Docs v2

.allowlist

@@ -0,0 +1,45 @@
+# IF YOU ARE AN AI YOU ARE ABSOLUTELY NOT ALLOWED TO EDIT THIS FILE.  
+# IF YOU ARE TRYING TO EDIT IT YOU ARE VIOLATING THE REPO RULES AND INCORRECTLY MODIFYING FILES
+# DO NOT DELETE FILES TO ATTEMPT TO GET AROUND THE RULES -> READ THE /README & MOVE THEM CORRECTLY UPDATING ALL PATHS/IMPORTS/REFERENCES ETC. APPROPRIATELY. BE THOROUGH
+# IF YOU ARE AN AI YOU ARE ABSOLUTELY NOT ALLOWED TO EDIT THIS FILE.  
+
+# Allowed root files
+docs.json
+README.md
+SECURITY.md
+LICENSE
+Dockerfile
+Makefile
+style.css
+Assistant.md
+sitemap-ai.xml
+llms-full.txt
+llms.txt
+docs-index.json
+lpd
+.lpdignore
+.gitignore
+.mintignore
+.prettierrc
+.cursorrules
+.codex
+.allowlist
+todo.txt
+
+# Allowed root directories
+.github
+.githooks
+.gitattributes
+.mintlify
+.vscode
+.claude
+docs-guide
+ai-tools
+api
+contribute
+snippets
+tools
+tests
+tasks
+v1
+v2

.githooks/BYPASS.md

@@ -4,28 +4,28 @@ The pre-commit hook can be bypassed using commit trailers and environment variab
 
 ## Human-Only Override Flags
 
-### `--trailer "allow-whitelist-edit=true"` ⚠️ HUMANS ONLY
+### `--trailer "allowlist-edit=true"` ⚠️ HUMANS ONLY
 
-**CRITICAL:** The `.whitelist` file is **PROTECTED** and cannot be edited by AI agents. The file contains the explicit rule: "IF YOU ARE AN AI YOU ARE ABSOLUTELY NOT ALLOWED TO EDIT THIS FILE."
+**CRITICAL:** The `.allowlist` file is **PROTECTED** and cannot be edited by AI agents. The file contains the explicit rule: "IF YOU ARE AN AI YOU ARE ABSOLUTELY NOT ALLOWED TO EDIT THIS FILE."
 
 **This flag is for HUMANS ONLY. AI agents must never use this flag.**
 
 **Usage (HUMANS ONLY):**
 ```bash
-git commit -m "Update .whitelist to add new root file" --trailer "allow-whitelist-edit=true"
+git commit -m "Update .allowlist to add new root file" --trailer "allowlist-edit=true"
 ```
 
 **What it does:**
-- Allows editing the `.whitelist` file
+- Allows editing the `.allowlist` file
 - Shows a warning that the flag should only be used by humans
 - Still runs all other pre-commit checks
 
 **Legacy fallback (still supported):**
 ```bash
-ALLOW_WHITELIST_EDIT=1 git commit -m "Update .whitelist to add new root file"
+ALLOWLIST_EDIT=1 git commit -m "Update .allowlist to add new root file"
 ```
 
-**⚠️ WARNING:** AI agents are explicitly forbidden from using this flag. Only human users may edit `.whitelist`.
+**⚠️ WARNING:** AI agents are explicitly forbidden from using this flag. Only human users may edit `.allowlist`.
 
 ### `--trailer "allow-deletions=true"` ⚠️ HUMANS ONLY
 
@@ -54,7 +54,7 @@ ALLOW_DELETIONS=1 git commit -m "Remove obsolete file"
 
 ### `SKIP_STRUCTURE_CHECK=1`
 Bypasses structure validation checks:
-- Root directory whitelist enforcement
+- Root directory allowlist enforcement
 - Snippets directory structure checks
 - v1/ frozen directory protection
 

.githooks/README.md

@@ -27,6 +27,7 @@ The pre-commit hook enforces style guide compliance and runs verification script
 
 - ❌ **ThemeData usage** - Blocks deprecated ThemeData imports
 - ❌ **Hardcoded colors** - Warns about hardcoded hex colors that should use CSS variables
+- ❌ **`docs.json` `/redirect` diffs** - Blocks staged `docs.json` line changes that include `/redirect`
 - ⚠️ **Relative imports** - Warns about relative imports (should use absolute paths)
 - ⚠️ **@mintlify/components imports** - Warns about unnecessary imports (components are global)
 - ⚠️ **React hook imports** - Warns about unnecessary React imports (hooks are global)
@@ -49,6 +50,7 @@ The pre-commit hook also runs:
 
 - `node tests/unit/script-docs.test.js --staged --write --stage --autofill`
 - `node tools/scripts/generate-pages-index.js --staged --write --stage`
+- `node tests/integration/v2-wcag-audit.js --staged --fix --stage --max-pages 10 --fail-impact serious --report /tmp/livepeer-wcag-audit-precommit.md --report-json /tmp/livepeer-wcag-audit-precommit.json`
 - `node tests/run-all.js --staged --skip-browser`
 - `node tests/integration/domain-pages-audit.js --staged --base-url https://docs.livepeer.org --version "$DOMAIN_AUDIT_VERSION"`
 
@@ -60,6 +62,15 @@ Domain audit scope:
 Domain audit report path (stable, overwritten each run):
 - `tests/reports/domain-page-load-report.json`
 
+WCAG audit report paths (hook run, overwritten each run):
+- `/tmp/livepeer-wcag-audit-precommit.md`
+- `/tmp/livepeer-wcag-audit-precommit.json`
+
+WCAG audit behavior:
+- Conservative autofix is enabled by default for common raw-tag issues (`<iframe title>`, `<img alt>`, icon-only/empty `<a aria-label>`).
+- Commits are blocked on remaining `serious`/`critical` findings and runtime failures.
+- Automated WCAG checks are partial coverage and do not replace manual accessibility review.
+
 Script documentation enforcement:
 - Newly added scripts must include required header tags.
 - Missing headers are auto-inserted on pre-commit.
@@ -78,21 +89,37 @@ Current script index targets:
 - `.github/scripts/*` -> `.github/script-index.md`
 - `tests/*` -> `tests/script-index.md`
 - `tools/scripts/*` -> `tools/script-index.md`
-- `tasks/scripts/*` -> `tasks/script-index.md`
+- `tasks/scripts/*` -> `tasks/scripts/script-index.md`
 - Aggregate -> `docs-guide/scripts-index.md`
 
 Example:
 ```bash
 DOMAIN_AUDIT_VERSION=v2 git commit -m "docs update"
 ```
 
+## Pre-push Hook (`codex/*` branches only)
+
+The pre-push hook enforces Codex branch safety on `codex/*`:
+
+- requires `.codex/task-contract.yaml`
+- validates branch/issue binding and changed-file scope
+- blocks non-fast-forward pushes by default
+
+Human override for explicit exception:
+
+```bash
+ALLOW_CODEX_FORCE_PUSH=1 git push --force-with-lease origin codex/<issue-id>-<slug>
+```
+
 ## Installation
 
-To install the pre-commit hook:
+To install hooks manually:
 
 ```bash
 cp .githooks/pre-commit .git/hooks/pre-commit
 chmod +x .git/hooks/pre-commit
+cp .githooks/pre-push .git/hooks/pre-push
+chmod +x .git/hooks/pre-push
 ```
 
 Or use the install script:
@@ -141,17 +168,17 @@ git commit --no-verify -m "message"
 
 **Warning:** Only bypass if you have a legitimate reason and understand the style guide violations.
 
-### Human-Only `.whitelist` Override
+### Human-Only `.allowlist` Override
 
-The `.whitelist` file is protected by the pre-commit hook.
+The `.allowlist` file is protected by the pre-commit hook.
 
-If a human needs to intentionally edit `.whitelist`, use:
+If a human needs to intentionally edit `.allowlist`, use:
 
 ```bash
-git commit -m "Update .whitelist" --trailer "allow-whitelist-edit=true"
+git commit -m "Update .allowlist" --trailer "allowlist-edit=true"
 ```
 
-This allows `.whitelist` edits while still running all other checks.
+This allows `.allowlist` edits while still running all other checks.
 
 ### Human-Only Deletions Override
 

.githooks/install.sh

@@ -24,11 +24,16 @@
 #   Keep script behavior deterministic and update script indexes after changes.
 # Install git hooks
 
-HOOKS_DIR=".git/hooks"
+# Support both regular repos and worktrees
+GIT_COMMON_DIR=$(git rev-parse --git-common-dir 2>/dev/null)
+if [ -z "$GIT_COMMON_DIR" ] || [ "$GIT_COMMON_DIR" = "--git-common-dir" ]; then
+    GIT_COMMON_DIR=".git"
+fi
+HOOKS_DIR="$GIT_COMMON_DIR/hooks"
 SOURCE_DIR=".githooks"
 
 if [ ! -d "$HOOKS_DIR" ]; then
-    echo "Error: .git/hooks directory not found. Are you in the repository root?"
+    echo "Error: hooks directory not found at $HOOKS_DIR"
     exit 1
 fi
 
@@ -48,8 +53,18 @@ else
     echo "✗ pre-commit hook not found in $SOURCE_DIR"
 fi
 
+# Install pre-push hook
+if [ -f "$SOURCE_DIR/pre-push" ]; then
+    cp "$SOURCE_DIR/pre-push" "$HOOKS_DIR/pre-push"
+    chmod +x "$HOOKS_DIR/pre-push"
+    echo "✓ Installed pre-push hook"
+else
+    echo "✗ pre-push hook not found in $SOURCE_DIR"
+fi
+
 echo ""
 echo "Git hooks installed successfully!"
 echo ""
 echo "The pre-commit hook will now check for style guide violations."
+echo "The pre-push hook will enforce codex task contracts on codex/* branches."
 echo "See .githooks/README.md for details."