@codyswann/lisa 2.23.2 → 2.25.0

package/plugins/lisa-wiki/ci/lisa-wiki-validate.yml

@@ -0,0 +1,32 @@
+# lisa-wiki validation — OPTIONAL. Installed into a project by `/setup --with-ci`.
+#
+# Runs the deterministic wiki validators on pull requests that touch the wiki.
+# Node-only, no extra dependencies (the validators are dependency-free).
+#
+# LISA_WIKI_SCRIPTS must point at the installed plugin's scripts/ directory.
+# `/setup --with-ci` wires this — either by resolving the installed plugin path or
+# by vendoring the plugin's scripts/ into the repo (default below: .lisa-wiki/scripts).
+name: 🧠 LLM Wiki Validate
+
+on:
+  pull_request:
+    paths:
+      - 'wiki/**'
+      - '.lisa-wiki/**'
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    env:
+      LISA_WIKI_SCRIPTS: ${{ vars.LISA_WIKI_SCRIPTS || '.lisa-wiki/scripts' }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Validate config
+        run: node "$LISA_WIKI_SCRIPTS/validate-config.mjs" wiki/lisa-wiki.config.json
+
+      - name: Lint wiki (strict — warnings block once the repo is at hard-enforcement)
+        run: node "$LISA_WIKI_SCRIPTS/lint-wiki.mjs" --wiki wiki --config wiki/lisa-wiki.config.json --strict

package/plugins/lisa-wiki/commands/add-ingest.md

@@ -0,0 +1,6 @@
+---
+description: "Scaffold a project-specific front-door ingest skill that does something unique (classify a source, fetch from a special system, stamp domain frontmatter) and then chains into /ingest. Extends ingestion without forking the kernel."
+argument-hint: "<short name for the new ingest path>"
+---
+
+Use the lisa-wiki-add-ingest skill to generate a thin, registered front-door ingest skill: interview the project for the source type, bucket, frontmatter, and side-effect class; emit a lisa-wiki-local-<name> skill that enriches then chains into /ingest; and register it under customConnectors. $ARGUMENTS

package/plugins/lisa-wiki/commands/add-role.md

@@ -0,0 +1,6 @@
+---
+description: "Scaffold a domain-expert digital-staff role over the wiki — a dual-runtime subagent (Claude + Codex) plus a staff doc page — from a config.staff[] entry. The plugin only sets the subagent up; running/scheduling it is out of scope."
+argument-hint: "<role name, e.g. Legal | Finance | Sales>"
+---
+
+Use the lisa-wiki-add-role skill to turn a role into a wiki/staff/<id>.md doc page and brain-pointed subagents on both runtimes (Claude .claude/agents/<id>.md + Codex .codex/agents/<id>.toml), pointed at the role's owned wiki domain. Setup-only — invocation/scheduling/routing is out of scope. $ARGUMENTS

package/plugins/lisa-wiki/commands/doctor.md

@@ -0,0 +1,6 @@
+---
+description: "Verify that the wiki is correctly set up and (after migration) fully functional. Runs deterministic checks plus functional smoke tests, writes a doctor report, and returns an overall verdict (READY / READY_WITH_WARNINGS / NOT_READY). The final gate of /migrate; re-runnable anytime."
+argument-hint: "[--migration]"
+---
+
+Use the lisa-wiki-doctor skill to run the post-migration/post-setup verification checklist: structure & config, integrity & safety, no-loss/parity, runtime surfaces on both runtimes, functional smoke tests (no extra PR), mode-specific, and git/CI/distribution. Write wiki/state/migration/doctor-report.json and report the verdict + blocking items. $ARGUMENTS

package/plugins/lisa-wiki/commands/ingest.md

@@ -0,0 +1,6 @@
+---
+description: "Ingest source material into the LLM Wiki. With an argument (URL, file path, or prompt) ingest that one source; with no argument run a full ingest across every enabled non-external-write source. Routes to the right connector and runs the ordered pipeline (source note → synthesis → index → log → verify → state → commit/PR)."
+argument-hint: "[url | file path | prompt]   (omit for a full ingest)"
+---
+
+Use the lisa-wiki-ingest skill to ingest into the wiki: route the input to the right connector (or, with no argument, run a full ingest across all enabled non-external-write sources), then run the ordered pipeline — sanitized source note, synthesis with citations, index, log, verification, and state advancement, then commit/PR per policy. $ARGUMENTS

package/plugins/lisa-wiki/commands/lint.md

@@ -0,0 +1,6 @@
+---
+description: "Health-check the LLM Wiki: orphan pages, contradictions, stale claims, broken internal links, missing index/log coverage, structure violations, and secret/tenant leaks. Read-only — reports findings, does not fix them."
+argument-hint: ""
+---
+
+Use the lisa-wiki-lint skill to run the wiki's integrity checks and report findings by severity (PASS/WARN/FAIL). It diagnoses only — fixes go through /ingest, /setup, or /migrate. $ARGUMENTS

package/plugins/lisa-wiki/commands/migrate.md

@@ -0,0 +1,6 @@
+---
+description: "Migrate an existing hand-rolled wiki onto the lisa-wiki kernel — phased and compatibility-first, with a strict no-loss guarantee (renaming is fine; losing functionality or data is not). Ends by running /doctor."
+argument-hint: "[--phase <0|1|1b|2|3|4|5>]"
+---
+
+Use the lisa-wiki-migrate skill to move this repo's bespoke wiki onto the kernel in reviewable phases: inventory, adopt kernel, absorb documentation, consolidate runtime + connectors, normalize by touch, then hard-enforce — parity-checking each migrated artifact before deleting the old one, and finishing with /doctor. $ARGUMENTS

package/plugins/lisa-wiki/commands/onboard-me.md

@@ -0,0 +1,6 @@
+---
+description: "Onboard a user to the project via its LLM Wiki: interview them about themselves in relation to the project, then give a guided tour and sample questions. Read-mostly by default (session-local); --save-memory persists the capture to project-scoped memory only. No PRs, no PII written into the wiki, never global memory."
+argument-hint: "[--save-memory] [--write-audience-note]"
+---
+
+Use the lisa-wiki-onboard-me skill to onboard the user: briefly interview their role and goals (read-mostly, session-local by default; with --save-memory persist to project-scoped memory only — never global memory, never PII into the wiki), then summarize what the project is, show the folder map, and offer sample /query prompts tuned to their role. $ARGUMENTS

package/plugins/lisa-wiki/commands/query.md

@@ -0,0 +1,6 @@
+---
+description: "Answer a question from the LLM Wiki with citations. Reads the index, drills into relevant pages, and synthesizes a cited answer. Read-only by default; files new synthesis back only when explicitly asked."
+argument-hint: "<question>"
+---
+
+Use the lisa-wiki-query skill to answer from the wiki with citations: locate relevant pages via the index, synthesize a cited answer, and say plainly when the wiki cannot support an answer. Read-only unless the user explicitly asks to persist new synthesis. $ARGUMENTS

package/plugins/lisa-wiki/commands/setup.md

@@ -0,0 +1,6 @@
+---
+description: "Scaffold, repair, verify, or upgrade the project's LLM Wiki from its config. Asks the wiki's purpose and README mode, renders the contract snapshot, scaffolds the canonical folders, and seeds the staff roster. Idempotent and non-destructive."
+argument-hint: "[--upgrade] [--with-ci]"
+---
+
+Use the lisa-wiki-setup skill to bring the wiki into conformance from wiki/lisa-wiki.config.json: validate config, ask purpose + README mode, scaffold the canonical structure, render the contract snapshot (stamping kernelVersion), seed the staff roster, then verify with /doctor. $ARGUMENTS

package/plugins/lisa-wiki/schema/lisa-wiki-config.schema.json

@@ -0,0 +1,118 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://codyswann.github.io/lisa/schema/lisa-wiki-config.schema.json",
+  "title": "lisa-wiki project config",
+  "description": "Per-project behavioral config for the lisa-wiki plugin. Lives at wiki/lisa-wiki.config.json. The plugin's validate-config script enforces these constraints dependency-free; this schema is the authoritative spec and powers editor tooling.",
+  "type": "object",
+  "additionalProperties": true,
+  "required": ["schemaVersion", "org", "mode", "wikiRoot", "categories"],
+  "properties": {
+    "schemaVersion": { "type": "string", "description": "Config schema version (semver)." },
+    "org": { "type": "string", "description": "Owning organization / project name." },
+    "displayName": { "type": "string", "description": "Human-facing wiki name." },
+    "purpose": { "type": "string", "description": "One paragraph: what this wiki is for. Asked by /setup; rendered into the contract + start-here; feeds /onboard-me." },
+    "mode": { "enum": ["embedded", "wrapper", "standalone", "subdir"], "description": "Repository model." },
+    "wikiRoot": { "type": "string", "default": "wiki", "description": "Path to the wiki root, relative to repo root." },
+    "frontmatter": { "type": "boolean", "default": true, "description": "Whether new/touched pages require YAML frontmatter." },
+    "categories": { "type": "array", "items": { "type": "string" }, "minItems": 1, "description": "Synthesis category directories." },
+    "sources": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "layout": { "enum": ["by-system", "by-category"], "default": "by-system" },
+        "buckets": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "git": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "prPerIngestion": { "type": "boolean" },
+        "autoMerge": { "type": "boolean" },
+        "targetBranch": { "type": "string" },
+        "branchPrefix": { "type": "string" }
+      }
+    },
+    "sensitivity": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "default": { "enum": ["public", "internal", "confidential", "restricted"] }
+      }
+    },
+    "sourceRetention": { "enum": ["raw-ok", "sanitized-note-only", "metadata-only", "external-pointer-only"] },
+    "readme": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": { "mode": { "enum": ["rich", "stub", "preserve"], "default": "rich" } }
+    },
+    "documentation": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "absorb": { "type": "boolean", "default": true },
+        "keepInPlace": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "onboarding": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": { "allowAudienceNote": { "type": "boolean", "default": false } }
+    },
+    "connectors": {
+      "type": "object",
+      "description": "Map of connector name -> connector config.",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": true,
+        "required": ["sideEffects"],
+        "properties": {
+          "enabled": { "type": "boolean" },
+          "sideEffects": { "enum": ["read-only-ingest", "repo-write", "external-write"] }
+        }
+      }
+    },
+    "customConnectors": {
+      "type": "array",
+      "description": "Explicit allowlist of project-authored front-door ingest skills (generated by /add-ingest). No auto-discovery.",
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "required": ["name", "skill", "sourceSystem", "sideEffects"],
+        "properties": {
+          "name": { "type": "string" },
+          "skill": { "type": "string" },
+          "sourceSystem": { "type": "string" },
+          "stateFile": { "type": "string" },
+          "sideEffects": { "enum": ["read-only-ingest", "repo-write", "external-write"] }
+        }
+      }
+    },
+    "staff": {
+      "type": "array",
+      "description": "Digital-staff roles. Each generates a wiki/staff/<id>.md doc page + dual-runtime subagents.",
+      "items": {
+        "type": "object",
+        "additionalProperties": true,
+        "required": ["id", "role"],
+        "properties": {
+          "id": { "type": "string" },
+          "role": { "type": "string" },
+          "expertise": { "type": "string" },
+          "owns": {
+            "type": "object",
+            "additionalProperties": true,
+            "properties": {
+              "categories": { "type": "array", "items": { "type": "string" } },
+              "connectors": { "type": "array", "items": { "type": "string" } },
+              "skills": { "type": "array", "items": { "type": "string" } }
+            }
+          },
+          "sensitivity": { "enum": ["public", "internal", "confidential", "restricted"] }
+        }
+      }
+    },
+    "contaminationTerms": { "type": "array", "items": { "type": "string" }, "description": "Cross-tenant terms scanned for before every commit." }
+  }
+}

package/plugins/lisa-wiki/schema/wiki-structure.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://codyswann.github.io/lisa/schema/wiki-structure.schema.json",
+  "title": "lisa-wiki canonical structure manifest",
+  "description": "The canonical folder structure of a lisa-wiki. This manifest is the intended single source of truth for structure conformance, consumed by lint-wiki and validate-config as of M1 (structure enforcement) and by render-contract; in M0 it is the published spec. All paths are relative to config.wikiRoot unless noted. It is a descriptive manifest (not a JSON-Schema validation of a document); validators interpret these fields.",
+  "manifestVersion": "1.0.0",
+  "requiredFiles": [
+    "lisa-wiki.config.json",
+    "index.md",
+    "log.md",
+    "start-here.md",
+    "schema/llm-wiki-contract.md"
+  ],
+  "requiredDirs": ["schema", "sources", "state"],
+  "optionalDirs": ["staff", "documentation"],
+  "categoryDirs": {
+    "default": [
+      "concepts",
+      "entities",
+      "decisions",
+      "architecture",
+      "requirements",
+      "playbooks",
+      "open-questions",
+      "projects"
+    ],
+    "note": "A project may declare additional categories in config.categories (e.g. claims, comparisons, finance, sales)."
+  },
+  "sourcesLayout": {
+    "by-system": "sources/<system>/   (e.g. sources/jira/, sources/git/, sources/slack/)",
+    "by-category": "sources/<bucket>/  (e.g. sources/primary/, sources/secondary/)"
+  },
+  "stateLayout": "state/<system>/*.json",
+  "reportPath": "state/migration/doctor-report.json",
+  "generatedArtifacts": {
+    "claudeRoleAgents": ".claude/agents/<id>.md   (repo root, not under wikiRoot)",
+    "codexRoleAgents": ".codex/agents/<id>.toml   (repo root, not under wikiRoot)",
+    "frontDoorSkills": ".claude|.agents/skills/lisa-wiki-local-*"
+  },
+  "keepInPlaceDefault": [
+    "LICENSE*",
+    "SECURITY.md",
+    "CODE_OF_CONDUCT.md",
+    "CONTRIBUTING.md",
+    "CHANGELOG.md",
+    "NOTICE*",
+    "SUPPORT.md",
+    "GOVERNANCE.md",
+    ".github/**"
+  ]
+}

package/plugins/lisa-wiki/scripts/_wiki-lib.mjs

@@ -0,0 +1,185 @@
+/**
+ * _wiki-lib.mjs — shared, dependency-free helpers for the lisa-wiki validators
+ * (lint-wiki, diff-guard, rewrite-refs, verify-migration). Node built-ins only,
+ * so the scripts stay portable to any downstream repo that installs the plugin.
+ */
+import fs from "node:fs";
+import path from "node:path";
+
+/** Read and parse a JSON file, or return undefined if missing/invalid. */
+export function readJsonSafe(file) {
+  try {
+    return JSON.parse(fs.readFileSync(file, "utf8"));
+  } catch {
+    return undefined;
+  }
+}
+
+/** Resolve the plugin root from a script in scripts/ (parent of scripts/). */
+export function pluginRootFrom(scriptDir) {
+  return path.dirname(scriptDir);
+}
+
+/** Load the project config (wiki/lisa-wiki.config.json by default). */
+export function loadConfig(configPath) {
+  const resolved = path.resolve(configPath ?? "wiki/lisa-wiki.config.json");
+  const config = readJsonSafe(resolved);
+  return { config, configPath: resolved };
+}
+
+/** Load the canonical structure manifest shipped with the plugin. */
+export function loadStructure(pluginRoot) {
+  return readJsonSafe(
+    path.join(pluginRoot, "schema", "wiki-structure.schema.json")
+  );
+}
+
+/** Recursively list files under dir matching an optional extension filter. */
+export function walkFiles(dir, { ext } = {}) {
+  const out = [];
+  const stack = [dir];
+  while (stack.length > 0) {
+    const current = stack.pop();
+    let entries = [];
+    try {
+      entries = fs.readdirSync(current, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      const full = path.join(current, entry.name);
+      if (entry.isDirectory()) {
+        if (entry.name === ".git" || entry.name === "node_modules") continue;
+        stack.push(full);
+      } else if (entry.isFile()) {
+        if (!ext || full.endsWith(ext)) out.push(full);
+      }
+    }
+  }
+  return out.sort();
+}
+
+/**
+ * Minimal frontmatter detector. Returns whether a leading `--- ... ---` block
+ * exists and the top-level keys it declares (enough to check required fields;
+ * NOT a full YAML parser).
+ */
+export function parseFrontmatter(text) {
+  const lines = text.split("\n");
+  if (lines[0].trim() !== "---") return { has: false, keys: [], body: text };
+  let closeIdx = -1;
+  for (let i = 1; i < lines.length; i += 1) {
+    if (lines[i].trim() === "---") {
+      closeIdx = i;
+      break;
+    }
+  }
+  if (closeIdx === -1) return { has: false, keys: [], body: text };
+  const keys = [];
+  for (let i = 1; i < closeIdx; i += 1) {
+    const m = lines[i].match(/^([A-Za-z][\w-]*):/);
+    if (m) keys.push(m[1]);
+  }
+  const body = lines.slice(closeIdx + 1).join("\n");
+  return { has: true, keys, body };
+}
+
+/**
+ * Extract internal markdown link targets ([txt](target)) — excludes external
+ * (http/https/mailto), anchors, and template tokens. Anchors are stripped.
+ */
+export function extractMarkdownLinks(text) {
+  const targets = [];
+  const re = /\[[^\]]*\]\(([^)]+)\)/g;
+  let m;
+  while ((m = re.exec(text)) !== null) {
+    let target = m[1].trim();
+    if (!target || target.startsWith("#")) continue;
+    if (target.includes("{{") || target.includes("<") || target.includes(">"))
+      continue; // template token / placeholder / angle-bracket autolink
+    target = target.split(/\s+/)[0]; // drop optional link title: (url "title")
+    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(target) || target.startsWith("mailto:"))
+      continue;
+    target = target.split("#")[0].trim();
+    if (target) targets.push(target);
+  }
+  return targets;
+}
+
+/** Extract plain-text `Source: <path>.md` citations that look like wiki paths. */
+export function extractCitations(text) {
+  const cites = [];
+  const re = /Source:\s*([^\s)]+\.md)/g;
+  let m;
+  while ((m = re.exec(text)) !== null) {
+    const c = m[1];
+    if (c.includes("{{") || c.includes("<") || c.includes(">")) continue; // template token / placeholder example
+    cites.push(c);
+  }
+  return cites;
+}
+
+/** Convert a tiny glob (supporting ** and *) to a RegExp anchored full-match. */
+export function globToRegExp(glob) {
+  let re = "^";
+  for (let i = 0; i < glob.length; i += 1) {
+    const c = glob[i];
+    if (c === "*") {
+      if (glob[i + 1] === "*") {
+        re += ".*";
+        i += 1;
+        if (glob[i + 1] === "/") i += 1; // consume trailing slash of **/
+      } else {
+        re += "[^/]*";
+      }
+    } else if ("\\^$+?.()|[]{}".includes(c)) {
+      re += `\\${c}`;
+    } else {
+      re += c;
+    }
+  }
+  re += "$";
+  return new RegExp(re);
+}
+
+/** Secret-detection patterns (kept minimal + high-signal). */
+export const SECRET_PATTERNS = [
+  { name: "Slack token", re: /xox[pbar]-[A-Za-z0-9-]{10,}/ },
+  { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/ },
+  {
+    name: "private key header",
+    re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/,
+  },
+  { name: "bearer token", re: /bearer\s+[A-Za-z0-9._-]{20,}/i },
+  {
+    name: "client secret assignment",
+    re: /client_secret["'\s:=]+[A-Za-z0-9._-]{16,}/i,
+  },
+];
+
+/** Text-ish file extensions allowed inside a wiki (others flagged as binaries). */
+export const TEXT_EXTS = new Set([
+  ".md",
+  ".mdx",
+  ".json",
+  ".jsonl",
+  ".txt",
+  ".yml",
+  ".yaml",
+  ".toml",
+  ".csv",
+  ".tsv",
+  ".svg",
+  ".gitkeep",
+]);
+
+/** Severity-tagged result accumulator. */
+export function makeReport() {
+  const items = [];
+  return {
+    add(group, id, status, message, file) {
+      items.push({ group, id, status, message, ...(file ? { file } : {}) });
+    },
+    items,
+  };
+}

package/plugins/lisa-wiki/scripts/diff-guard.mjs

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+/**
+ * diff-guard.mjs — enforce a connector's touched-file boundary. Dependency-free
+ * (git + Node built-ins).
+ *
+ * Run AFTER a connector returns and BEFORE the kernel synthesizes: a connector may
+ * write ONLY its declared source-note path(s) and run-metadata. Any repo change
+ * outside the allowed globs is a hard failure (this is what makes "source-note only"
+ * enforceable, not aspirational). Writes outside the repo (e.g. external-write to a
+ * remote system) are not git-visible and so are not policed here.
+ *
+ * The change set ALWAYS includes untracked files (connectors create new files), so a
+ * stray new file can never bypass the guard. `--base <ref>` additionally unions a
+ * committed range. Paths are read NUL-safe to handle renames/quoting.
+ *
+ * Usage: node diff-guard.mjs --allow <glob> [--allow <glob>...] [--base <ref>]
+ * Exit 0 = all changes within allowed globs, 1 = out-of-bounds change (or git error).
+ */
+import { execFileSync } from "node:child_process";
+import { globToRegExp } from "./_wiki-lib.mjs";
+
+function fail(msg) {
+  console.error(`✗ ${msg}`);
+  process.exit(1);
+}
+
+const argv = process.argv.slice(2);
+const allows = [];
+let base;
+for (let i = 0; i < argv.length; i += 1) {
+  const a = argv[i];
+  if (a === "--allow") {
+    const v = argv[i + 1];
+    if (!v || v.startsWith("--")) fail("--allow requires a glob argument");
+    allows.push(v);
+    i += 1;
+  } else if (a === "--base") {
+    const v = argv[i + 1];
+    if (!v || v.startsWith("--")) fail("--base requires a ref argument");
+    base = v;
+    i += 1;
+  } else {
+    fail(`unknown argument: ${a}`);
+  }
+}
+
+if (allows.length === 0) {
+  fail(
+    "diff-guard requires at least one --allow <glob> (the connector's permitted paths)"
+  );
+}
+
+function git(args) {
+  return execFileSync("git", args, { encoding: "utf8" });
+}
+
+let repoRoot;
+try {
+  repoRoot = git(["rev-parse", "--show-toplevel"]).trim();
+} catch {
+  fail("not inside a git repository");
+}
+const inRepo = args => ["-C", repoRoot, ...args];
+
+// Working-tree change set, NUL-safe, including untracked files. Renames/copies
+// (status starts with R/C) emit the destination then the source as separate NUL
+// records — include both so neither side can slip outside the allow-list.
+function workingTreePaths() {
+  const out = git(
+    inRepo(["status", "--porcelain=v1", "-z", "--untracked-files=all"])
+  );
+  const records = out.split("\0");
+  const paths = [];
+  for (let i = 0; i < records.length; i += 1) {
+    const rec = records[i];
+    if (!rec) continue;
+    const status = rec.slice(0, 2);
+    const p = rec.slice(3);
+    if (p) paths.push(p);
+    if (status[0] === "R" || status[0] === "C") {
+      i += 1;
+      if (records[i]) paths.push(records[i]);
+    }
+  }
+  return paths;
+}
+
+let changed = [];
+try {
+  changed = workingTreePaths();
+  if (base) {
+    changed = changed.concat(
+      git(inRepo(["diff", "--name-only", "-z", base])).split("\0")
+    );
+  }
+} catch (e) {
+  fail(`git failed: ${e.message}`);
+}
+
+changed = [...new Set(changed.map(s => s.trim()).filter(Boolean))];
+const matchers = allows.map(globToRegExp);
+const isAllowed = p => matchers.some(re => re.test(p));
+const violations = changed.filter(p => !isAllowed(p));
+
+if (violations.length > 0) {
+  console.error(
+    `✗ diff-guard: ${violations.length} change(s) outside the allowed connector paths:`
+  );
+  for (const v of violations) console.error(`  - ${v}`);
+  console.error(`  allowed: ${allows.join(", ")}`);
+  process.exit(1);
+}
+
+console.log(
+  `✓ diff-guard: ${changed.length} change(s) all within allowed paths (${allows.join(", ")}).`
+);