@event4u/agent-config 2.16.0 → 2.17.0

package/.agent-src/commands/ghostwriter/delete.md

@@ -0,0 +1,118 @@
+---
+name: ghostwriter:delete
+tier: 2
+cluster: ghostwriter
+sub: delete
+description: Hard-delete a ghostwriter profile at agents/ghostwriter/<slug>.md after a two-step confirmation. No backup, no soft delete — the file is gone after acceptance.
+disable-model-invocation: true
+suggestion:
+  eligible: true
+  trigger_description: "delete ghostwriter profile, remove public-figure voice, drop ghostwriter, retire captured profile"
+  trigger_context: "user wants to permanently remove a captured ghostwriter profile from agents/ghostwriter/"
+---
+
+# /ghostwriter:delete
+
+Hard-delete a single `agents/ghostwriter/<slug>.md` profile after a
+**two-step confirmation**. The file is gone after acceptance — no
+backup, no soft delete, no trash directory. Mirrors the destructive
+posture of `/agents:user:delete`.
+
+## Steps
+
+### 1. Resolve target
+
+Argument shapes:
+
+- `/ghostwriter:delete <slug>` → positional slug.
+- `/ghostwriter:delete` → interactive: print the same numbered table
+  as [`/ghostwriter:list`](list.md) and ask the user to pick one by
+  number or slug. One question per turn.
+
+| State | Action |
+|---|---|
+| File missing | Abort. Print: *"No profile at `agents/ghostwriter/<slug>.md`. Run `/ghostwriter:list` to see what exists."* |
+| File present, `fictional: true` | Abort. Print: *"`<slug>.md` is a package-side fixture. Delete it via the source tree, not this command."* |
+| File present, real | Proceed to Step 2 |
+
+### 2. Print a minimal summary
+
+Show the user **exactly** what is about to disappear, sourced from
+the file's frontmatter (do not render the full profile body):
+
+```
+About to delete agents/ghostwriter/<slug>.md
+  identity.name:       <name>
+  role:                <role_or_title>
+  category:            <public_figure_category>
+  confidence:          <low|med|high>
+  source count:        <source_provenance.count>
+  last_fetched_at:     <ISO date>
+  verification:        <fetched|user-asserted>
+```
+
+This is the only summary surface — the full profile is one
+`/ghostwriter:show <slug>` away if the user wants to re-inspect
+before answering.
+
+### 3. First confirmation (intent)
+
+Ask, verbatim, one question per turn:
+
+> *"Delete this ghostwriter profile? `<slug>.md` will be hard-deleted
+> with no backup. Type `delete` to continue, anything else to cancel."*
+
+Anything other than the literal token `delete` (case-insensitive,
+trimmed) → abort with: *"Cancelled. No file was deleted."*
+
+### 4. Second confirmation (irreversibility)
+
+Ask, verbatim:
+
+> *"Last chance. This is hard-delete — no `.bak`, no trash, no undo
+> from this command. Type the slug `<slug>` exactly to confirm."*
+
+User must type the slug literally (case-sensitive, trimmed). Any
+other input → abort with the same cancel line as Step 3.
+
+### 5. Delete + print confirmation
+
+Remove the file. Then print:
+
+```
+✅  agents/ghostwriter/<slug>.md deleted.
+    /ghostwriter:list now shows N profiles.
+```
+
+`N` reflects the post-delete count under `agents/ghostwriter/`
+(excluding `README.md`).
+
+### 6. Stale-warning surface (optional)
+
+After the delete, if any remaining profile is stale (>90 days), print
+the standard stale-warning lines (one per stale slug). Mirrors the
+post-write surface in `/ghostwriter:fetch` Step 7. Non-blocking.
+
+## Rules
+
+- **Hard-delete only.** No `.bak`, no soft delete, no trash directory.
+  Mirrors `/agents:user:delete`.
+- **Two-step confirmation is mandatory.** Skipping either step is a
+  contract violation. The two prompts must be distinct turns; do not
+  batch them into one numbered-options block.
+- **Do NOT commit, push, or open a PR.** The user owns the git surface;
+  consumer ghostwriter files are gitignored by default.
+- **Do NOT delete package-side fixtures.** `fictional: true` files
+  belong to the source tree and are out of scope for this command.
+- **Do NOT delete `agents/ghostwriter/README.md`.** The directory
+  anchor is not a profile.
+- **Do NOT bulk-delete.** One slug per invocation, even when the user
+  passes a glob.
+
+## See also
+
+- [`/ghostwriter`](../ghostwriter.md) — parent cluster.
+- [`/ghostwriter:list`](list.md) — pick a slug to delete.
+- [`/ghostwriter:show`](show.md) — re-inspect before deleting.
+- [`/ghostwriter:fetch`](fetch.md) — re-create a profile from scratch (no recovery from this command).
+- [`/agents:user:delete`](../agents/user/delete.md) — sibling destructive command this one mirrors.

package/.agent-src/commands/ghostwriter/fetch.md

@@ -0,0 +1,185 @@
+---
+name: ghostwriter:fetch
+tier: 2
+cluster: ghostwriter
+sub: fetch
+description: Build or refresh a public-figure voice profile at agents/ghostwriter/<slug>.md from a URL or bare name; runs the public-figure attestation gate; delegates web-fetch / web-search to the host agent.
+disable-model-invocation: true
+suggestion:
+  eligible: true
+  trigger_description: "fetch public figure writing voice, capture LinkedIn / blog / Substack style, build ghostwriter profile from name, refresh stale profile"
+  trigger_context: "user wants to capture a documented public figure's writing voice from a URL or by name into agents/ghostwriter/<slug>.md"
+---
+
+# /ghostwriter:fetch
+
+Build (or refresh) a ghostwriter profile at
+`agents/ghostwriter/<slug>.md` from one of two inputs:
+
+| Input | Mode | Host-agent capability used |
+|---|---|---|
+| URL (LinkedIn / blog / Substack / personal site) | **URL mode** | web-fetch |
+| Bare name (`"Alice Walker"`) | **Name-only mode** | web-search |
+
+Zero network code in the package — the host agent performs the fetch /
+search; this command is procedural only. Schema:
+[`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md).
+
+## Steps
+
+### 1. Parse input + resolve slug
+
+Argument shape: `/ghostwriter:fetch <input> [--force-refresh]`.
+
+- Looks like a URL (`https?://`) → URL mode. Derive slug from the
+  page's primary author / persona name (kebab-case).
+- Otherwise → name-only mode. Slug = full name kebab-case
+  (`alice-walker`). If a slug already exists with a different role,
+  ask the user for a discriminator suffix (`alice-walker-novelist`).
+
+Existing `agents/ghostwriter/<slug>.md`?
+
+| State | Action |
+|---|---|
+| Missing | Proceed to fresh-fetch flow |
+| Exists, no `--force-refresh` | Diff-and-accept flow (Step 6) |
+| Exists, `--force-refresh` | Back up to `<slug>.md.bak`, rebuild from scratch |
+
+### 2. Public-figure attestation gate (BLOCKING)
+
+Print verbatim, one question per turn, **all four** required before any
+write. Mirrors the deterministic gate in
+[`ghostwriter-schema § public-figure gate`](../../../docs/contracts/ghostwriter-schema.md).
+
+1. *"Is the target a documented public figure with a public-facing role
+   (author / executive / academic / politician / journalist /
+   public-speaker / public-artist / deceased-historical)? Which category?"*
+2. *"Are all sources you intend to use public — not paywalled,
+   login-walled, leaked, or retracted?"*
+3. *"Do you accept the right-of-publicity and defamation surface? The
+   package documents the gate but the legal call is yours."*
+4. *"Do you understand the disclosure footer on every `/ghostwriter:write`
+   output is non-removable?"*
+
+Any "no" / silence / decline → abort. Do not write the file.
+Record the UTC ISO timestamp of the fourth "yes" into
+`identity.attestation_recorded_at`.
+
+### 3a. URL mode — host-agent fetch
+
+Instruct the host agent: *"Fetch the URL `<input>` and any linked
+author archive / post index. Return public posts (target: last 100;
+floor: 3 distinct items). Exclude paywalled / login-walled / private
+content."*
+
+| Result | Action |
+|---|---|
+| Host has web-fetch + ≥ 3 distinct items returned | `source_provenance.verification: fetched`; proceed to Step 4 |
+| Host has web-fetch but < 3 items | Abort; report the floor; suggest name-only mode for broader sources |
+| Host cannot fetch | Emit paste-prompt (Step 3c) |
+
+### 3b. Name-only mode — host-agent search
+
+Instruct the host agent: *"Search authoritative public sources for
+`<name>`: Wikipedia, official site, verified social, archived
+interviews, published books (for deceased figures). Return ≥ 3
+distinct authoritative items."*
+
+| Result | Action |
+|---|---|
+| ≥ 3 distinct authoritative items | `verification: fetched`; proceed to Step 4 |
+| < 3 items | Abort; report the floor; ask the user to supply URLs |
+| Host cannot search | Emit paste-prompt (Step 3c) |
+
+### 3c. Paste-prompt fallback
+
+Print: *"Host agent cannot fetch / search. Paste ≥ 3 public-source
+excerpts with their URLs; one excerpt per code block, max ~200 words
+each. Type `done` when finished."*
+
+Collected material → `source_provenance.verification: user-asserted`.
+`/ghostwriter:show` will surface a `⚠️ user-asserted` warning on this
+profile.
+
+### 4. Derive frontmatter
+
+From the gathered material, populate the locked frontmatter per
+[`ghostwriter-schema § locked frontmatter (v1)`](../../../docs/contracts/ghostwriter-schema.md):
+
+- `identity.*` — name, role, category (from Step 2), source URLs,
+  `fetched_at` (today, ISO date), `attestation_recorded_at` (Step 2).
+- `style.fingerprint.*` — derive `sentence_length_avg`, `vocab_register`,
+  opener / closer patterns, hashtag / emoji rules, paragraph cadence
+  from the gathered excerpts.
+- `style.free_form_notes` — short prose summary.
+- `voice_samples` — pick up to 3 public excerpts, ≤ 200 words each,
+  source-attributed.
+- `taboos` — what the figure demonstrably never does in public writing.
+- `source_provenance.{count, last_fetched_at, types, verification}`.
+- `confidence` — derived deterministically:
+
+  | Sources × types | Confidence |
+  |---|---|
+  | 3 sources, same platform | `low` |
+  | 3+ sources, 2+ platforms | `med` |
+  | 5+ sources, 3+ platforms, ≥ 1 canonical | `high` |
+
+- `fictional: false` (always, for consumer-side files).
+- `last_updated` — today, ISO date.
+
+Body: a single `# Notes` section, empty for fresh fetches.
+**Hard cap: 200 lines total.**
+
+### 5. Propose + confirm (fresh-fetch path)
+
+Print the proposed file content as a fenced markdown block. Ask:
+
+> 1. write — save to `agents/ghostwriter/<slug>.md`
+> 2. edit — open in IDE first (per `file-editor` skill), save after
+> 3. cancel — discard
+
+Only on choice 1 or 2 (after save) write the file. Print the
+post-write summary:
+
+```
+✅  agents/ghostwriter/<slug>.md written.
+    confidence: <low|med|high>  ·  sources: <n>  ·  verification: <fetched|user-asserted>
+```
+
+### 6. Diff-and-accept (re-fetch path, no `--force-refresh`)
+
+Re-run Steps 2–4 against the existing file. Show a **field-by-field
+diff** (frontmatter keys + voice samples). Ask the user to accept
+per-field changes (numbered options). Bump `last_updated` and
+`source_provenance.last_fetched_at` on accept. Mirrors
+[`/agents:user:accept`](../agents/user/accept.md).
+
+### 7. Stale-warning surface (always)
+
+After any write (or no-op accept), if any other profile under
+`agents/ghostwriter/*.md` has `source_provenance.last_fetched_at` >
+90 days old, print one line per stale profile:
+
+```
+⚠️  ghostwriter/<other-slug>.md last fetched YYYY-MM-DD (>90 days). Run /ghostwriter:fetch <other-slug> --force-refresh.
+```
+
+Non-blocking.
+
+## Rules
+
+- **Do NOT commit, push, or open a PR.** The user owns the git surface.
+- **Do NOT write the file before the attestation gate completes** with
+  four explicit "yes" answers.
+- **Do NOT bypass the < 3 distinct sources floor** under any flag.
+- **Do NOT introduce network code in the package** — the host agent
+  performs every fetch / search; this command only orchestrates.
+- **Do NOT accept private / paywalled / leaked / retracted material**
+  even when the user pastes it (Step 3c).
+
+## See also
+
+- [`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md) — locked v1 frontmatter, verification levels, confidence derivation.
+- [`/ghostwriter`](../ghostwriter.md) — parent cluster.
+- [`/ghostwriter:write`](write.md) — consume side; appends the mandatory disclosure footer.
+- [`/agents:user:accept`](../agents/user/accept.md) — the diff-and-accept flow this command mirrors on re-fetch.

package/.agent-src/commands/ghostwriter/list.md

@@ -0,0 +1,102 @@
+---
+name: ghostwriter:list
+tier: 2
+cluster: ghostwriter
+sub: list
+description: List captured ghostwriter profiles under agents/ghostwriter/ as a numbered table with confidence, last-fetched, and stale-warning flags. Read-only.
+disable-model-invocation: true
+suggestion:
+  eligible: true
+  trigger_description: "list ghostwriter profiles, show available public-figure voices, which ghostwriters do I have, ghostwriter inventory"
+  trigger_context: "user wants to see which ghostwriter profiles exist locally and which are stale"
+---
+
+# /ghostwriter:list
+
+Read-only listing of every consumer-side ghostwriter profile under
+`agents/ghostwriter/`. Numbered, with the fields needed to pick one
+for `/ghostwriter:write` or to spot stale profiles that need a
+re-fetch.
+
+## Steps
+
+### 1. Scan
+
+Enumerate `agents/ghostwriter/*.md`, excluding:
+
+- `README.md` (directory anchor, not a profile).
+- Any file whose frontmatter carries `fictional: true` (package-side
+  fixtures are not consumer profiles; they should never appear in
+  `agents/ghostwriter/` — surface a warning if one is found).
+
+For each remaining file, read the frontmatter and extract:
+
+| Field | Source |
+|---|---|
+| Slug | filename without `.md` |
+| Name | `identity.name` |
+| Role | `identity.role_or_title` |
+| Category | `identity.public_figure_category` |
+| Confidence | `identity.confidence` (`low` / `med` / `high`) |
+| Verification | `source_provenance.verification` (`fetched` / `user-asserted`) |
+| Last fetched | `source_provenance.last_fetched_at` (ISO date) |
+| Stale | `last_fetched_at` older than 90 days → `⚠️` |
+| User-asserted | `verification == user-asserted` → `⚠️` |
+
+### 2. Render
+
+Empty result → print and exit:
+
+```
+No ghostwriter profiles found under agents/ghostwriter/.
+Run /ghostwriter:fetch <url-or-name> to capture one.
+```
+
+Otherwise, print a numbered table sorted by slug:
+
+```
+# Ghostwriters (N profiles)
+
+  #  Slug                       Name              Confidence  Last fetched  Flags
+  1  alice-walker               Alice Walker      high        2026-04-12
+  2  jane-doe-author            Jane Doe          med         2025-11-03    ⚠️ stale
+  3  bob-smith                  Bob Smith         low         2026-05-01    ⚠️ user-asserted
+
+Next: /ghostwriter:show <slug>  ·  /ghostwriter:write --as=<slug>
+      /ghostwriter:fetch <slug> --force-refresh   # for stale profiles
+```
+
+Column widths are illustrative — pick the widest entry per column.
+
+### 3. Fixture leak warning (defensive)
+
+If Step 1 encountered a `fictional: true` file under
+`agents/ghostwriter/`, print **after** the table:
+
+```
+⚠️  agents/ghostwriter/<file>.md carries `fictional: true` — fixtures
+    belong in the package source, not in consumer ghostwriter/. Move
+    or delete this file.
+```
+
+This should not normally happen — `scripts/lint_ghostwriter_source.py`
+guards the package side (run via the package's CI), and consumer-side
+`fetch` always writes `fictional: false`.
+
+## Rules
+
+- **Read-only.** Do not modify or move any file.
+- **Do NOT commit, push, or open a PR.** No git ops.
+- **Do NOT inline voice samples.** Use `/ghostwriter:show <slug>` for
+  the full profile body — this command is an index, not a renderer.
+- **Do NOT include `fictional: true` profiles in the main table** —
+  they are package-side schema examples, not consumable styles. Surface
+  any leak as a separate warning (Step 3).
+
+## See also
+
+- [`/ghostwriter`](../ghostwriter.md) — parent cluster.
+- [`/ghostwriter:show`](show.md) — render a single profile in full.
+- [`/ghostwriter:fetch`](fetch.md) — refresh stale profiles with `--force-refresh`.
+- [`/ghostwriter:write`](write.md) — consume side; reuses the slugs listed here via `--as=<slug>`.
+- [`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md) — field definitions used in the table.

package/.agent-src/commands/ghostwriter/show.md

@@ -0,0 +1,113 @@
+---
+name: ghostwriter:show
+tier: 2
+cluster: ghostwriter
+sub: show
+description: Render a single ghostwriter profile in full — identity, style fingerprint, voice samples, taboos, source URLs. Read-only.
+disable-model-invocation: true
+suggestion:
+  eligible: true
+  trigger_description: "show ghostwriter profile, inspect public-figure voice, view ghostwriter details, what does this profile contain"
+  trigger_context: "user wants to inspect a single captured ghostwriter profile before writing with it or deciding to refresh / delete it"
+---
+
+# /ghostwriter:show
+
+Read-only render of a single `agents/ghostwriter/<slug>.md` profile.
+Surfaces every field needed to decide whether to consume the voice
+(`/ghostwriter:write`), refresh it (`/ghostwriter:fetch <slug>
+--force-refresh`), or delete it (`/ghostwriter:delete`).
+
+## Steps
+
+### 1. Resolve target
+
+Argument shapes:
+
+- `/ghostwriter:show <slug>` → positional slug.
+- `/ghostwriter:show <n>` → numeric index from the most recent
+  `/ghostwriter:list` ordering (re-derive by listing slugs sorted
+  ascending; index is 1-based).
+- `/ghostwriter:show` → interactive — print the same numbered table
+  as [`/ghostwriter:list`](list.md) and ask the user to pick one
+  by number or slug, one question per turn.
+
+Resolution table:
+
+| State | Action |
+|---|---|
+| File missing | Abort. Print: *"No profile at `agents/ghostwriter/<slug>.md`. Run `/ghostwriter:list` to see what exists."* |
+| File present, `fictional: true` | Print a one-line warning before rendering: *"⚠️ This is a package-side fixture, not a real-person profile."* Then render normally. |
+| File present, real | Render (Step 2) |
+
+### 2. Render
+
+Print the profile as fenced sections in the user's language. Sections,
+in order:
+
+1. **Header** — name, slug, public-figure category.
+2. **Identity** — `role_or_title`, `era`, source URLs as a bullet list,
+   `fetched_at`, `attestation_recorded_at`, `confidence`.
+3. **Source provenance** — `count`, `last_fetched_at`, `types` (bullet
+   list), `verification`. If `verification: user-asserted`, prefix the
+   section header with `⚠️`.
+4. **Style fingerprint** — `sentence_length_avg`, `vocab_register`,
+   `opener_patterns`, `closer_patterns`, `hashtag_rules`, `emoji_rules`,
+   `paragraph_cadence`.
+5. **Free-form notes** — `style.free_form_notes` verbatim.
+6. **Voice samples** — each sample as a fenced quote block with the
+   source URL underneath. Truncate samples > 200 words with `[…]` and
+   note the cap.
+7. **Taboos** — bullet list.
+8. **Body — `# Notes`** — the in-file Notes section, verbatim (may be
+   empty for fresh fetches).
+
+### 3. Footer hints
+
+After the rendered profile, print the available next actions:
+
+```
+Next:
+  /ghostwriter:write --as=<slug>           # draft in this voice
+  /ghostwriter:fetch <slug> --force-refresh  # rebuild from scratch
+  /ghostwriter:delete <slug>               # hard-delete the file
+```
+
+### 4. Stale + user-asserted surface
+
+If `last_fetched_at` is > 90 days old, append a one-line warning:
+
+```
+⚠️  Last fetched YYYY-MM-DD (>90 days). Consider /ghostwriter:fetch <slug> --force-refresh.
+```
+
+If `verification: user-asserted`, append:
+
+```
+⚠️  Profile is user-asserted (no host-fetched verification). Style fidelity may be lower.
+```
+
+Non-blocking.
+
+## Rules
+
+- **Read-only.** Do not modify, move, or write the file.
+- **Do NOT commit, push, or open a PR.** No git ops.
+- **Do NOT redact voice samples by topic.** The whole sample (capped at
+  200 words per `ghostwriter-schema`) is part of the schema contract;
+  partial rendering would mislead the consumer about the captured
+  style.
+- **Do NOT auto-trigger a re-fetch on stale profiles.** Surface the
+  warning and let the user run `/ghostwriter:fetch <slug>
+  --force-refresh` explicitly.
+- **Do NOT consume `personas/*.md` or `.agent-user.md`.** Wrong
+  primitive — those are not ghostwriters.
+
+## See also
+
+- [`/ghostwriter`](../ghostwriter.md) — parent cluster.
+- [`/ghostwriter:list`](list.md) — index of profiles (use first to pick a slug).
+- [`/ghostwriter:fetch`](fetch.md) — refresh path; `--force-refresh` rebuilds from scratch.
+- [`/ghostwriter:delete`](delete.md) — hard-delete the profile.
+- [`/ghostwriter:write`](write.md) — consume the rendered voice.
+- [`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md) — field definitions used here.

package/.agent-src/commands/ghostwriter/write.md

@@ -0,0 +1,160 @@
+---
+name: ghostwriter:write
+tier: 2
+cluster: ghostwriter
+sub: write
+description: Draft a markdown post in the voice of a captured public-figure ghostwriter profile; appends the mandatory non-removable disclosure footer.
+disable-model-invocation: true
+suggestion:
+  eligible: true
+  trigger_description: "draft post in style of public figure, write in someone's voice, ghostwriter draft, LinkedIn post in style of X"
+  trigger_context: "user wants to generate a copyable draft in a previously captured public-figure voice with the mandatory disclosure footer"
+---
+
+# /ghostwriter:write
+
+Generate a copyable markdown draft in the voice of a captured
+ghostwriter profile under `agents/ghostwriter/<slug>.md`. Implements
+the [`write-engine`](../../../docs/contracts/write-engine.md) contract
+with **mandatory disclosure footer** appended by this command's output
+template (not by the model, no opt-out).
+
+> Writing in your **own** voice? Use [`/post-as:me`](../post-as/me.md)
+> — reads `.agent-user.md`, no disclosure footer.
+
+## Steps
+
+### 1. Select the ghostwriter (style source)
+
+Argument shapes:
+
+- `/ghostwriter:write` → interactive numbered menu (see below).
+- `/ghostwriter:write --as=<value> [...modifiers]` → non-interactive.
+- `/ghostwriter:write <value> [...modifiers]` → positional shorthand.
+
+`<value>` resolves against **slugs** and (when
+`ghostwriter.aliases: true` in `.agent-project-settings.yml` — default
+on) the `aliases:` list of every consumer profile. See
+[`ghostwriter-schema § Aliases`](../../../docs/contracts/ghostwriter-schema.md#aliases).
+
+Scan `agents/ghostwriter/*.md`, excluding `README.md` and any file
+with `fictional: true` (fixtures are not consumable from this
+command — they live in the package source as schema examples).
+
+Resolution order for `--as=<value>` / positional `<value>`:
+
+1. **Slug match** — case-insensitive equality against filename stem.
+2. **Alias match** (skip when `ghostwriter.aliases: false`) —
+   case-insensitive equality against every profile's `aliases:` entry.
+   Conflicts are impossible at runtime — the consumer-side lint
+   rejects cross-profile alias collisions at commit time, so an alias
+   resolves to exactly one profile or zero.
+3. **No match** → abort with: *"No profile matches `<value>` (tried
+   slug + aliases). Run `/ghostwriter:list` to see available profiles."*
+
+| State | Action |
+|---|---|
+| Zero non-fixture profiles | **Abort.** Print: *"No ghostwriter profiles exist. Run `/ghostwriter:fetch <url-or-name>` first."* |
+| One or more profiles, interactive | Numbered menu: `1. <slug> — <identity.name> · <confidence> · <last_updated>` |
+| `--as=<value>` / positional | Resolve via the order above; abort on no match |
+
+User picks by number or value. No default — explicit choice required.
+
+### 2. Load the style source
+
+Read the selected file's frontmatter. Required keys (per
+[`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md)):
+`identity.name`, `style.fingerprint.*`, `style.free_form_notes`,
+`voice_samples`, `taboos`, `source_provenance.verification`.
+
+`verification: user-asserted` → print a one-line warning before
+proceeding: *"⚠️ Profile is user-asserted (not host-fetched).
+Style fidelity may be lower."* Non-blocking.
+
+### 3. Collect topic + modifiers
+
+Per [`write-engine § 2`](../../../docs/contracts/write-engine.md).
+Flag form: `--tone=<formal|casual|neutral>`,
+`--length=<words>`, `--channel=<linkedin-post|tweet|blog|freeform>`,
+`--audience=<text>`. Missing flags → interactive prompt, **one
+question per turn**, in the order Topic → Tone → Length → Channel →
+Audience. Tone / length defaults derive from the per-channel table
+and the vocab-register → tone mapping in the engine contract.
+
+### 4. Negative-constraint pass
+
+Apply the loaded `taboos` list as exclusions before drafting (per
+[`write-engine § 3`](../../../docs/contracts/write-engine.md)). Print
+a one-line acknowledgement: *"Excluding N taboos from this profile."*
+
+### 5. Draft
+
+Generate the body as a single fenced markdown block per
+[`write-engine § 4`](../../../docs/contracts/write-engine.md). Honour
+fingerprint constraints: sentence-length ±25 %, opener / closer
+patterns, hashtag / emoji rules, ±15 % length tolerance.
+
+### 6. Append the disclosure footer (literal, deterministic)
+
+After the body, emit a blank line, then the literal string (rendered
+in the user's language; English template below):
+
+```
+*Written in the style of <identity.name>, not by them.*
+```
+
+This footer is appended **by this command's output template** as a
+fixed string. It is not produced by the model. No `--no-disclosure`
+flag, no `--internal` flag, no opt-out. The absence of any such flag
+is the acceptance criterion (locked in
+[`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md)
+§ Mandatory disclosure footer).
+
+**The footer always uses `identity.name`, never the alias that
+triggered the command.** Invoking `--as=Hawking` against a profile
+with `identity.name: "Stephen Hawking"` produces *"Written in the
+style of Stephen Hawking, not by them."* — never *"…of Hawking…"*.
+Aliases are UX-only; identity attribution stays deterministic.
+
+### 7. Print
+
+Print the complete block (body + blank line + footer) inside one
+fenced markdown region. No file writes, no commit, no save. The user
+copies the output manually.
+
+### 8. Stale-warning surface
+
+If the selected profile's `source_provenance.last_fetched_at` is
+> 90 days old, print one line **after** the fenced block:
+
+```
+⚠️  agents/ghostwriter/<slug>.md last fetched YYYY-MM-DD (>90 days). Run /ghostwriter:fetch <slug> --force-refresh.
+```
+
+Non-blocking.
+
+## Rules
+
+- **Do NOT commit, push, or open a PR.** The user owns the git surface.
+- **Do NOT omit the disclosure footer.** It is mandatory on every
+  invocation. Any flag that would suppress it is forbidden by design
+  and rejected by the package skill linter (`scripts/lint_skills.py`).
+- **Do NOT write the draft to disk.** This command prints only.
+- **Do NOT blend multiple ghostwriter voices.** One style source per
+  invocation in v1.
+- **Do NOT consume `personas/*.md` or `.agent-user.md`** — those are
+  separate primitives. Personas are review lenses; `.agent-user.md`
+  is `/post-as:me`.
+- **Do NOT proceed without an explicit `--as=<slug>` or interactive
+  selection.** No default ghostwriter.
+- **Do NOT bypass the negative-constraint pass** even when the user
+  asks for off-profile content. Surface the taboo and abort.
+
+## See also
+
+- [`write-engine`](../../../docs/contracts/write-engine.md) — shared procedural contract.
+- [`ghostwriter-schema`](../../../docs/contracts/ghostwriter-schema.md) — locked v1 frontmatter.
+- [`/ghostwriter`](../ghostwriter.md) — parent cluster.
+- [`/ghostwriter:fetch`](fetch.md) — the producer side.
+- [`/post-as:ghostwriter`](../post-as/ghostwriter.md) — thin alias for this command.
+- [`/post-as:me`](../post-as/me.md) — sibling consumer, user-self voice, no footer.