@mstar-harness/opencode 0.2.0

package/AGENTS.md

@@ -0,0 +1,9 @@
+# Morning Star - Global Entry
+
+## Morning Star Harness Core
+
+Any code agent working in this repository must read the `mstar-harness-core` skill before starting any non-trivial task, including relevant files in its `references/` directory.
+
+`mstar-harness-core` is the single source of truth for lifecycle gates, routing, host entry behavior, skill loading order, and execution invariants across all `mstar-*` skills.
+
+All other execution behavior remains defined by `mstar-harness-core`.

package/INSTALL.md

@@ -0,0 +1,76 @@
+# Installing Morning Star for OpenCode
+
+## Prerequisites
+
+- [OpenCode.ai](https://opencode.ai) installed
+
+## Installation
+
+Add Morning Star to the `plugin` array in your `opencode.json` (global or project-level).
+
+If you use Superpowers together, use:
+
+```json
+{
+  "plugin": [
+    "superpowers@git+https://github.com/obra/superpowers.git",
+    "@mstar-harness/opencode@latest"
+  ]
+}
+```
+
+Restart OpenCode. The plugin installs from npm and registers Morning Star runtime paths.
+
+## Usage
+
+- Keep your role models and permissions in `opencode.json`.
+- The plugin loads **only paths inside the `@mstar-harness/opencode` package**:
+  - **`harness-skills/`** — copy of Morning Star `skills/` from the release build (`prepublishOnly` runs `bundle-assets` before `bun build`).
+  - **`skills/`** — packaged OpenCode host adapter (e.g. `mstar-host`).
+  - **`harness-agents/`** — copy of repo `agents/` from the same build.
+- It does **not** read `<cwd>/skills` or `<cwd>/agents`, so OpenCode’s `process.cwd()` (your app project root) does not affect harness resolution.
+- Bootstrap prompt entry is injected once with `<IMPORTANT_FOR_HARNESS>`.
+
+## Monorepo / git checkout of this repository
+
+After `bun install` or `npm install` at the repo root, **`postinstall`** runs `packages/opencode`’s `bundle-assets` so `harness-skills/` and `harness-agents/` exist for the plugin entry `main` → `packages/opencode/src/mstar.ts`.
+
+If you use `npm install --ignore-scripts`, run once manually:
+
+`bun run opencode:bundle-assets`
+
+(or `bun run --cwd packages/opencode bundle-assets`).
+
+## Updating
+
+Change the plugin specifier to pick a new dist tag, for example:
+
+```json
+{
+  "plugin": ["@mstar-harness/opencode@latest"]
+}
+```
+
+Restart OpenCode after edits.
+
+## Legacy (git-based) installs
+
+Older configs used:
+
+`morning-star@git+https://github.com/btspoony/mstar-harness.git`
+
+The `@mstar-harness/cli` package (`npx @mstar-harness/cli init`) migrates that entry to `@mstar-harness/opencode@latest`.
+
+## Troubleshooting
+
+### Plugin not loading
+
+1. Check logs: `opencode run --print-logs "hello" 2>&1 | grep -i superpowers`
+2. Verify the plugin line in your `opencode.json`
+3. Make sure you're running a recent version of OpenCode
+
+### Skills not found
+
+1. Use `skill` tool to list what's discovered
+2. Check that the plugin is loading (see above)
+3. For **npm** installs, use a published build (tarball includes `harness-skills`). For **git** checkout, ensure install scripts ran (`postinstall` / `bun run opencode:bundle-assets`)

package/dist/mstar.js

@@ -0,0 +1,175 @@
+// src/mstar.ts
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+var __dirname2 = path.dirname(fileURLToPath(import.meta.url));
+var packageRoot = path.resolve(__dirname2, "..");
+var bundledSkillsDir = path.join(packageRoot, "harness-skills");
+var hostSkillsDir = path.join(packageRoot, "skills");
+var bundledAgentsDir = path.join(packageRoot, "harness-agents");
+var bootstrapAgentsPath = path.join(packageRoot, "AGENTS.md");
+var BOOTSTRAP_MARKER = "IMPORTANT_FOR_HARNESS";
+function resolveSkillPathCandidates() {
+  const out = [];
+  if (fs.existsSync(bundledSkillsDir))
+    out.push(bundledSkillsDir);
+  if (fs.existsSync(hostSkillsDir))
+    out.push(hostSkillsDir);
+  return out;
+}
+var extractFrontmatterAndBody = (content) => {
+  const match = content.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
+  if (!match)
+    return { frontmatter: "", body: content };
+  return { frontmatter: match[1], body: match[2] };
+};
+var parseScalar = (raw) => {
+  const value = raw.trim();
+  if (value === "true")
+    return true;
+  if (value === "false")
+    return false;
+  if (value === "null")
+    return null;
+  if (value === "allow" || value === "ask" || value === "deny")
+    return value;
+  if (/^-?\d+(\.\d+)?$/.test(value))
+    return Number(value);
+  return value.replace(/^["']|["']$/g, "");
+};
+var parseSimpleFrontmatter = (frontmatter) => {
+  const root = {};
+  const stack = [{ indent: -1, target: root }];
+  const lines = frontmatter.split(`
+`);
+  for (let i = 0;i < lines.length; i += 1) {
+    const line = lines[i];
+    if (!line.trim() || line.trim().startsWith("#"))
+      continue;
+    const indent = line.match(/^ */)?.[0]?.length ?? 0;
+    const trimmed = line.trim();
+    const separator = trimmed.indexOf(":");
+    if (separator <= 0)
+      continue;
+    const key = trimmed.slice(0, separator).trim();
+    const rawValue = trimmed.slice(separator + 1).trim();
+    while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
+      stack.pop();
+    }
+    const current = stack[stack.length - 1].target;
+    if (rawValue === "" || rawValue === "{}") {
+      current[key] = {};
+      stack.push({ indent, target: current[key] });
+      continue;
+    }
+    if (rawValue === "|-" || rawValue === "|") {
+      const blockLines = [];
+      const baseIndent = indent;
+      for (let j = i + 1;j < lines.length; j += 1) {
+        const blockLine = lines[j];
+        const blockIndent = blockLine.match(/^ */)?.[0]?.length ?? 0;
+        if (blockLine.trim() && blockIndent <= baseIndent)
+          break;
+        const normalized = blockLine.startsWith(" ".repeat(baseIndent + 2)) ? blockLine.slice(baseIndent + 2) : blockLine.trim() ? blockLine.trim() : "";
+        blockLines.push(normalized);
+        i = j;
+      }
+      current[key] = blockLines.join(`
+`);
+      continue;
+    }
+    current[key] = parseScalar(rawValue);
+  }
+  return root;
+};
+var loadBootstrapContent = () => {
+  if (!fs.existsSync(bootstrapAgentsPath))
+    return null;
+  const content = fs.readFileSync(bootstrapAgentsPath, "utf8").trim();
+  if (!content)
+    return null;
+  return `<${BOOTSTRAP_MARKER}>
+${content}
+</${BOOTSTRAP_MARKER}>`;
+};
+var normalizePath = (inputPath, homeDir) => {
+  if (!inputPath || typeof inputPath !== "string")
+    return null;
+  let normalized = inputPath.trim();
+  if (!normalized)
+    return null;
+  if (normalized === "~")
+    normalized = homeDir;
+  if (normalized.startsWith("~/"))
+    normalized = path.join(homeDir, normalized.slice(2));
+  return path.resolve(normalized);
+};
+var loadAgentsFromDir = (agentsDirPath) => {
+  if (!fs.existsSync(agentsDirPath))
+    return {};
+  const files = fs.readdirSync(agentsDirPath).filter((name) => name.endsWith(".md")).sort((a, b) => a.localeCompare(b));
+  const result = {};
+  for (const file of files) {
+    const filePath = path.join(agentsDirPath, file);
+    const content = fs.readFileSync(filePath, "utf8");
+    const { frontmatter, body } = extractFrontmatterAndBody(content);
+    const parsed = parseSimpleFrontmatter(frontmatter);
+    const parsedName = typeof parsed.name === "string" ? parsed.name : "";
+    const id = parsedName || file.replace(/\.md$/, "");
+    result[id] = {
+      ...parsed,
+      prompt: body.trim()
+    };
+  }
+  return result;
+};
+var loadBundledAgents = () => loadAgentsFromDir(bundledAgentsDir);
+var MorningStarHarnessPlugin = async () => {
+  const homeDir = os.homedir();
+  const envConfigDir = normalizePath(process.env.OPENCODE_CONFIG_DIR, homeDir);
+  const configDir = envConfigDir || path.join(homeDir, ".config/opencode");
+  const isEnabledForProject = !!configDir;
+  return {
+    config: async (config) => {
+      if (!isEnabledForProject)
+        return;
+      const runtimeConfig = config;
+      runtimeConfig.skills = runtimeConfig.skills || {};
+      runtimeConfig.skills.paths = runtimeConfig.skills.paths || [];
+      for (const skillPath of resolveSkillPathCandidates()) {
+        if (fs.existsSync(skillPath) && !runtimeConfig.skills.paths.includes(skillPath)) {
+          runtimeConfig.skills.paths.push(skillPath);
+        }
+      }
+      const markdownAgents = loadBundledAgents();
+      runtimeConfig.agent = runtimeConfig.agent || {};
+      for (const [agentId, definition] of Object.entries(markdownAgents)) {
+        runtimeConfig.agent[agentId] = {
+          ...runtimeConfig.agent[agentId] || {},
+          ...definition
+        };
+      }
+    },
+    "experimental.chat.messages.transform": async (_input, output) => {
+      const bootstrap = loadBootstrapContent();
+      if (!bootstrap || !output.messages.length)
+        return;
+      const firstUser = output.messages.find((message) => message.info.role === "user");
+      if (!firstUser || !firstUser.parts.length)
+        return;
+      const injected = firstUser.parts.some((part) => part.type === "text" && typeof part.text === "string" && part.text.includes(`<${BOOTSTRAP_MARKER}>`));
+      if (injected)
+        return;
+      const ref = firstUser.parts[0];
+      firstUser.parts.unshift({
+        ...ref,
+        type: "text",
+        text: bootstrap
+      });
+    }
+  };
+};
+export {
+  MorningStarHarnessPlugin
+};

package/harness-agents/architect.md

@@ -0,0 +1,35 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  bash:
+    "*": allow
+  task:
+    "*": deny
+    explore: allow
+name: architect
+description: |-
+  技术架构师 - 系统设计、技术决策与技术向文档编写（架构说明、ADR、接口契约等）。
+  Architect - system design, technical decisions, and technical documentation (architecture notes, ADRs, interface contracts).
+---
+
+## Morning Star Role Binding
+
+You are `architect`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/architect.md` in the `mstar-roles` skill
+- Role parameters: `role_id=architect`, `mode=subagent`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/architect.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/frontend-dev.md

@@ -0,0 +1,33 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": deny
+    explore: allow
+name: frontend-dev
+description: |-
+  前端开发工程师 - 页面/组件/交互/a11y/前端性能。全栈功能里默认前端主责（与 `@fullstack-dev` 分轨）；纯 UI 任务首选本角色。
+  Frontend Developer - pages/components/interactions/accessibility/frontend performance. This is the default frontend owner in fullstack work (split with `@fullstack-dev`) and the preferred role for pure UI tasks.
+---
+
+## Morning Star Role Binding
+
+You are `frontend-dev`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/frontend-dev.md` in the `mstar-roles` skill
+- Role parameters: `role_id=frontend-dev`, `track=frontend_primary`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/frontend-dev.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/fullstack-dev-2.md

@@ -0,0 +1,33 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": deny
+    explore: allow
+name: fullstack-dev-2
+description: |-
+  全栈开发工程师 - 与 `@fullstack-dev` 并行的第二实现轨（独立模块/API/页面岛）。PM 在 tasks 可并行或加速时指派；须写明模块边界与分支，勿当作闲置备用。
+  Fullstack Developer (Track 2) - the second implementation track parallel to `@fullstack-dev` (independent modules/APIs/page islands). PM should assign this role when tasks can run in parallel or when acceleration is needed, with explicit module boundaries and branch ownership.
+---
+
+## Morning Star Role Binding
+
+You are `fullstack-dev-2`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/fullstack-dev-shared.md` in the `mstar-roles` skill
+- Role parameters: `role_id=fullstack-dev-2`, `track=parallel_secondary`, `backend_led=true`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/fullstack-dev-shared.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/fullstack-dev.md

@@ -0,0 +1,33 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": deny
+    explore: allow
+name: fullstack-dev
+description: |-
+  全栈开发工程师 - 后端主导的全栈实现（API/业务/数据层）。UI 重或新页面多时由 PM 拆给 `@frontend-dev`；第二并行实现轨用 `@fullstack-dev-2`。Hotfix/单流小改可一人完成。
+  Fullstack Developer - backend-led fullstack implementation (API/business/data). PM should split UI-heavy or new-page work to `@frontend-dev`, and use `@fullstack-dev-2` for the second parallel track. One developer can handle hotfixes or small single-stream updates.
+---
+
+## Morning Star Role Binding
+
+You are `fullstack-dev`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/fullstack-dev-shared.md` in the `mstar-roles` skill
+- Role parameters: `role_id=fullstack-dev`, `track=primary`, `backend_led=true`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/fullstack-dev-shared.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/ops-engineer.md

@@ -0,0 +1,33 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": deny
+    explore: allow
+name: ops-engineer
+description: |-
+  运维工程师 - 部署、监控和基础设施。
+  Ops Engineer - deployment, monitoring, and infrastructure operations, including CI/CD and observability.
+---
+
+## Morning Star Role Binding
+
+You are `ops-engineer`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/ops-engineer.md` in the `mstar-roles` skill
+- Role parameters: `role_id=ops-engineer`, `mode=subagent`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/ops-engineer.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/product-manager.md

@@ -0,0 +1,35 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  bash:
+    "*": allow
+  task:
+    "*": deny
+    explore: allow
+name: product-manager
+description: |-
+  产品经理 - 需求分析、产品规划、市场/用户研究与产品向文档编写。
+  Product Manager - requirements analysis, product planning, market/user research, and product-facing documentation.
+---
+
+## Morning Star Role Binding
+
+You are `product-manager`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/product-manager.md` in the `mstar-roles` skill
+- Role parameters: `role_id=product-manager`, `mode=subagent`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/product-manager.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/project-manager.md

@@ -0,0 +1,32 @@
+---
+mode: primary
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": allow
+name: project-manager
+description: |-
+  项目经理 - 协调开发团队，管理项目进度。
+  Project Manager - coordinate the team, track progress, and orchestrate execution across roles.
+---
+
+## Morning Star Role Binding
+
+You are `project-manager`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/project-manager.md` in the `mstar-roles` skill
+- Role parameters: `role_id=project-manager`, `mode=primary`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/project-manager.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/prompt-engineer.md

@@ -0,0 +1,33 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  task:
+    "*": deny
+    explore: allow
+name: prompt-engineer
+description: |-
+  提示词工程师 - 设计与优化 Agent 提示词与技能。
+  Prompt Engineer - design and optimize prompts and skills for agents, including refactoring and debugging prompt systems.
+---
+
+## Morning Star Role Binding
+
+You are `prompt-engineer`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/prompt-engineer.md` in the `mstar-roles` skill
+- Role parameters: `role_id=prompt-engineer`, `mode=subagent`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/prompt-engineer.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/qa-engineer.md

@@ -0,0 +1,35 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  bash:
+    "*": allow
+  task:
+    "*": deny
+    explore: allow
+name: qa-engineer
+description: |-
+  测试工程师 - 编写测试用例和自动化测试。
+  QA Engineer - test planning, automated tests, coverage improvements, and regression protection.
+---
+
+## Morning Star Role Binding
+
+You are `qa-engineer`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/qa-engineer.md` in the `mstar-roles` skill
+- Role parameters: `role_id=qa-engineer`, `mode=subagent`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/qa-engineer.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.

package/harness-agents/qc-specialist-2.md

@@ -0,0 +1,111 @@
+---
+mode: subagent
+tools:
+  write: true
+  edit: true
+  bash: true
+permission:
+  # `edit` covers write/patch/multiedit. Only `.md` under resolved `{PLAN_DIR}/reports/` (three possible roots — match project layout).
+  edit:
+    "*": deny
+    ".agents/plans/reports/*.md": allow
+    ".agents/plans/reports/**/*.md": allow
+    ".plans/reports/*.md": allow
+    ".plans/reports/**/*.md": allow
+    ".worktrees/**/.agents/plans/reports/*.md": allow
+    ".worktrees/**/.agents/plans/reports/**/*.md": allow
+    ".worktrees/**/.plans/reports/*.md": allow
+    ".worktrees/**/.plans/reports/**/*.md": allow
+  bash:
+    "*": deny
+    # Git inspection (read-only)
+    "git diff*": allow
+    "git log*": allow
+    "git show*": allow
+    "git blame*": allow
+    "git shortlog*": allow
+    "git stash list*": allow
+    "git branch*": allow
+    "git status*": allow
+    # Versioning QC reports only (paths you edited must stay under allowed reports/ trees)
+    "git add*": allow
+    "git commit*": allow
+    # JavaScript / TypeScript
+    "eslint*": allow
+    "npx eslint*": allow
+    "prettier --check*": allow
+    "npx prettier --check*": allow
+    "tsc*": allow
+    "npx tsc*": allow
+    "biome*": allow
+    "npx @biomejs/biome*": allow
+    "oxlint*": allow
+    "npx oxlint*": allow
+    "stylelint*": allow
+    "npx stylelint*": allow
+    # Python
+    "ruff*": allow
+    "pylint*": allow
+    "flake8*": allow
+    "mypy*": allow
+    "pyright*": allow
+    "bandit*": allow
+    "python -m ruff*": allow
+    "python -m pylint*": allow
+    "python -m mypy*": allow
+    "python3 -m ruff*": allow
+    "python3 -m pylint*": allow
+    "python3 -m mypy*": allow
+    # Rust
+    "cargo clippy*": allow
+    "cargo fmt --check*": allow
+    "cargo audit*": allow
+    # Go
+    "golangci-lint*": allow
+    "go vet*": allow
+    "staticcheck*": allow
+    # Ruby
+    "rubocop*": allow
+    "bundle exec rubocop*": allow
+    # Swift
+    "swiftlint*": allow
+    "swift-format lint*": allow
+    # Shell / Config
+    "shellcheck*": allow
+    "hadolint*": allow
+    "actionlint*": allow
+    # Markdown / Docs
+    "markdownlint*": allow
+    # General analysis
+    "wc*": allow
+    "rg*": allow
+    "cloc*": allow
+    "scc*": allow
+    "tokei*": allow
+    "git rev-parse*": allow
+  task:
+    "*": deny
+    explore: allow
+name: qc-specialist-2
+description: |-
+  质量控制专家（Reviewer #2）- 代码审查和质量保证。
+  Quality Control Specialist (Reviewer #2) - code review and quality assurance after significant changes.
+---
+
+## Morning Star Role Binding
+
+You are `qc-specialist-2`. The complete role prompt is provided by the `mstar-roles` skill.
+
+- Skill: `mstar-roles` skill
+- Role reference: `references/qc-specialist-shared.md` in the `mstar-roles` skill
+- Role parameters: `role_id=qc-specialist-2`, `reviewer_index=2`, `focus=security_correctness`, `report_suffix=qc2`
+
+## Mandatory First Steps
+
+This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
+
+1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
+2. `skill` → `mstar-roles` (role mapping & parameter table)
+3. `Read` → `references/qc-specialist-shared.md` listed above
+
+System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.