollable main content area
		* - CSS helpers for common UI patterns
		*
		* Content is injected via placeholder comment in #claude-content.
		*/

		* { box-sizing: border-box; margin: 0; padding: 0; }
		html, body { height: 100%; overflow: hidden; }

		/* ===== THEME VARIABLES ===== */
		:root {
		--bg-primary: #f5f5f7;
		--bg-secondary: #ffffff;
		--bg-tertiary: #e5e5e7;
		--border: #d1d1d6;
		--text-primary: #1d1d1f;
		--text-secondary: #86868b;
		--text-tertiary: #aeaeb2;
		--accent: #0071e3;
		--accent-hover: #0077ed;
		--success: #34c759;
		--warning: #ff9f0a;
		--error: #ff3b30;
		--selected-bg: #e8f4fd;
		--selected-border: #0071e3;
		}

		@media (prefers-color-scheme: dark) {
		:root {
		--bg-primary: #1d1d1f;
		--bg-secondary: #2d2d2f;
		--bg-tertiary: #3d3d3f;
		--border: #424245;
		--text-primary: #f5f5f7;
		--text-secondary: #86868b;
		--text-tertiary: #636366;
		--accent: #0a84ff;
		--accent-hover: #409cff;
		--selected-bg: rgba(10, 132, 255, 0.15);
		--selected-border: #0a84ff;
		}
		}

		body {
		font-family: system-ui, -apple-system, BlinkMacSystemFont, sans-serif;
		background: var(--bg-primary);
		color: var(--text-primary);
		display: flex;
		flex-direction: column;
		line-height: 1.5;
		}

		/* ===== FRAME STRUCTURE ===== */
		.header {
		background: var(--bg-secondary);
		padding: 0.5rem 1.5rem;
		display: flex;
		justify-content: space-between;
		align-items: center;
		border-bottom: 1px solid var(--border);
		flex-shrink: 0;
		}
		.header h1 { font-size: 0.85rem; font-weight: 500; color: var(--text-secondary); }
		.header .status { font-size: 0.7rem; color: var(--success); display: flex; align-items: center; gap: 0.4rem; }
		.header .status::before { content: ''; width: 6px; height: 6px; background: var(--success); border-radius: 50%; }

		.main { flex: 1; overflow-y: auto; }
		#claude-content { padding: 2rem; min-height: 100%; }

		.indicator-bar {
		background: var(--bg-secondary);
		border-top: 1px solid var(--border);
		padding: 0.5rem 1.5rem;
		flex-shrink: 0;
		text-align: center;
		}
		.indicator-bar span {
		font-size: 0.75rem;
		color: var(--text-secondary);
		}
		.indicator-bar .selected-text {
		color: var(--accent);
		font-weight: 500;
		}

		/* ===== TYPOGRAPHY ===== */
		h2 { font-size: 1.5rem; font-weight: 600; margin-bottom: 0.5rem; }
		h3 { font-size: 1.1rem; font-weight: 600; margin-bottom: 0.25rem; }
		.subtitle { color: var(--text-secondary); margin-bottom: 1.5rem; }
		.section { margin-bottom: 2rem; }
		.label { font-size: 0.7rem; color: var(--text-secondary); text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 0.5rem; }

		/* ===== OPTIONS (for A/B/C choices) ===== */
		.options { display: flex; flex-direction: column; gap: 0.75rem; }
		.option {
		background: var(--bg-secondary);
		border: 2px solid var(--border);
		border-radius: 12px;
		padding: 1rem 1.25rem;
		cursor: pointer;
		transition: all 0.15s ease;
		display: flex;
		align-items: flex-start;
		gap: 1rem;
		}
		.option:hover { border-color: var(--accent); }
		.option.selected { background: var(--selected-bg); border-color: var(--selected-border); }
		.option .letter {
		background: var(--bg-tertiary);
		color: var(--text-secondary);
		width: 1.75rem; height: 1.75rem;
		border-radius: 6px;
		display: flex; align-items: center; justify-content: center;
		font-weight: 600; font-size: 0.85rem; flex-shrink: 0;
		}
		.option.selected .letter { background: var(--accent); color: white; }
		.option .content { flex: 1; }
		.option .content h3 { font-size: 0.95rem; margin-bottom: 0.15rem; }
		.option .content p { color: var(--text-secondary); font-size: 0.85rem; margin: 0; }

		/* ===== CARDS (for showing designs/mockups) ===== */
		.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); gap: 1rem; }
		.card {
		background: var(--bg-secondary);
		border: 1px solid var(--border);
		border-radius: 12px;
		overflow: hidden;
		cursor: pointer;
		transition: all 0.15s ease;
		}
		.card:hover { border-color: var(--accent); transform: translateY(-2px); box-shadow: 0 4px 12px rgba(0,0,0,0.1); }
		.card.selected { border-color: var(--selected-border); border-width: 2px; }
		.card-image { background: var(--bg-tertiary); aspect-ratio: 16/10; display: flex; align-items: center; justify-content: center; }
		.card-body { padding: 1rem; }
		.card-body h3 { margin-bottom: 0.25rem; }
		.card-body p { color: var(--text-secondary); font-size: 0.85rem; }

		/* ===== MOCKUP CONTAINER ===== */
		.mockup {
		background: var(--bg-secondary);
		border: 1px solid var(--border);
		border-radius: 12px;
		overflow: hidden;
		margin-bottom: 1.5rem;
		}
		.mockup-header {
		background: var(--bg-tertiary);
		padding: 0.5rem 1rem;
		font-size: 0.75rem;
		color: var(--text-secondary);
		border-bottom: 1px solid var(--border);
		}
		.mockup-body { padding: 1.5rem; }

		/* ===== SPLIT VIEW (side-by-side comparison) ===== */
		.split { display: grid; grid-template-columns: 1fr 1fr; gap: 1.5rem; }
		@media (max-width: 700px) { .split { grid-template-columns: 1fr; } }

		/* ===== PROS/CONS ===== */
		.pros-cons { display: grid; grid-template-columns: 1fr 1fr; gap: 1rem; margin: 1rem 0; }
		.pros, .cons { background: var(--bg-secondary); border-radius: 8px; padding: 1rem; }
		.pros h4 { color: var(--success); font-size: 0.85rem; margin-bottom: 0.5rem; }
		.cons h4 { color: var(--error); font-size: 0.85rem; margin-bottom: 0.5rem; }
		.pros ul, .cons ul { margin-left: 1.25rem; font-size: 0.85rem; color: var(--text-secondary); }
		.pros li, .cons li { margin-bottom: 0.25rem; }

		/* ===== PLACEHOLDER (for mockup areas) ===== */
		.placeholder {
		background: var(--bg-tertiary);
		border: 2px dashed var(--border);
		border-radius: 8px;
		padding: 2rem;
		text-align: center;
		color: var(--text-tertiary);
		}

		/* ===== INLINE MOCKUP ELEMENTS ===== */
		.mock-nav { background: var(--accent); color: white; padding: 0.75rem 1rem; display: flex; gap: 1.5rem; font-size: 0.9rem; }
		.mock-sidebar { background: var(--bg-tertiary); padding: 1rem; min-width: 180px; }
		.mock-content { padding: 1.5rem; flex: 1; }
		.mock-button { background: var(--accent); color: white; border: none; padding: 0.5rem 1rem; border-radius: 6px; font-size: 0.85rem; }
		.mock-input { background: var(--bg-primary); border: 1px solid var(--border); border-radius: 6px; padding: 0.5rem; width: 100%; }
		</style>
		</head>
		<body>
		<div class="header">
		<h1><a href="https://github.com/obra/superpowers" style="color: inherit; text-decoration: none;">Superpowers Brainstorming</a></h1>
		<div class="status">Connected</div>
		</div>

		<div class="main">
		<div id="claude-content">
		<!-- CONTENT -->
		</div>
		</div>

		<div class="indicator-bar">
		<span id="indicator-text">Click an option above, then return to the terminal</span>
		</div>

		</body>
		</html>

+98

skills/brainstorming/scripts/helper.js

		(function() {
		const WS_URL = 'ws://' + window.location.host;
		let ws = null;
		let eventQueue = [];

		function connect() {
		ws = new WebSocket(WS_URL);

		ws.onopen = () => {
		eventQueue.forEach(e => ws.send(JSON.stringify(e)));
		eventQueue = [];
		};

		ws.onmessage = (msg) => {
		const data = JSON.parse(msg.data);
		if (data.type === 'reload') {
		window.location.reload();
		}
		};

		ws.onclose = () => {
		setTimeout(connect, 1000);
		};
		}

		function sendEvent(event) {
		event.timestamp = Date.now();
		if (ws && ws.readyState === WebSocket.OPEN) {
		ws.send(JSON.stringify(event));
		} else {
		eventQueue.push(event);
		}
		}

		// Capture clicks on choice elements
		document.addEventListener('click', (e) => {
		const target = e.target.closest('[data-choice]');
		if (!target) return;

		sendEvent({
		type: 'click',
		text: target.textContent.trim(),
		choice: target.dataset.choice,
		id: target.id \|\| null
		});

		// Update indicator bar (defer so toggleSelect runs first)
		setTimeout(() => {
		const indicator = document.getElementById('indicator-text');
		if (!indicator) return;
		const container = target.closest('.options') \|\| target.closest('.cards');
		const selected = container ? container.querySelectorAll('.selected') : [];
		if (selected.length === 0) {
		indicator.textContent = 'Click an option above, then return to the terminal';
		} else if (selected.length === 1) {
		const label = selected[0].querySelector('h3, .content h3, .card-body h3')?.textContent?.trim() \|\| selected[0].dataset.choice;
		indicator.textContent = '';
		const span = document.createElement('span');
		span.className = 'selected-text';
		span.textContent = label + ' selected';
		indicator.appendChild(span);
		indicator.appendChild(document.createTextNode(' — return to terminal to continue'));
		} else {
		indicator.textContent = '';
		const span = document.createElement('span');
		span.className = 'selected-text';
		span.textContent = selected.length + ' selected';
		indicator.appendChild(span);
		indicator.appendChild(document.createTextNode(' — return to terminal to continue'));
		}
		}, 0);
		});

		// Frame UI: selection tracking
		window.selectedChoice = null;

		window.toggleSelect = function(el) {
		const container = el.closest('.options') \|\| el.closest('.cards');
		const multi = container && container.dataset.multiselect !== undefined;
		if (container && !multi) {
		container.querySelectorAll('.option, .card').forEach(o => o.classList.remove('selected'));
		}
		if (multi) {
		el.classList.toggle('selected');
		} else {
		el.classList.add('selected');
		}
		window.selectedChoice = el.dataset.choice;
		};

		// Expose API for explicit use
		window.brainstorm = {
		send: sendEvent,
		choice: (value, metadata = {}) => sendEvent({ type: 'choice', value, ...metadata })
		};

		connect();
		})();

+354

skills/brainstorming/scripts/server.cjs

		const crypto = require('crypto');
		const http = require('http');
		const fs = require('fs');
		const path = require('path');

		// ========== WebSocket Protocol (RFC 6455) ==========

		const OPCODES = { TEXT: 0x01, CLOSE: 0x08, PING: 0x09, PONG: 0x0A };
		const WS_MAGIC = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';

		function computeAcceptKey(clientKey) {
		return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64');
		}

		function encodeFrame(opcode, payload) {
		const fin = 0x80;
		const len = payload.length;
		let header;

		if (len < 126) {
		header = Buffer.alloc(2);
		header[0] = fin \| opcode;
		header[1] = len;
		} else if (len < 65536) {
		header = Buffer.alloc(4);
		header[0] = fin \| opcode;
		header[1] = 126;
		header.writeUInt16BE(len, 2);
		} else {
		header = Buffer.alloc(10);
		header[0] = fin \| opcode;
		header[1] = 127;
		header.writeBigUInt64BE(BigInt(len), 2);
		}

		return Buffer.concat([header, payload]);
		}

		function decodeFrame(buffer) {
		if (buffer.length < 2) return null;

		const secondByte = buffer[1];
		const opcode = buffer[0] & 0x0F;
		const masked = (secondByte & 0x80) !== 0;
		let payloadLen = secondByte & 0x7F;
		let offset = 2;

		if (!masked) throw new Error('Client frames must be masked');

		if (payloadLen === 126) {
		if (buffer.length < 4) return null;
		payloadLen = buffer.readUInt16BE(2);
		offset = 4;
		} else if (payloadLen === 127) {
		if (buffer.length < 10) return null;
		payloadLen = Number(buffer.readBigUInt64BE(2));
		offset = 10;
		}

		const maskOffset = offset;
		const dataOffset = offset + 4;
		const totalLen = dataOffset + payloadLen;
		if (buffer.length < totalLen) return null;

		const mask = buffer.slice(maskOffset, dataOffset);
		const data = Buffer.alloc(payloadLen);
		for (let i = 0; i < payloadLen; i++) {
		data[i] = buffer[dataOffset + i] ^ mask[i % 4];
		}

		return { opcode, payload: data, bytesConsumed: totalLen };
		}

		// ========== Configuration ==========

		const PORT = process.env.BRAINSTORM_PORT \|\| (49152 + Math.floor(Math.random() * 16383));
		const HOST = process.env.BRAINSTORM_HOST \|\| '127.0.0.1';
		const URL_HOST = process.env.BRAINSTORM_URL_HOST \|\| (HOST === '127.0.0.1' ? 'localhost' : HOST);
		const SESSION_DIR = process.env.BRAINSTORM_DIR \|\| '/tmp/brainstorm';
		const CONTENT_DIR = path.join(SESSION_DIR, 'content');
		const STATE_DIR = path.join(SESSION_DIR, 'state');
		let ownerPid = process.env.BRAINSTORM_OWNER_PID ? Number(process.env.BRAINSTORM_OWNER_PID) : null;

		const MIME_TYPES = {
		'.html': 'text/html', '.css': 'text/css', '.js': 'application/javascript',
		'.json': 'application/json', '.png': 'image/png', '.jpg': 'image/jpeg',
		'.jpeg': 'image/jpeg', '.gif': 'image/gif', '.svg': 'image/svg+xml'
		};

		// ========== Templates and Constants ==========

		const WAITING_PAGE = `<!DOCTYPE html>
		<html>
		<head><meta charset="utf-8"><title>Brainstorm Companion</title>
		<style>body { font-family: system-ui, sans-serif; padding: 2rem; max-width: 800px; margin: 0 auto; }
		h1 { color: #333; } p { color: #666; }</style>
		</head>
		<body><h1>Brainstorm Companion</h1>
		<p>Waiting for the agent to push a screen...</p></body></html>`;

		const frameTemplate = fs.readFileSync(path.join(__dirname, 'frame-template.html'), 'utf-8');
		const helperScript = fs.readFileSync(path.join(__dirname, 'helper.js'), 'utf-8');
		const helperInjection = '<script>\n' + helperScript + '\n</script>';

		// ========== Helper Functions ==========

		function isFullDocument(html) {
		const trimmed = html.trimStart().toLowerCase();
		return trimmed.startsWith('<!doctype') \|\| trimmed.startsWith('<html');
		}

		function wrapInFrame(content) {
		return frameTemplate.replace('<!-- CONTENT -->', content);
		}

		function getNewestScreen() {
		const files = fs.readdirSync(CONTENT_DIR)
		.filter(f => f.endsWith('.html'))
		.map(f => {
		const fp = path.join(CONTENT_DIR, f);
		return { path: fp, mtime: fs.statSync(fp).mtime.getTime() };
		})
		.sort((a, b) => b.mtime - a.mtime);
		return files.length > 0 ? files[0].path : null;
		}

		// ========== HTTP Request Handler ==========

		function handleRequest(req, res) {
		touchActivity();
		if (req.method === 'GET' && req.url === '/') {
		const screenFile = getNewestScreen();
		let html = screenFile
		? (raw => isFullDocument(raw) ? raw : wrapInFrame(raw))(fs.readFileSync(screenFile, 'utf-8'))
		: WAITING_PAGE;

		if (html.includes('</body>')) {
		html = html.replace('</body>', helperInjection + '\n</body>');
		} else {
		html += helperInjection;
		}

		res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
		res.end(html);
		} else if (req.method === 'GET' && req.url.startsWith('/files/')) {
		const fileName = req.url.slice(7);
		const filePath = path.join(CONTENT_DIR, path.basename(fileName));
		if (!fs.existsSync(filePath)) {
		res.writeHead(404);
		res.end('Not found');
		return;
		}
		const ext = path.extname(filePath).toLowerCase();
		const contentType = MIME_TYPES[ext] \|\| 'application/octet-stream';
		res.writeHead(200, { 'Content-Type': contentType });
		res.end(fs.readFileSync(filePath));
		} else {
		res.writeHead(404);
		res.end('Not found');
		}
		}

		// ========== WebSocket Connection Handling ==========

		const clients = new Set();

		function handleUpgrade(req, socket) {
		const key = req.headers['sec-websocket-key'];
		if (!key) { socket.destroy(); return; }

		const accept = computeAcceptKey(key);
		socket.write(
		'HTTP/1.1 101 Switching Protocols\r\n' +
		'Upgrade: websocket\r\n' +
		'Connection: Upgrade\r\n' +
		'Sec-WebSocket-Accept: ' + accept + '\r\n\r\n'
		);

		let buffer = Buffer.alloc(0);
		clients.add(socket);

		socket.on('data', (chunk) => {
		buffer = Buffer.concat([buffer, chunk]);
		while (buffer.length > 0) {
		let result;
		try {
		result = decodeFrame(buffer);
		} catch (e) {
		socket.end(encodeFrame(OPCODES.CLOSE, Buffer.alloc(0)));
		clients.delete(socket);
		return;
		}
		if (!result) break;
		buffer = buffer.slice(result.bytesConsumed);

		switch (result.opcode) {
		case OPCODES.TEXT:
		handleMessage(result.payload.toString());
		break;
		case OPCODES.CLOSE:
		socket.end(encodeFrame(OPCODES.CLOSE, Buffer.alloc(0)));
		clients.delete(socket);
		return;
		case OPCODES.PING:
		socket.write(encodeFrame(OPCODES.PONG, result.payload));
		break;
		case OPCODES.PONG:
		break;
		default: {
		const closeBuf = Buffer.alloc(2);
		closeBuf.writeUInt16BE(1003);
		socket.end(encodeFrame(OPCODES.CLOSE, closeBuf));
		clients.delete(socket);
		return;
		}
		}
		}
		});

		socket.on('close', () => clients.delete(socket));
		socket.on('error', () => clients.delete(socket));
		}

		function handleMessage(text) {
		let event;
		try {
		event = JSON.parse(text);
		} catch (e) {
		console.error('Failed to parse WebSocket message:', e.message);
		return;
		}
		touchActivity();
		console.log(JSON.stringify({ source: 'user-event', ...event }));
		if (event.choice) {
		const eventsFile = path.join(STATE_DIR, 'events');
		fs.appendFileSync(eventsFile, JSON.stringify(event) + '\n');
		}
		}

		function broadcast(msg) {
		const frame = encodeFrame(OPCODES.TEXT, Buffer.from(JSON.stringify(msg)));
		for (const socket of clients) {
		try { socket.write(frame); } catch (e) { clients.delete(socket); }
		}
		}

		// ========== Activity Tracking ==========

		const IDLE_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
		let lastActivity = Date.now();

		function touchActivity() {
		lastActivity = Date.now();
		}

		// ========== File Watching ==========

		const debounceTimers = new Map();

		// ========== Server Startup ==========

		function startServer() {
		if (!fs.existsSync(CONTENT_DIR)) fs.mkdirSync(CONTENT_DIR, { recursive: true });
		if (!fs.existsSync(STATE_DIR)) fs.mkdirSync(STATE_DIR, { recursive: true });

		// Track known files to distinguish new screens from updates.
		// macOS fs.watch reports 'rename' for both new files and overwrites,
		// so we can't rely on eventType alone.
		const knownFiles = new Set(
		fs.readdirSync(CONTENT_DIR).filter(f => f.endsWith('.html'))
		);

		const server = http.createServer(handleRequest);
		server.on('upgrade', handleUpgrade);

		const watcher = fs.watch(CONTENT_DIR, (eventType, filename) => {
		if (!filename \|\| !filename.endsWith('.html')) return;

		if (debounceTimers.has(filename)) clearTimeout(debounceTimers.get(filename));
		debounceTimers.set(filename, setTimeout(() => {
		debounceTimers.delete(filename);
		const filePath = path.join(CONTENT_DIR, filename);

		if (!fs.existsSync(filePath)) return; // file was deleted
		touchActivity();

		if (!knownFiles.has(filename)) {
		knownFiles.add(filename);
		const eventsFile = path.join(STATE_DIR, 'events');
		if (fs.existsSync(eventsFile)) fs.unlinkSync(eventsFile);
		console.log(JSON.stringify({ type: 'screen-added', file: filePath }));
		} else {
		console.log(JSON.stringify({ type: 'screen-updated', file: filePath }));
		}

		broadcast({ type: 'reload' });
		}, 100));
		});
		watcher.on('error', (err) => console.error('fs.watch error:', err.message));

		function shutdown(reason) {
		console.log(JSON.stringify({ type: 'server-stopped', reason }));
		const infoFile = path.join(STATE_DIR, 'server-info');
		if (fs.existsSync(infoFile)) fs.unlinkSync(infoFile);
		fs.writeFileSync(
		path.join(STATE_DIR, 'server-stopped'),
		JSON.stringify({ reason, timestamp: Date.now() }) + '\n'
		);
		watcher.close();
		clearInterval(lifecycleCheck);
		server.close(() => process.exit(0));
		}

		function ownerAlive() {
		if (!ownerPid) return true;
		try { process.kill(ownerPid, 0); return true; } catch (e) { return e.code === 'EPERM'; }
		}

		// Check every 60s: exit if owner process died or idle for 30 minutes
		const lifecycleCheck = setInterval(() => {
		if (!ownerAlive()) shutdown('owner process exited');
		else if (Date.now() - lastActivity > IDLE_TIMEOUT_MS) shutdown('idle timeout');
		}, 60 * 1000);
		lifecycleCheck.unref();

		// Validate owner PID at startup. If it's already dead, the PID resolution
		// was wrong (common on WSL, Tailscale SSH, and cross-user scenarios).
		// Disable monitoring and rely on the idle timeout instead.
		if (ownerPid) {
		try { process.kill(ownerPid, 0); }
		catch (e) {
		if (e.code !== 'EPERM') {
		console.log(JSON.stringify({ type: 'owner-pid-invalid', pid: ownerPid, reason: 'dead at startup' }));
		ownerPid = null;
		}
		}
		}

		server.listen(PORT, HOST, () => {
		const info = JSON.stringify({
		type: 'server-started', port: Number(PORT), host: HOST,
		url_host: URL_HOST, url: 'http://' + URL_HOST + ':' + PORT,
		screen_dir: CONTENT_DIR, state_dir: STATE_DIR
		});
		console.log(info);
		fs.writeFileSync(path.join(STATE_DIR, 'server-info'), info + '\n');
		});
		}

		if (require.main === module) {
		startServer();
		}

		module.exports = { computeAcceptKey, encodeFrame, decodeFrame, OPCODES };

+148

skills/brainstorming/scripts/start-server.sh

		#!/usr/bin/env bash
		# Start the brainstorm server and output connection info
		# Usage: start-server.sh [--project-dir <path>] [--host <bind-host>] [--url-host <display-host>] [--foreground] [--background]
		#
		# Starts server on a random high port, outputs JSON with URL.
		# Each session gets its own directory to avoid conflicts.
		#
		# Options:
		# --project-dir <path> Store session files under <path>/.superpowers/brainstorm/
		# instead of /tmp. Files persist after server stops.
		# --host <bind-host> Host/interface to bind (default: 127.0.0.1).
		# Use 0.0.0.0 in remote/containerized environments.
		# --url-host <host> Hostname shown in returned URL JSON.
		# --foreground Run server in the current terminal (no backgrounding).
		# --background Force background mode (overrides Codex auto-foreground).

		SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"

		# Parse arguments
		PROJECT_DIR=""
		FOREGROUND="false"
		FORCE_BACKGROUND="false"
		BIND_HOST="127.0.0.1"
		URL_HOST=""
		while [[ $# -gt 0 ]]; do
		case "$1" in
		--project-dir)
		PROJECT_DIR="$2"
		shift 2
		;;
		--host)
		BIND_HOST="$2"
		shift 2
		;;
		--url-host)
		URL_HOST="$2"
		shift 2
		;;
		--foreground\|--no-daemon)
		FOREGROUND="true"
		shift
		;;
		--background\|--daemon)
		FORCE_BACKGROUND="true"
		shift
		;;
		*)
		echo "{\"error\": \"Unknown argument: $1\"}"
		exit 1
		;;
		esac
		done

		if [[ -z "$URL_HOST" ]]; then
		if [[ "$BIND_HOST" == "127.0.0.1" \|\| "$BIND_HOST" == "localhost" ]]; then
		URL_HOST="localhost"
		else
		URL_HOST="$BIND_HOST"
		fi
		fi

		# Some environments reap detached/background processes. Auto-foreground when detected.
		if [[ -n "${CODEX_CI:-}" && "$FOREGROUND" != "true" && "$FORCE_BACKGROUND" != "true" ]]; then
		FOREGROUND="true"
		fi

		# Windows/Git Bash reaps nohup background processes. Auto-foreground when detected.
		if [[ "$FOREGROUND" != "true" && "$FORCE_BACKGROUND" != "true" ]]; then
		case "${OSTYPE:-}" in
		msys\|cygwin\|mingw*) FOREGROUND="true" ;;
		esac
		if [[ -n "${MSYSTEM:-}" ]]; then
		FOREGROUND="true"
		fi
		fi

		# Generate unique session directory
		SESSION_ID="$$-$(date +%s)"

		if [[ -n "$PROJECT_DIR" ]]; then
		SESSION_DIR="${PROJECT_DIR}/.superpowers/brainstorm/${SESSION_ID}"
		else
		SESSION_DIR="/tmp/brainstorm-${SESSION_ID}"
		fi

		STATE_DIR="${SESSION_DIR}/state"
		PID_FILE="${STATE_DIR}/server.pid"
		LOG_FILE="${STATE_DIR}/server.log"

		# Create fresh session directory with content and state peers
		mkdir -p "${SESSION_DIR}/content" "$STATE_DIR"

		# Kill any existing server
		if [[ -f "$PID_FILE" ]]; then
		old_pid=$(cat "$PID_FILE")
		kill "$old_pid" 2>/dev/null
		rm -f "$PID_FILE"
		fi

		cd "$SCRIPT_DIR"

		# Resolve the harness PID (grandparent of this script).
		# $PPID is the ephemeral shell the harness spawned to run us — it dies
		# when this script exits. The harness itself is $PPID's parent.
		OWNER_PID="$(ps -o ppid= -p "$PPID" 2>/dev/null \| tr -d ' ')"
		if [[ -z "$OWNER_PID" \|\| "$OWNER_PID" == "1" ]]; then
		OWNER_PID="$PPID"
		fi

		# Foreground mode for environments that reap detached/background processes.
		if [[ "$FOREGROUND" == "true" ]]; then
		echo "$$" > "$PID_FILE"
		env BRAINSTORM_DIR="$SESSION_DIR" BRAINSTORM_HOST="$BIND_HOST" BRAINSTORM_URL_HOST="$URL_HOST" BRAINSTORM_OWNER_PID="$OWNER_PID" node server.cjs
		exit $?
		fi

		# Start server, capturing output to log file
		# Use nohup to survive shell exit; disown to remove from job table
		nohup env BRAINSTORM_DIR="$SESSION_DIR" BRAINSTORM_HOST="$BIND_HOST" BRAINSTORM_URL_HOST="$URL_HOST" BRAINSTORM_OWNER_PID="$OWNER_PID" node server.cjs > "$LOG_FILE" 2>&1 &
		SERVER_PID=$!
		disown "$SERVER_PID" 2>/dev/null
		echo "$SERVER_PID" > "$PID_FILE"

		# Wait for server-started message (check log file)
		for i in {1..50}; do
		if grep -q "server-started" "$LOG_FILE" 2>/dev/null; then
		# Verify server is still alive after a short window (catches process reapers)
		alive="true"
		for _ in {1..20}; do
		if ! kill -0 "$SERVER_PID" 2>/dev/null; then
		alive="false"
		break
		fi
		sleep 0.1
		done
		if [[ "$alive" != "true" ]]; then
		echo "{\"error\": \"Server started but was killed. Retry in a persistent terminal with: $SCRIPT_DIR/start-server.sh${PROJECT_DIR:+ --project-dir $PROJECT_DIR} --host $BIND_HOST --url-host $URL_HOST --foreground\"}"
		exit 1
		fi
		grep "server-started" "$LOG_FILE" \| head -1
		exit 0
		fi
		sleep 0.1
		done

		# Timeout - server didn't start
		echo '{"error": "Server failed to start within 5 seconds"}'
		exit 1

+56

skills/brainstorming/scripts/stop-server.sh

		#!/usr/bin/env bash
		# Stop the brainstorm server and clean up
		# Usage: stop-server.sh <session_dir>
		#
		# Kills the server process. Only deletes session directory if it's
		# under /tmp (ephemeral). Persistent directories (.superpowers/) are
		# kept so mockups can be reviewed later.

		SESSION_DIR="$1"

		if [[ -z "$SESSION_DIR" ]]; then
		echo '{"error": "Usage: stop-server.sh <session_dir>"}'
		exit 1
		fi

		STATE_DIR="${SESSION_DIR}/state"
		PID_FILE="${STATE_DIR}/server.pid"

		if [[ -f "$PID_FILE" ]]; then
		pid=$(cat "$PID_FILE")

		# Try to stop gracefully, fallback to force if still alive
		kill "$pid" 2>/dev/null \|\| true

		# Wait for graceful shutdown (up to ~2s)
		for i in {1..20}; do
		if ! kill -0 "$pid" 2>/dev/null; then
		break
		fi
		sleep 0.1
		done

		# If still running, escalate to SIGKILL
		if kill -0 "$pid" 2>/dev/null; then
		kill -9 "$pid" 2>/dev/null \|\| true

		# Give SIGKILL a moment to take effect
		sleep 0.1
		fi

		if kill -0 "$pid" 2>/dev/null; then
		echo '{"status": "failed", "error": "process still running"}'
		exit 1
		fi

		rm -f "$PID_FILE" "${STATE_DIR}/server.log"

		# Only delete ephemeral /tmp directories
		if [[ "$SESSION_DIR" == /tmp/* ]]; then
		rm -rf "$SESSION_DIR"
		fi

		echo '{"status": "stopped"}'
		else
		echo '{"status": "not_running"}'
		fi

+49

skills/brainstorming/spec-document-reviewer-prompt.md

		# Spec Document Reviewer Prompt Template

		Use this template when dispatching a spec document reviewer subagent.

		Purpose: Verify the spec is complete, consistent, and ready for implementation planning.

		Dispatch after: Spec document is written to docs/superpowers/specs/

		```
		Task tool (general-purpose):
		description: "Review spec document"
		prompt: \|
		You are a spec document reviewer. Verify this spec is complete and ready for planning.

		Spec to review: [SPEC_FILE_PATH]

		## What to Check

		\| Category \| What to Look For \|
		\|----------\|------------------\|
		\| Completeness \| TODOs, placeholders, "TBD", incomplete sections \|
		\| Consistency \| Internal contradictions, conflicting requirements \|
		\| Clarity \| Requirements ambiguous enough to cause someone to build the wrong thing \|
		\| Scope \| Focused enough for a single plan — not covering multiple independent subsystems \|
		\| YAGNI \| Unrequested features, over-engineering \|

		## Calibration

		Only flag issues that would cause real problems during implementation planning.
		A missing section, a contradiction, or a requirement so ambiguous it could be
		interpreted two different ways — those are issues. Minor wording improvements,
		stylistic preferences, and "sections less detailed than others" are not.

		Approve unless there are serious gaps that would lead to a flawed plan.

		## Output Format

		## Spec Review

		Status: Approved \| Issues Found

		Issues (if any):
		- [Section X]: [specific issue] - [why it matters for planning]

		Recommendations (advisory, do not block approval):
		- [suggestions for improvement]
		```

		Reviewer returns: Status, Issues (if any), Recommendations

+287

skills/brainstorming/visual-companion.md

		# Visual Companion Guide

		Browser-based visual brainstorming companion for showing mockups, diagrams, and options.

		## When to Use

		Decide per-question, not per-session. The test: would the user understand this better by seeing it than reading it?

		Use the browser when the content itself is visual:

		- UI mockups — wireframes, layouts, navigation structures, component designs
		- Architecture diagrams — system components, data flow, relationship maps
		- Side-by-side visual comparisons — comparing two layouts, two color schemes, two design directions
		- Design polish — when the question is about look and feel, spacing, visual hierarchy
		- Spatial relationships — state machines, flowcharts, entity relationships rendered as diagrams

		Use the terminal when the content is text or tabular:

		- Requirements and scope questions — "what does X mean?", "which features are in scope?"
		- Conceptual A/B/C choices — picking between approaches described in words
		- Tradeoff lists — pros/cons, comparison tables
		- Technical decisions — API design, data modeling, architectural approach selection
		- Clarifying questions — anything where the answer is words, not a visual preference

		A question about a UI topic is not automatically a visual question. "What kind of wizard do you want?" is conceptual — use the terminal. "Which of these wizard layouts feels right?" is visual — use the browser.

		## How It Works

		The server watches a directory for HTML files and serves the newest one to the browser. You write HTML content to `screen_dir`, the user sees it in their browser and can click to select options. Selections are recorded to `state_dir/events` that you read on your next turn.

		Content fragments vs full documents: If your HTML file starts with `<!DOCTYPE` or `<html`, the server serves it as-is (just injects the helper script). Otherwise, the server automatically wraps your content in the frame template — adding the header, CSS theme, selection indicator, and all interactive infrastructure. Write content fragments by default. Only write full documents when you need complete control over the page.

		## Starting a Session

		```bash
		# Start server with persistence (mockups saved to project)
		scripts/start-server.sh --project-dir /path/to/project

		# Returns: {"type":"server-started","port":52341,"url":"http://localhost:52341",
		# "screen_dir":"/path/to/project/.superpowers/brainstorm/12345-1706000000/content",
		# "state_dir":"/path/to/project/.superpowers/brainstorm/12345-1706000000/state"}
		```

		Save `screen_dir` and `state_dir` from the response. Tell user to open the URL.

		Finding connection info: The server writes its startup JSON to `$STATE_DIR/server-info`. If you launched the server in the background and didn't capture stdout, read that file to get the URL and port. When using `--project-dir`, check `<project>/.superpowers/brainstorm/` for the session directory.

		Note: Pass the project root as `--project-dir` so mockups persist in `.superpowers/brainstorm/` and survive server restarts. Without it, files go to `/tmp` and get cleaned up. Remind the user to add `.superpowers/` to `.gitignore` if it's not already there.

		Launching the server by platform:

		Claude Code (macOS / Linux):
		```bash
		# Default mode works — the script backgrounds the server itself
		scripts/start-server.sh --project-dir /path/to/project
		```

		Claude Code (Windows):
		```bash
		# Windows auto-detects and uses foreground mode, which blocks the tool call.
		# Use run_in_background: true on the Bash tool call so the server survives
		# across conversation turns.
		scripts/start-server.sh --project-dir /path/to/project
		```
		When calling this via the Bash tool, set `run_in_background: true`. Then read `$STATE_DIR/server-info` on the next turn to get the URL and port.

		Codex:
		```bash
		# Codex reaps background processes. The script auto-detects CODEX_CI and
		# switches to foreground mode. Run it normally — no extra flags needed.
		scripts/start-server.sh --project-dir /path/to/project
		```

		Gemini CLI:
		```bash
		# Use --foreground and set is_background: true on your shell tool call
		# so the process survives across turns
		scripts/start-server.sh --project-dir /path/to/project --foreground
		```

		Other environments: The server must keep running in the background across conversation turns. If your environment reaps detached processes, use `--foreground` and launch the command with your platform's background execution mechanism.

		If the URL is unreachable from your browser (common in remote/containerized setups), bind a non-loopback host:

		```bash
		scripts/start-server.sh \
		--project-dir /path/to/project \
		--host 0.0.0.0 \
		--url-host localhost
		```

		Use `--url-host` to control what hostname is printed in the returned URL JSON.

		## The Loop

		1. Check server is alive, then write HTML to a new file in `screen_dir`:
		- Before each write, check that `$STATE_DIR/server-info` exists. If it doesn't (or `$STATE_DIR/server-stopped` exists), the server has shut down — restart it with `start-server.sh` before continuing. The server auto-exits after 30 minutes of inactivity.
		- Use semantic filenames: `platform.html`, `visual-style.html`, `layout.html`
		- Never reuse filenames — each screen gets a fresh file
		- Use Write tool — never use cat/heredoc (dumps noise into terminal)
		- Server automatically serves the newest file

		2. Tell user what to expect and end your turn:
		- Remind them of the URL (every step, not just first)
		- Give a brief text summary of what's on screen (e.g., "Showing 3 layout options for the homepage")
		- Ask them to respond in the terminal: "Take a look and let me know what you think. Click to select an option if you'd like."

		3. On your next turn — after the user responds in the terminal:
		- Read `$STATE_DIR/events` if it exists — this contains the user's browser interactions (clicks, selections) as JSON lines
		- Merge with the user's terminal text to get the full picture
		- The terminal message is the primary feedback; `state_dir/events` provides structured interaction data

		4. Iterate or advance — if feedback changes current screen, write a new file (e.g., `layout-v2.html`). Only move to the next question when the current step is validated.

		5. Unload when returning to terminal — when the next step doesn't need the browser (e.g., a clarifying question, a tradeoff discussion), push a waiting screen to clear the stale content:

		```html
		<!-- filename: waiting.html (or waiting-2.html, etc.) -->
		<div style="display:flex;align-items:center;justify-content:center;min-height:60vh">
		<p class="subtitle">Continuing in terminal...</p>
		</div>
		```

		This prevents the user from staring at a resolved choice while the conversation has moved on. When the next visual question comes up, push a new content file as usual.

		6. Repeat until done.

		## Writing Content Fragments

		Write just the content that goes inside the page. The server wraps it in the frame template automatically (header, theme CSS, selection indicator, and all interactive infrastructure).

		Minimal example:

		```html
		<h2>Which layout works better?</h2>
		<p class="subtitle">Consider readability and visual hierarchy</p>

		<div class="options">
		<div class="option" data-choice="a" onclick="toggleSelect(this)">
		<div class="letter">A</div>
		<div class="content">
		<h3>Single Column</h3>
		<p>Clean, focused reading experience</p>
		</div>
		</div>
		<div class="option" data-choice="b" onclick="toggleSelect(this)">
		<div class="letter">B</div>
		<div class="content">
		<h3>Two Column</h3>
		<p>Sidebar navigation with main content</p>
		</div>
		</div>
		</div>
		```

		That's it. No `<html>`, no CSS, no `<script>` tags needed. The server provides all of that.

		## CSS Classes Available

		The frame template provides these CSS classes for your content:

		### Options (A/B/C choices)

		```html
		<div class="options">
		<div class="option" data-choice="a" onclick="toggleSelect(this)">
		<div class="letter">A</div>
		<div class="content">
		<h3>Title</h3>
		<p>Description</p>
		</div>
		</div>
		</div>
		```

		Multi-select: Add `data-multiselect` to the container to let users select multiple options. Each click toggles the item. The indicator bar shows the count.

		```html
		<div class="options" data-multiselect>
		<!-- same option markup — users can select/deselect multiple -->
		</div>
		```

		### Cards (visual designs)

		```html
		<div class="cards">
		<div class="card" data-choice="design1" onclick="toggleSelect(this)">
		<div class="card-image"><!-- mockup content --></div>
		<div class="card-body">
		<h3>Name</h3>
		<p>Description</p>
		</div>
		</div>
		</div>
		```

		### Mockup container

		```html
		<div class="mockup">
		<div class="mockup-header">Preview: Dashboard Layout</div>
		<div class="mockup-body"><!-- your mockup HTML --></div>
		</div>
		```

		### Split view (side-by-side)

		```html
		<div class="split">
		<div class="mockup"><!-- left --></div>
		<div class="mockup"><!-- right --></div>
		</div>
		```

		### Pros/Cons

		```html
		<div class="pros-cons">
		<div class="pros"><h4>Pros</h4><ul><li>Benefit</li></ul></div>
		<div class="cons"><h4>Cons</h4><ul><li>Drawback</li></ul></div>
		</div>
		```

		### Mock elements (wireframe building blocks)

		```html
		<div class="mock-nav">Logo \| Home \| About \| Contact</div>
		<div style="display: flex;">
		<div class="mock-sidebar">Navigation</div>
		<div class="mock-content">Main content area</div>
		</div>
		<button class="mock-button">Action Button</button>
		<input class="mock-input" placeholder="Input field">
		<div class="placeholder">Placeholder area</div>
		```

		### Typography and sections

		- `h2` — page title
		- `h3` — section heading
		- `.subtitle` — secondary text below title
		- `.section` — content block with bottom margin
		- `.label` — small uppercase label text

		## Browser Events Format

		When the user clicks options in the browser, their interactions are recorded to `$STATE_DIR/events` (one JSON object per line). The file is cleared automatically when you push a new screen.

		```jsonl
		{"type":"click","choice":"a","text":"Option A - Simple Layout","timestamp":1706000101}
		{"type":"click","choice":"c","text":"Option C - Complex Grid","timestamp":1706000108}
		{"type":"click","choice":"b","text":"Option B - Hybrid","timestamp":1706000115}
		```

		The full event stream shows the user's exploration path — they may click multiple options before settling. The last `choice` event is typically the final selection, but the pattern of clicks can reveal hesitation or preferences worth asking about.

		If `$STATE_DIR/events` doesn't exist, the user didn't interact with the browser — use only their terminal text.

		## Design Tips

		- Scale fidelity to the question — wireframes for layout, polish for polish questions
		- Explain the question on each page — "Which layout feels more professional?" not just "Pick one"
		- Iterate before advancing — if feedback changes current screen, write a new version
		- 2-4 options max per screen
		- Use real content when it matters — for a photography portfolio, use actual images (Unsplash). Placeholder content obscures design issues.
		- Keep mockups simple — focus on layout and structure, not pixel-perfect design

		## File Naming

		- Use semantic names: `platform.html`, `visual-style.html`, `layout.html`
		- Never reuse filenames — each screen must be a new file
		- For iterations: append version suffix like `layout-v2.html`, `layout-v3.html`
		- Server serves newest file by modification time

		## Cleaning Up

		```bash
		scripts/stop-server.sh $SESSION_DIR
		```

		If the session used `--project-dir`, mockup files persist in `.superpowers/brainstorm/` for later reference. Only `/tmp` sessions get deleted on stop.

		## Reference

		- Frame template (CSS reference): `scripts/frame-template.html`
		- Helper script (client-side): `scripts/helper.js`

+2

-2

package.json

		@@ -5,3 +5,3 @@ {
		"description": "Superpowers skills library (TDD, debugging, collaboration workflows) as an MCP server for VSCode and Antigravity",
		"version": "4.3.1",
		"version": "4.3.2",
		"publisher": "superpowers",
		@@ -44,2 +44,2 @@ "license": "MIT",
		}
		}
		}

+16

-0

README.md

		@@ -5,2 +5,5 @@ # Superpowers MCP Toolpack Usage Guide

		[![Version](https://img.shields.io/badge/version-4.3.2-blue.svg)](https://github.com/Poseidoncode/superpowers-mcp)
		[![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)

		This document summarizes the information and usage instructions for packaging the original Superpowers skills library into an independent MCP Toolpack.
		@@ -91,2 +94,3 @@
		- `brainstorming`: Software design and requirements analysis process
		- NEW: Visual Companion for browser-based mockups and design reviews
		- `writing-plans`: Creating detailed implementation plans
		@@ -126,4 +130,16 @@

		## 🆕 Recent Updates

		### v4.3.2 (Latest)
		- Security: Fixed XSS vulnerability in brainstorming Visual Companion
		- Docs: Updated README and SECURITY with accurate version info

		### v4.3.0
		- Initial MCP server implementation
		- 14 core skills migrated from original Superpowers

		---

		## 🙏 Acknowledgments

		This project is a fork and adaptation of the original [Superpowers](https://github.com/obra/superpowers) project by [obra](https://github.com/obra). We are grateful for their work in defining the agentic skills framework and software development methodology that powers this MCP server.

+16

-0

README.zh-TW.md

		@@ -5,2 +5,5 @@ # Superpowers MCP Toolpack 使用指南

		[![版本](https://img.shields.io/badge/version-4.3.2-blue.svg)](https://github.com/Poseidoncode/superpowers-mcp)
		[![授權](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)

		本文檔總結了將原始 Superpowers 技能庫打包成獨立 MCP Toolpack 的相關資訊與使用說明。
		@@ -91,2 +94,3 @@
		- `brainstorming`: 軟體設計與需求分析流程
		- 新增: Visual Companion 瀏覽器視覺化設計審查工具
		- `writing-plans`: 建立詳細的實作計畫
		@@ -126,4 +130,16 @@

		## 🆕 最近更新

		### v4.3.2 (最新版)
		- 安全性: 修復 brainstorming Visual Companion 中的 XSS 漏洞
		- 文件: 更新 README 和 SECURITY，修正版本資訊

		### v4.3.0
		- 初始 MCP 伺服器實作
		- 從原始 Superpowers 遷移 14 個核心技能

		---

		## 🙏 致謝

		本專案是透過 fork 與改編自 [obra](https://github.com/obra) 的原始 [Superpowers](https://github.com/obra/superpowers) 專案。我們非常感謝他們在定義 Agentic 技能框架與軟體開發方法論上的貢獻，這些成為了這個 MCP Server 的基石。

superpowers-mcp - npm Package Compare versions

New alerts

Fixed alerts

Improved metrics

Worsened metrics