@tangle-network/browser-agent-driver 0.30.0 → 0.31.0

package/dist/cli-ack-patch.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Layer 4 — `bad design-audit ack-patch` subcommand handler.
+ *
+ * Invoked by coding agents after applying a patch:
+ *   bad design-audit ack-patch <patchId> --pre-run-id <runId> [--applied-by <who>]
+ *
+ * When a re-audit is run with `--post-patch <patchId>`, the pipeline looks up
+ * the pending application and writes the observed outcome. This file handles
+ * the ack-patch side; the --post-patch flow lives in pipeline.ts.
+ */
+export interface AckPatchOptions {
+    patchId: string;
+    preRunId: string;
+    appliedBy?: string;
+    predictedDim?: string;
+    predictedDelta?: number;
+    patchBefore?: string;
+    patchAfter?: string;
+    patchScope?: string;
+    dir?: string;
+}
+/**
+ * Record that a patch was applied. Returns the applicationId for correlation.
+ * The predicted delta is optional — when not provided, defaults to 'untested'.
+ */
+export declare function ackPatch(opts: AckPatchOptions): Promise<string>;
+export interface PostPatchOptions {
+    patchId: string;
+    postRunId: string;
+    observedDim: string;
+    observedDelta: number;
+    dir?: string;
+}
+/**
+ * Record the observed outcome after a re-audit. Looks up the pending
+ * application for `patchId` and appends an outcome event.
+ */
+export declare function recordPatchOutcome(opts: PostPatchOptions): Promise<void>;
+//# sourceMappingURL=cli-ack-patch.d.ts.map

package/dist/cli-ack-patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-ack-patch.d.ts","sourceRoot":"","sources":["../src/cli-ack-patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBrE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAe9E"}

package/dist/cli-ack-patch.js

@@ -0,0 +1,47 @@
+/**
+ * Layer 4 — `bad design-audit ack-patch` subcommand handler.
+ *
+ * Invoked by coding agents after applying a patch:
+ *   bad design-audit ack-patch <patchId> --pre-run-id <runId> [--applied-by <who>]
+ *
+ * When a re-audit is run with `--post-patch <patchId>`, the pipeline looks up
+ * the pending application and writes the observed outcome. This file handles
+ * the ack-patch side; the --post-patch flow lives in pipeline.ts.
+ */
+import * as crypto from 'node:crypto';
+import { appendPatchApplication, patchHash, findPendingApplication, updateApplicationOutcome, } from './design/audit/attribution/store.js';
+/**
+ * Record that a patch was applied. Returns the applicationId for correlation.
+ * The predicted delta is optional — when not provided, defaults to 'untested'.
+ */
+export async function ackPatch(opts) {
+    const applicationId = crypto.randomUUID();
+    const hash = patchHash({ before: opts.patchBefore ?? '', after: opts.patchAfter ?? '' }, opts.patchScope ?? 'component');
+    const app = {
+        applicationId,
+        patchId: opts.patchId,
+        patchHash: hash,
+        appliedAt: new Date().toISOString(),
+        appliedBy: opts.appliedBy ?? 'agent:unknown',
+        preAuditRunId: opts.preRunId,
+        predicted: {
+            dim: (opts.predictedDim ?? 'product_intent'),
+            delta: opts.predictedDelta ?? 0,
+        },
+    };
+    await appendPatchApplication(app, opts.dir);
+    return applicationId;
+}
+/**
+ * Record the observed outcome after a re-audit. Looks up the pending
+ * application for `patchId` and appends an outcome event.
+ */
+export async function recordPatchOutcome(opts) {
+    const pending = await findPendingApplication(opts.patchId, opts.dir);
+    if (!pending) {
+        throw new Error(`No pending PatchApplication found for patchId ${opts.patchId}. ` +
+            'Run `bad design-audit ack-patch` after applying the patch, before re-auditing.');
+    }
+    await updateApplicationOutcome(pending.applicationId, opts.postRunId, { dim: opts.observedDim, delta: opts.observedDelta }, opts.dir);
+}
+//# sourceMappingURL=cli-ack-patch.js.map

package/dist/cli-ack-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-ack-patch.js","sourceRoot":"","sources":["../src/cli-ack-patch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAGrC,OAAO,EACL,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,qCAAqC,CAAA;AAc5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACzC,MAAM,IAAI,GAAG,SAAS,CACpB,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,EAChE,IAAI,CAAC,UAAU,IAAI,WAAW,CAC/B,CAAA;IAED,MAAM,GAAG,GAAqB;QAC5B,aAAa;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,eAAe;QAC5C,aAAa,EAAE,IAAI,CAAC,QAAQ;QAC5B,SAAS,EAAE;YACT,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAc;YACzD,KAAK,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;SAChC;KACF,CAAA;IAED,MAAM,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3C,OAAO,aAAa,CAAA;AACtB,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAsB;IAC7D,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,iDAAiD,IAAI,CAAC,OAAO,IAAI;YAC/D,gFAAgF,CACnF,CAAA;IACH,CAAC;IAED,MAAM,wBAAwB,CAC5B,OAAO,CAAC,aAAa,EACrB,IAAI,CAAC,SAAS,EACd,EAAE,GAAG,EAAE,IAAI,CAAC,WAAwB,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EACjE,IAAI,CAAC,GAAG,CACT,CAAA;AACH,CAAC"}

package/dist/cli-design-audit.d.ts

@@ -32,6 +32,18 @@ export interface DesignAuditOptions {
     rubricsDir?: string;
     /** Subjective LLM audit passes: standard, deep, max, number, or comma-list */
     auditPasses?: string;
+    /** Bypass the ethics floor entirely. Audited + warned. Test-only. */
+    skipEthics?: boolean;
+    /** Override directory for ethics rule yaml files. */
+    ethicsRulesDir?: string;
+    /** Comma-separated audience tags: developer, clinician, kids, ... */
+    audience?: string;
+    /** Comma-separated regulatory contexts: hipaa, gdpr, coppa, ... */
+    regulatoryContext?: string;
+    /** Comma-separated audience-vulnerability tags: patient-facing, minor-facing, ... */
+    audienceVulnerability?: string;
+    /** Single modality: mobile, tablet, desktop, tv, kiosk */
+    modality?: string;
 }
 export declare function runDesignAudit(opts: DesignAuditOptions): Promise<void>;
 export interface ExtractDesignTokensOptions {

package/dist/cli-design-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-design-audit.d.ts","sourceRoot":"","sources":["../src/cli-design-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAA4B,YAAY,EAA8L,MAAM,YAAY,CAAA;AAmNpQ,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0S5E;AAsxCD,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACjK;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsRrG"}
+{"version":3,"file":"cli-design-audit.d.ts","sourceRoot":"","sources":["../src/cli-design-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAA4B,YAAY,EAA8L,MAAM,YAAY,CAAA;AA0RpQ,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,qEAAqE;IACrE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qFAAqF;IACrF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4U5E;AAsxCD,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;CACjK;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsRrG"}

package/dist/cli-design-audit.js

@@ -15,6 +15,62 @@ import { resolveProviderApiKey, resolveProviderModelName } from './provider-defa
 import { loadLocalEnvFiles } from './env-loader.js';
 import { cliError } from './cli-ui.js';
 import { auditOnePage } from './design/audit/pipeline.js';
+/** Split "a, b , c" → ['a','b','c']. Returns undefined for empty input so the
+ *  v2 predicate predicates can distinguish "operator did not say" from "[]". */
+function parseTagList(input) {
+    if (!input)
+        return undefined;
+    const tags = input.split(',').map(s => s.trim()).filter(Boolean);
+    return tags.length > 0 ? tags : undefined;
+}
+/** Pretty-print the ethics-violation report for a set of pages. Prints
+ *  nothing when no page tripped a rule. Each rule is shown with severity,
+ *  remediation, and citation so the operator can act without re-running. */
+function printEthicsViolations(pages) {
+    const offenders = pages.filter(p => (p.ethicsViolations?.length ?? 0) > 0);
+    if (offenders.length === 0)
+        return;
+    console.log('');
+    console.log(`  ${chalk.bgRed.white.bold(' ETHICS VIOLATIONS ')}`);
+    for (const page of offenders) {
+        console.log(`  ${chalk.dim('Page:')} ${page.url}`);
+        for (const v of page.ethicsViolations ?? []) {
+            const sevColor = v.severity === 'critical-floor' ? chalk.red : chalk.yellow;
+            console.log(`    ${sevColor('•')} ${chalk.bold(v.ruleId)} ${chalk.dim('—')} ${sevColor(v.severity)} ${chalk.dim(`(rollup capped at ${v.rollupCap})`)}`);
+            console.log(`      ${chalk.dim('fix:')} ${v.remediation}`);
+            if (v.citation)
+                console.log(`      ${chalk.dim('cite:')} ${v.citation}`);
+        }
+    }
+}
+/** Lowest rollup cap across all violated pages, or undefined if none fired. */
+function lowestRollupCap(pages) {
+    const caps = pages.flatMap(p => p.ethicsViolations ?? []).map(v => v.rollupCap);
+    return caps.length === 0 ? undefined : Math.min(...caps);
+}
+/**
+ * Layer 1 — print the per-dimension breakdown for one page when an
+ * `auditResultV2` is attached. Five dim lines + one rollup line; each shows
+ * score, range, and confidence so an agent can reason about uncertainty.
+ */
+function printV2Breakdown(page) {
+    const v2 = page.auditResultV2;
+    if (!v2 || !v2.scores || !v2.rollup)
+        return;
+    const dimOrder = ['product_intent', 'visual_craft', 'trust_clarity', 'workflow', 'content_ia'];
+    for (const dim of dimOrder) {
+        const s = v2.scores[dim];
+        if (!s)
+            continue;
+        const sevColor = s.score >= 8 ? chalk.green : s.score >= 5 ? chalk.yellow : chalk.red;
+        const confColor = s.confidence === 'high' ? chalk.green : s.confidence === 'medium' ? chalk.yellow : chalk.dim;
+        console.log(`      ${chalk.dim(dim.padEnd(15))} ${sevColor(`${s.score}/10`)} ${chalk.dim(`[${s.range[0]}-${s.range[1]}]`)} ${confColor(s.confidence)}`);
+    }
+    const r = v2.rollup;
+    const rColor = r.score >= 8 ? chalk.green : r.score >= 5 ? chalk.yellow : chalk.red;
+    const confColor = r.confidence === 'high' ? chalk.green : r.confidence === 'medium' ? chalk.yellow : chalk.dim;
+    console.log(`      ${chalk.dim('rollup'.padEnd(15))} ${rColor(`${r.score.toFixed(1)}/10`)} ${chalk.dim(`[${r.range[0].toFixed(1)}-${r.range[1].toFixed(1)}]`)} ${confColor(r.confidence)}  ${chalk.dim(r.rule)}`);
+}
 import { resolveAuditPasses } from './design/audit/evaluate.js';
 import { detectSystemicFindings, topByRoi } from './design/audit/roi.js';
 import { getTelemetry, setInvocation } from './telemetry/index.js';
@@ -198,6 +254,18 @@ export async function runDesignAudit(opts) {
     const modelName = resolveProviderModelName(provider, opts.model);
     const apiKey = opts.apiKey ?? resolveProviderApiKey(provider);
     const auditPasses = resolveAuditPasses(opts.auditPasses);
+    // Layer 7 — ethics gate options. Threaded into every auditOnePage call site.
+    if (opts.skipEthics) {
+        console.warn(`  ${chalk.yellow('⚠')} ${chalk.bold('--skip-ethics')} ${chalk.dim('— ethics floor disabled (test-only)')}`);
+    }
+    const ethicsCommonOpts = {
+        skipEthics: opts.skipEthics,
+        ethicsRulesDir: opts.ethicsRulesDir,
+        audience: parseTagList(opts.audience),
+        regulatoryContext: parseTagList(opts.regulatoryContext),
+        audienceVulnerability: parseTagList(opts.audienceVulnerability),
+        modality: parseTagList(opts.modality),
+    };
     // Telemetry: every design-audit invocation gets a stable runId. Children
     // (per-page, evolve rounds) link back via parentRunId so a fleet rollup can
     // reconstruct the tree.
@@ -266,6 +334,7 @@ export async function runDesignAudit(opts) {
             runId,
             provider,
             model: modelName,
+            ...ethicsCommonOpts,
         });
         const result = gen2;
         results.push(result);
@@ -276,6 +345,7 @@ export async function runDesignAudit(opts) {
             ? chalk.dim(` (${result.classification.type}/${result.classification.domain})`)
             : '';
         console.log(`  ${icon} ${scoreColor(`${result.score}/10`)} ${chalk.dim('—')} ${findingCount} finding${findingCount !== 1 ? 's' : ''}${classLabel}`);
+        printV2Breakdown(result);
     }
     // Cross-page systemic detection + top-fixes ranking.
     // Findings appearing on 2+ pages collapse into a single systemic finding.
@@ -297,16 +367,29 @@ export async function runDesignAudit(opts) {
     const minor = allFindings.filter(f => f.severity === 'minor').length;
     if (opts.json) {
         const jsonPath = path.join(outputDir, 'report.json');
+        // Layer 1 — emit BOTH schemaVersion 1 (legacy) and schemaVersion 2 (new)
+        // shapes for one release. Consumers can migrate to v2 incrementally.
+        const v2Pages = results
+            .map(r => r.auditResultV2)
+            .filter((r) => r !== undefined);
         fs.writeFileSync(jsonPath, JSON.stringify({
+            schemaVersion: 1,
             timestamp: new Date().toISOString(),
             profile,
             url: opts.url,
             pages: results,
             topFixes,
             summary: { avgScore, totalFindings: allFindings.length, critical, major, minor },
+            v2: {
+                schemaVersion: 2,
+                pages: v2Pages,
+            },
         }, null, 2));
         console.log(`  ${chalk.dim('JSON →')} ${jsonPath}`);
     }
+    // ── Layer 7 — surface ethics violations BEFORE the score summary so the
+    // operator sees the floor reason, not just the capped number. ──
+    printEthicsViolations(results);
     // Summary
     console.log('');
     console.log(`  ${chalk.dim('─'.repeat(52))}`);
@@ -319,6 +402,10 @@ export async function runDesignAudit(opts) {
     if (minor > 0)
         findingParts.push(chalk.dim(`${minor} minor`));
     console.log(`  Avg: ${avgColor(`${avgScore.toFixed(1)}/10`)}  ${chalk.dim('·')}  ${allFindings.length} findings ${findingParts.length ? chalk.dim('(') + findingParts.join(chalk.dim(' · ')) + chalk.dim(')') : ''}`);
+    const lowestCap = lowestRollupCap(results);
+    if (lowestCap !== undefined) {
+        console.log(`  ${chalk.red('⚠ Rollup capped at')} ${chalk.bold(`${lowestCap}/10`)} ${chalk.dim('— resolve ethics violations to lift the cap')}`);
+    }
     console.log(`  ${chalk.dim('Report →')} ${reportPath}`);
     if (screenshotDir)
         console.log(`  ${chalk.dim('Screenshots →')} ${screenshotDir}`);
@@ -342,6 +429,7 @@ export async function runDesignAudit(opts) {
                     provider,
                     model: modelName,
                     parentRunId: runId,
+                    ...ethicsCommonOpts,
                 });
                 repResults.push(gen2);
             }