qfai 0.2.6 → 0.2.8

package/dist/index.cjs

@@ -44,6 +44,7 @@ __export(src_exports, {
   resolvePath: () => resolvePath,
   resolveToolVersion: () => resolveToolVersion,
   validateContracts: () => validateContracts,
+  validateDefinedIds: () => validateDefinedIds,
   validateProject: () => validateProject,
   validateScenarioContent: () => validateScenarioContent,
   validateScenarios: () => validateScenarios,
@@ -62,7 +63,6 @@ var defaultConfig = {
     specDir: ".qfai/spec",
     decisionsDir: ".qfai/spec/decisions",
     scenariosDir: ".qfai/spec/scenarios",
-    rulesDir: ".qfai/rules",
     contractsDir: ".qfai/contracts",
     uiContractsDir: ".qfai/contracts/ui",
     apiContractsDir: ".qfai/contracts/api",
@@ -86,7 +86,8 @@ var defaultConfig = {
     traceability: {
       brMustHaveSc: true,
       scMustTouchContracts: true,
-      allowOrphanContracts: false
+      allowOrphanContracts: false,
+      unknownContractIdSeverity: "error"
     }
   },
   output: {
@@ -161,13 +162,6 @@ function normalizePaths(raw, configPath, issues) {
       configPath,
       issues
     ),
-    rulesDir: readString(
-      raw.rulesDir,
-      base.rulesDir,
-      "paths.rulesDir",
-      configPath,
-      issues
-    ),
     contractsDir: readString(
       raw.contractsDir,
       base.contractsDir,
@@ -292,6 +286,13 @@ function normalizeValidation(raw, configPath, issues) {
         "validation.traceability.allowOrphanContracts",
         configPath,
         issues
+      ),
+      unknownContractIdSeverity: readTraceabilitySeverity(
+        traceabilityRaw?.unknownContractIdSeverity,
+        base.traceability.unknownContractIdSeverity,
+        "validation.traceability.unknownContractIdSeverity",
+        configPath,
+        issues
       )
     }
   };
@@ -371,6 +372,20 @@ function readFailOn(value, fallback, label, configPath, issues) {
   }
   return fallback;
 }
+function readTraceabilitySeverity(value, fallback, label, configPath, issues) {
+  if (value === "warning" || value === "error") {
+    return value;
+  }
+  if (value !== void 0) {
+    issues.push(
+      configIssue(
+        configPath,
+        `${label} \u306F warning|error \u306E\u3044\u305A\u308C\u304B\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002`
+      )
+    );
+  }
+  return fallback;
+}
 function readOutputFormat(value, fallback, label, configPath, issues) {
   if (value === "text" || value === "json" || value === "github") {
     return value;
@@ -411,13 +426,15 @@ function isRecord(value) {
 }
 
 // src/core/ids.ts
-var ID_PATTERNS = {
-  SPEC: /\bSPEC-[A-Z0-9-]+\b/g,
-  BR: /\bBR-[A-Z0-9-]+\b/g,
-  SC: /\bSC-[A-Z0-9-]+\b/g,
-  UI: /\bUI-[A-Z0-9-]+\b/g,
-  API: /\bAPI-[A-Z0-9-]+\b/g,
-  DATA: /\bDATA-[A-Z0-9-]+\b/g
+var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var STRICT_ID_PATTERNS = {
+  SPEC: /\bSPEC-\d{4}\b/g,
+  BR: /\bBR-\d{4}\b/g,
+  SC: /\bSC-\d{4}\b/g,
+  UI: /\bUI-\d{4}\b/g,
+  API: /\bAPI-\d{4}\b/g,
+  DATA: /\bDATA-\d{4}\b/g,
+  ADR: /\bADR-\d{4}\b/g
 };
 var LOOSE_ID_PATTERNS = {
   SPEC: /\bSPEC-[A-Za-z0-9_-]+\b/gi,
@@ -425,16 +442,17 @@ var LOOSE_ID_PATTERNS = {
   SC: /\bSC-[A-Za-z0-9_-]+\b/gi,
   UI: /\bUI-[A-Za-z0-9_-]+\b/gi,
   API: /\bAPI-[A-Za-z0-9_-]+\b/gi,
-  DATA: /\bDATA-[A-Za-z0-9_-]+\b/gi
+  DATA: /\bDATA-[A-Za-z0-9_-]+\b/gi,
+  ADR: /\bADR-[A-Za-z0-9_-]+\b/gi
 };
 function extractIds(text, prefix) {
-  const pattern = ID_PATTERNS[prefix];
+  const pattern = STRICT_ID_PATTERNS[prefix];
   const matches = text.match(pattern);
   return unique(matches ?? []);
 }
 function extractAllIds(text) {
   const all = [];
-  Object.keys(ID_PATTERNS).forEach((prefix) => {
+  ID_PREFIXES.forEach((prefix) => {
     all.push(...extractIds(text, prefix));
   });
   return unique(all);
@@ -455,13 +473,13 @@ function unique(values) {
   return Array.from(new Set(values));
 }
 function isValidId(value, prefix) {
-  const pattern = ID_PATTERNS[prefix];
+  const pattern = STRICT_ID_PATTERNS[prefix];
   const strict = new RegExp(pattern.source);
   return strict.test(value);
 }
 
 // src/core/report.ts
-var import_promises8 = require("fs/promises");
+var import_promises10 = require("fs/promises");
 
 // src/core/discovery.ts
 var import_node_path3 = __toESM(require("path"), 1);
@@ -557,8 +575,8 @@ var import_promises3 = require("fs/promises");
 var import_node_path4 = __toESM(require("path"), 1);
 var import_node_url = require("url");
 async function resolveToolVersion() {
-  if ("0.2.6".length > 0) {
-    return "0.2.6";
+  if ("0.2.9".length > 0) {
+    return "0.2.9";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -578,8 +596,50 @@ function resolvePackageJsonPath() {
 
 // src/core/validators/contracts.ts
 var import_promises4 = require("fs/promises");
+
+// src/core/contracts.ts
 var import_node_path5 = __toESM(require("path"), 1);
 var import_yaml2 = require("yaml");
+function parseStructuredContract(file, text) {
+  const ext = import_node_path5.default.extname(file).toLowerCase();
+  if (ext === ".json") {
+    return JSON.parse(text);
+  }
+  return (0, import_yaml2.parse)(text);
+}
+function extractUiContractIds(doc) {
+  const id = typeof doc.id === "string" ? doc.id : "";
+  return extractIds(id, "UI");
+}
+function extractApiContractIds(doc) {
+  const operationIds = /* @__PURE__ */ new Set();
+  collectOperationIds(doc, operationIds);
+  const ids = /* @__PURE__ */ new Set();
+  for (const operationId of operationIds) {
+    extractIds(operationId, "API").forEach((id) => ids.add(id));
+  }
+  return Array.from(ids);
+}
+function collectOperationIds(value, out) {
+  if (!value || typeof value !== "object") {
+    return;
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      collectOperationIds(item, out);
+    }
+    return;
+  }
+  for (const [key, entry] of Object.entries(value)) {
+    if (key === "operationId" && typeof entry === "string") {
+      out.add(entry);
+      continue;
+    }
+    collectOperationIds(entry, out);
+  }
+}
+
+// src/core/validators/contracts.ts
 var SQL_DANGEROUS_PATTERNS = [
   { pattern: /\bDROP\s+TABLE\b/i, label: "DROP TABLE" },
   { pattern: /\bDROP\s+DATABASE\b/i, label: "DROP DATABASE" },
@@ -628,12 +688,13 @@ async function validateUiContracts(uiRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -642,30 +703,32 @@ async function validateUiContracts(uiRoot) {
         )
       );
     }
+    let doc;
     try {
-      const doc = (0, import_yaml2.parse)(text);
-      const id = typeof doc.id === "string" ? doc.id : "";
-      if (!id.startsWith("UI-")) {
-        issues.push(
-          issue(
-            "QFAI-UI-001",
-            "UI \u5951\u7D04\u306E id \u306F UI- \u3067\u59CB\u307E\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
-            "error",
-            file,
-            "contracts.ui.id"
-          )
-        );
-      }
+      doc = parseStructuredContract(file, text);
     } catch (error) {
       issues.push(
         issue(
-          "QFAI-UI-002",
-          `UI YAML \u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${formatError2(error)}`,
+          "QFAI-CONTRACT-001",
+          `UI \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError2(error)})`,
           "error",
           file,
           "contracts.ui.parse"
         )
       );
+      continue;
+    }
+    const uiIds = extractUiContractIds(doc);
+    if (uiIds.length === 0) {
+      issues.push(
+        issue(
+          "QFAI-CONTRACT-002",
+          `UI \u5951\u7D04\u306B ID(UI-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
+          "error",
+          file,
+          "contracts.ui.id"
+        )
+      );
     }
   }
   return issues;
@@ -692,12 +755,13 @@ async function validateApiContracts(apiRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -706,29 +770,43 @@ async function validateApiContracts(apiRoot) {
         )
       );
     }
+    let doc;
     try {
-      const doc = parseStructured(file, text);
-      if (!doc || !hasOpenApi(doc)) {
-        issues.push(
-          issue(
-            "QFAI-API-001",
-            "OpenAPI \u5B9A\u7FA9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
-            "error",
-            file,
-            "contracts.api.openapi"
-          )
-        );
-      }
+      doc = parseStructuredContract(file, text);
     } catch (error) {
       issues.push(
         issue(
-          "QFAI-API-002",
-          `API \u5B9A\u7FA9\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${formatError2(error)}`,
+          "QFAI-CONTRACT-001",
+          `API \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError2(error)})`,
           "error",
           file,
           "contracts.api.parse"
         )
       );
+      continue;
+    }
+    if (!hasOpenApi(doc)) {
+      issues.push(
+        issue(
+          "QFAI-API-001",
+          "OpenAPI \u5B9A\u7FA9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
+          "error",
+          file,
+          "contracts.api.openapi"
+        )
+      );
+    }
+    const apiIds = extractApiContractIds(doc);
+    if (apiIds.length === 0) {
+      issues.push(
+        issue(
+          "QFAI-CONTRACT-002",
+          `API \u5951\u7D04\u306B ID(API-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
+          "error",
+          file,
+          "contracts.api.id"
+        )
+      );
     }
   }
   return issues;
@@ -755,12 +833,13 @@ async function validateDataContracts(dataRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -790,13 +869,6 @@ function lintSql(text, file) {
   }
   return issues;
 }
-function parseStructured(file, text) {
-  const ext = import_node_path5.default.extname(file).toLowerCase();
-  if (ext === ".json") {
-    return JSON.parse(text);
-  }
-  return (0, import_yaml2.parse)(text);
-}
 function hasOpenApi(doc) {
   return typeof doc.openapi === "string" && doc.openapi.length > 0;
 }
@@ -807,25 +879,165 @@ function formatError2(error) {
   return String(error);
 }
 function issue(code, message, severity, file, rule, refs) {
-  const issue5 = {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
-// src/core/validators/scenario.ts
+// src/core/validators/ids.ts
+var import_promises6 = require("fs/promises");
+var import_node_path6 = __toESM(require("path"), 1);
+
+// src/core/contractIndex.ts
 var import_promises5 = require("fs/promises");
+async function buildContractIndex(root, config) {
+  const uiRoot = resolvePath(root, config, "uiContractsDir");
+  const apiRoot = resolvePath(root, config, "apiContractsDir");
+  const dataRoot = resolvePath(root, config, "dataContractsDir");
+  const [uiFiles, apiFiles, dataFiles] = await Promise.all([
+    collectUiContractFiles(uiRoot),
+    collectApiContractFiles(apiRoot),
+    collectDataContractFiles(dataRoot)
+  ]);
+  const index = {
+    ids: /* @__PURE__ */ new Set(),
+    idToFiles: /* @__PURE__ */ new Map(),
+    files: { ui: uiFiles, api: apiFiles, data: dataFiles },
+    structuredParseFailedFiles: /* @__PURE__ */ new Set()
+  };
+  await indexUiContracts(uiFiles, index);
+  await indexApiContracts(apiFiles, index);
+  await indexDataContracts(dataFiles, index);
+  return index;
+}
+async function indexUiContracts(files, index) {
+  for (const file of files) {
+    const text = await (0, import_promises5.readFile)(file, "utf-8");
+    try {
+      const doc = parseStructuredContract(file, text);
+      extractUiContractIds(doc).forEach((id) => record(index, id, file));
+    } catch {
+      index.structuredParseFailedFiles.add(file);
+      extractIds(text, "UI").forEach((id) => record(index, id, file));
+    }
+  }
+}
+async function indexApiContracts(files, index) {
+  for (const file of files) {
+    const text = await (0, import_promises5.readFile)(file, "utf-8");
+    try {
+      const doc = parseStructuredContract(file, text);
+      extractApiContractIds(doc).forEach((id) => record(index, id, file));
+    } catch {
+      index.structuredParseFailedFiles.add(file);
+      extractIds(text, "API").forEach((id) => record(index, id, file));
+    }
+  }
+}
+async function indexDataContracts(files, index) {
+  for (const file of files) {
+    const text = await (0, import_promises5.readFile)(file, "utf-8");
+    extractIds(text, "DATA").forEach((id) => record(index, id, file));
+  }
+}
+function record(index, id, file) {
+  index.ids.add(id);
+  const current = index.idToFiles.get(id) ?? /* @__PURE__ */ new Set();
+  current.add(file);
+  index.idToFiles.set(id, current);
+}
+
+// src/core/validators/ids.ts
+async function validateDefinedIds(root, config) {
+  const issues = [];
+  const specRoot = resolvePath(root, config, "specDir");
+  const scenarioRoot = resolvePath(root, config, "scenariosDir");
+  const specFiles = await collectSpecFiles(specRoot);
+  const scenarioFiles = await collectFiles(scenarioRoot, {
+    extensions: [".feature"]
+  });
+  const defined = /* @__PURE__ */ new Map();
+  await collectSpecDefinitionIds(specFiles, defined);
+  await collectScenarioDefinitionIds(scenarioFiles, defined);
+  const contractIndex = await buildContractIndex(root, config);
+  for (const [id, files] of contractIndex.idToFiles.entries()) {
+    for (const file of files) {
+      recordId(defined, id, file);
+    }
+  }
+  for (const [id, files] of defined.entries()) {
+    if (files.size <= 1) {
+      continue;
+    }
+    const sorted = Array.from(files).sort();
+    issues.push(
+      issue2(
+        "QFAI-ID-001",
+        `ID \u304C\u91CD\u8907\u3057\u3066\u3044\u307E\u3059: ${id} (${formatFileList(sorted, root)})`,
+        "error",
+        sorted[0],
+        "id.duplicate"
+      )
+    );
+  }
+  return issues;
+}
+async function collectSpecDefinitionIds(files, out) {
+  for (const file of files) {
+    const text = await (0, import_promises6.readFile)(file, "utf-8");
+    extractIds(text, "SPEC").forEach((id) => recordId(out, id, file));
+    extractIds(text, "BR").forEach((id) => recordId(out, id, file));
+  }
+}
+async function collectScenarioDefinitionIds(files, out) {
+  for (const file of files) {
+    const text = await (0, import_promises6.readFile)(file, "utf-8");
+    extractIds(text, "SC").forEach((id) => recordId(out, id, file));
+  }
+}
+function recordId(out, id, file) {
+  const current = out.get(id) ?? /* @__PURE__ */ new Set();
+  current.add(file);
+  out.set(id, current);
+}
+function formatFileList(files, root) {
+  return files.map((file) => {
+    const relative = import_node_path6.default.relative(root, file);
+    return relative.length > 0 ? relative : file;
+  }).join(", ");
+}
+function issue2(code, message, severity, file, rule, refs) {
+  const issue6 = {
+    code,
+    severity,
+    message
+  };
+  if (file) {
+    issue6.file = file;
+  }
+  if (rule) {
+    issue6.rule = rule;
+  }
+  if (refs && refs.length > 0) {
+    issue6.refs = refs;
+  }
+  return issue6;
+}
+
+// src/core/validators/scenario.ts
+var import_promises7 = require("fs/promises");
 var GIVEN_PATTERN = /\bGiven\b/;
 var WHEN_PATTERN = /\bWhen\b/;
 var THEN_PATTERN = /\bThen\b/;
@@ -836,7 +1048,7 @@ async function validateScenarios(root, config) {
   });
   if (files.length === 0) {
     return [
-      issue2(
+      issue3(
         "QFAI-SC-000",
         "Scenario \u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -847,7 +1059,7 @@ async function validateScenarios(root, config) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises5.readFile)(file, "utf-8");
+    const text = await (0, import_promises7.readFile)(file, "utf-8");
     issues.push(...validateScenarioContent(text, file));
   }
   return issues;
@@ -860,12 +1072,13 @@ function validateScenarioContent(text, file) {
     "SC",
     "UI",
     "API",
-    "DATA"
+    "DATA",
+    "ADR"
   ]);
   if (invalidIds.length > 0) {
     issues.push(
-      issue2(
-        "QFAI_ID_INVALID_FORMAT",
+      issue3(
+        "QFAI-ID-002",
         `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
         "error",
         file,
@@ -877,7 +1090,7 @@ function validateScenarioContent(text, file) {
   const scIds = extractIds(text, "SC");
   if (scIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-001",
         "SC ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -889,7 +1102,7 @@ function validateScenarioContent(text, file) {
   const specIds = extractIds(text, "SPEC");
   if (specIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-002",
         "SC \u306F SPEC \u3092\u53C2\u7167\u3059\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
         "error",
@@ -901,7 +1114,7 @@ function validateScenarioContent(text, file) {
   const brIds = extractIds(text, "BR");
   if (brIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-003",
         "SC \u306F BR \u3092\u53C2\u7167\u3059\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
         "error",
@@ -922,7 +1135,7 @@ function validateScenarioContent(text, file) {
   }
   if (missingSteps.length > 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-005",
         `Given/When/Then \u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059: ${missingSteps.join(", ")}`,
         "warning",
@@ -933,33 +1146,33 @@ function validateScenarioContent(text, file) {
   }
   return issues;
 }
-function issue2(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue3(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validators/spec.ts
-var import_promises6 = require("fs/promises");
+var import_promises8 = require("fs/promises");
 async function validateSpecs(root, config) {
   const specsRoot = resolvePath(root, config, "specDir");
   const files = await collectSpecFiles(specsRoot);
   if (files.length === 0) {
     const expected = "spec-0001-<slug>.md";
     return [
-      issue3(
+      issue4(
         "QFAI-SPEC-000",
         `Spec \u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002\u914D\u7F6E\u5834\u6240: ${config.paths.specDir} / \u671F\u5F85\u30D1\u30BF\u30FC\u30F3: ${expected}`,
         "info",
@@ -970,7 +1183,7 @@ async function validateSpecs(root, config) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises6.readFile)(file, "utf-8");
+    const text = await (0, import_promises8.readFile)(file, "utf-8");
     issues.push(
       ...validateSpecContent(
         text,
@@ -989,12 +1202,13 @@ function validateSpecContent(text, file, requiredSections) {
     "SC",
     "UI",
     "API",
-    "DATA"
+    "DATA",
+    "ADR"
   ]);
   if (invalidIds.length > 0) {
     issues.push(
-      issue3(
-        "QFAI_ID_INVALID_FORMAT",
+      issue4(
+        "QFAI-ID-002",
         `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
         "error",
         file,
@@ -1006,7 +1220,7 @@ function validateSpecContent(text, file, requiredSections) {
   const specIds = extractIds(text, "SPEC");
   if (specIds.length === 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-001",
         "SPEC ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -1018,7 +1232,7 @@ function validateSpecContent(text, file, requiredSections) {
   const brIds = extractIds(text, "BR");
   if (brIds.length === 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-002",
         "BR ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -1030,7 +1244,7 @@ function validateSpecContent(text, file, requiredSections) {
   const scIds = extractIds(text, "SC");
   if (scIds.length > 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-003",
         "Spec \u306F SC \u3092\u53C2\u7167\u3057\u306A\u3044\u30EB\u30FC\u30EB\u3067\u3059\u3002",
         "warning",
@@ -1043,7 +1257,7 @@ function validateSpecContent(text, file, requiredSections) {
   for (const section of requiredSections) {
     if (!text.includes(section)) {
       issues.push(
-        issue3(
+        issue4(
           "QFAI-SPEC-004",
           `\u5FC5\u9808\u30BB\u30AF\u30B7\u30E7\u30F3\u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059: ${section}`,
           "error",
@@ -1055,26 +1269,26 @@ function validateSpecContent(text, file, requiredSections) {
   }
   return issues;
 }
-function issue3(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue4(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validators/traceability.ts
-var import_promises7 = require("fs/promises");
+var import_promises9 = require("fs/promises");
 async function validateTraceability(root, config) {
   const issues = [];
   const specsRoot = resolvePath(root, config, "specDir");
@@ -1090,36 +1304,141 @@ async function validateTraceability(root, config) {
     extensions: [".feature"]
   });
   const upstreamIds = /* @__PURE__ */ new Set();
+  const specIds = /* @__PURE__ */ new Set();
   const brIdsInSpecs = /* @__PURE__ */ new Set();
   const brIdsInScenarios = /* @__PURE__ */ new Set();
   const scIdsInScenarios = /* @__PURE__ */ new Set();
   const scenarioContractIds = /* @__PURE__ */ new Set();
   const scWithContracts = /* @__PURE__ */ new Set();
-  for (const file of [...specFiles, ...decisionFiles]) {
-    const text = await (0, import_promises7.readFile)(file, "utf-8");
+  const specToBrIds = /* @__PURE__ */ new Map();
+  const contractIndex = await buildContractIndex(root, config);
+  const contractIds = contractIndex.ids;
+  for (const file of specFiles) {
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
+    extractAllIds(text).forEach((id) => upstreamIds.add(id));
+    const specIdsInFile = extractIds(text, "SPEC");
+    specIdsInFile.forEach((id) => specIds.add(id));
+    const brIds = extractIds(text, "BR");
+    brIds.forEach((id) => brIdsInSpecs.add(id));
+    const referencedContractIds = /* @__PURE__ */ new Set([
+      ...extractIds(text, "UI"),
+      ...extractIds(text, "API"),
+      ...extractIds(text, "DATA")
+    ]);
+    const unknownContractIds = Array.from(referencedContractIds).filter(
+      (id) => !contractIds.has(id)
+    );
+    if (unknownContractIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-009",
+          `Spec \u304C\u5B58\u5728\u3057\u306A\u3044\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
+            ", "
+          )}`,
+          "error",
+          file,
+          "traceability.specContractExists",
+          unknownContractIds
+        )
+      );
+    }
+    for (const specId of specIdsInFile) {
+      const current = specToBrIds.get(specId) ?? /* @__PURE__ */ new Set();
+      brIds.forEach((id) => current.add(id));
+      specToBrIds.set(specId, current);
+    }
+  }
+  for (const file of decisionFiles) {
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
-    extractIds(text, "BR").forEach((id) => brIdsInSpecs.add(id));
   }
   for (const file of scenarioFiles) {
-    const text = await (0, import_promises7.readFile)(file, "utf-8");
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
+    const specIdsInScenario = extractIds(text, "SPEC");
     const brIds = extractIds(text, "BR");
-    brIds.forEach((id) => brIdsInScenarios.add(id));
     const scIds = extractIds(text, "SC");
-    scIds.forEach((id) => scIdsInScenarios.add(id));
-    const contractIds = [
+    const scenarioIds = [
       ...extractIds(text, "UI"),
       ...extractIds(text, "API"),
       ...extractIds(text, "DATA")
     ];
-    contractIds.forEach((id) => scenarioContractIds.add(id));
-    if (contractIds.length > 0) {
+    brIds.forEach((id) => brIdsInScenarios.add(id));
+    scIds.forEach((id) => scIdsInScenarios.add(id));
+    scenarioIds.forEach((id) => scenarioContractIds.add(id));
+    if (scenarioIds.length > 0) {
       scIds.forEach((id) => scWithContracts.add(id));
     }
+    const unknownSpecIds = specIdsInScenario.filter((id) => !specIds.has(id));
+    if (unknownSpecIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-005",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044 SPEC \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownSpecIds.join(", ")}`,
+          "error",
+          file,
+          "traceability.scenarioSpecExists",
+          unknownSpecIds
+        )
+      );
+    }
+    const unknownBrIds = brIds.filter((id) => !brIdsInSpecs.has(id));
+    if (unknownBrIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-006",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044 BR \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownBrIds.join(", ")}`,
+          "error",
+          file,
+          "traceability.scenarioBrExists",
+          unknownBrIds
+        )
+      );
+    }
+    const unknownContractIds = scenarioIds.filter((id) => !contractIds.has(id));
+    if (unknownContractIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-008",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
+            ", "
+          )}`,
+          config.validation.traceability.unknownContractIdSeverity,
+          file,
+          "traceability.scenarioContractExists",
+          unknownContractIds
+        )
+      );
+    }
+    if (specIdsInScenario.length > 0) {
+      const allowedBrIds = /* @__PURE__ */ new Set();
+      for (const specId of specIdsInScenario) {
+        const brIdsForSpec = specToBrIds.get(specId);
+        if (!brIdsForSpec) {
+          continue;
+        }
+        brIdsForSpec.forEach((id) => allowedBrIds.add(id));
+      }
+      const invalidBrIds = brIds.filter((id) => !allowedBrIds.has(id));
+      if (invalidBrIds.length > 0) {
+        issues.push(
+          issue5(
+            "QFAI-TRACE-007",
+            `Scenario \u306E BR \u304C\u53C2\u7167 SPEC \u306B\u5C5E\u3057\u3066\u3044\u307E\u305B\u3093: ${invalidBrIds.join(
+              ", "
+            )} (SPEC: ${specIdsInScenario.join(", ")})`,
+            "error",
+            file,
+            "traceability.scenarioBrUnderSpec",
+            invalidBrIds
+          )
+        );
+      }
+    }
   }
   if (upstreamIds.size === 0) {
     return [
-      issue4(
+      issue5(
         "QFAI-TRACE-000",
         "\u4E0A\u6D41 ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -1134,7 +1453,7 @@ async function validateTraceability(root, config) {
     );
     if (orphanBrIds.length > 0) {
       issues.push(
-        issue4(
+        issue5(
           "QFAI_TRACE_BR_ORPHAN",
           `BR \u304C SC \u306B\u7D10\u3065\u3044\u3066\u3044\u307E\u305B\u3093: ${orphanBrIds.join(", ")}`,
           "error",
@@ -1151,7 +1470,7 @@ async function validateTraceability(root, config) {
     );
     if (scWithoutContracts.length > 0) {
       issues.push(
-        issue4(
+        issue5(
           "QFAI_TRACE_SC_NO_CONTRACT",
           `SC \u304C\u5951\u7D04(UI/API/DATA)\u306B\u63A5\u7D9A\u3057\u3066\u3044\u307E\u305B\u3093: ${scWithoutContracts.join(
             ", "
@@ -1165,14 +1484,13 @@ async function validateTraceability(root, config) {
     }
   }
   if (!config.validation.traceability.allowOrphanContracts) {
-    const contractIds = await collectContractIds(root, config);
     if (contractIds.size > 0) {
       const orphanContracts = Array.from(contractIds).filter(
         (id) => !scenarioContractIds.has(id)
       );
       if (orphanContracts.length > 0) {
         issues.push(
-          issue4(
+          issue5(
             "QFAI_CONTRACT_ORPHAN",
             `\u5951\u7D04\u304C SC \u304B\u3089\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${orphanContracts.join(", ")}`,
             "error",
@@ -1189,27 +1507,6 @@ async function validateTraceability(root, config) {
   );
   return issues;
 }
-async function collectContractIds(root, config) {
-  const contractIds = /* @__PURE__ */ new Set();
-  const uiRoot = resolvePath(root, config, "uiContractsDir");
-  const apiRoot = resolvePath(root, config, "apiContractsDir");
-  const dataRoot = resolvePath(root, config, "dataContractsDir");
-  const uiFiles = await collectUiContractFiles(uiRoot);
-  const apiFiles = await collectApiContractFiles(apiRoot);
-  const dataFiles = await collectDataContractFiles(dataRoot);
-  await collectIdsFromFiles(uiFiles, ["UI"], contractIds);
-  await collectIdsFromFiles(apiFiles, ["API"], contractIds);
-  await collectIdsFromFiles(dataFiles, ["DATA"], contractIds);
-  return contractIds;
-}
-async function collectIdsFromFiles(files, prefixes, out) {
-  for (const file of files) {
-    const text = await (0, import_promises7.readFile)(file, "utf-8");
-    for (const prefix of prefixes) {
-      extractIds(text, prefix).forEach((id) => out.add(id));
-    }
-  }
-}
 async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const issues = [];
   const codeFiles = await collectFiles(srcRoot, {
@@ -1221,7 +1518,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const targetFiles = [...codeFiles, ...testFiles];
   if (targetFiles.length === 0) {
     issues.push(
-      issue4(
+      issue5(
         "QFAI-TRACE-001",
         "\u53C2\u7167\u5BFE\u8C61\u306E\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -1234,7 +1531,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const pattern = buildIdPattern(Array.from(upstreamIds));
   let found = false;
   for (const file of targetFiles) {
-    const text = await (0, import_promises7.readFile)(file, "utf-8");
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     if (pattern.test(text)) {
       found = true;
       break;
@@ -1242,7 +1539,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   }
   if (!found) {
     issues.push(
-      issue4(
+      issue5(
         "QFAI-TRACE-002",
         "\u4E0A\u6D41 ID \u304C\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u306B\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002",
         "warning",
@@ -1257,22 +1554,22 @@ function buildIdPattern(ids) {
   const escaped = ids.map((id) => id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
   return new RegExp(`\\b(${escaped.join("|")})\\b`);
 }
-function issue4(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue5(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validate.ts
@@ -1284,6 +1581,7 @@ async function validateProject(root, configResult) {
     ...await validateSpecs(root, config),
     ...await validateScenarios(root, config),
     ...await validateContracts(root, config),
+    ...await validateDefinedIds(root, config),
     ...await validateTraceability(root, config)
   ];
   const toolVersion = await resolveToolVersion();
@@ -1296,8 +1594,8 @@ async function validateProject(root, configResult) {
 }
 function countIssues(issues) {
   return issues.reduce(
-    (acc, issue5) => {
-      acc[issue5.severity] += 1;
+    (acc, issue6) => {
+      acc[issue6.severity] += 1;
       return acc;
     },
     { info: 0, warning: 0, error: 0 }
@@ -1305,7 +1603,7 @@ function countIssues(issues) {
 }
 
 // src/core/report.ts
-var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var ID_PREFIXES2 = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
 async function createReportData(root, validation, configResult) {
   const resolved = configResult ?? await loadConfig(root);
   const config = resolved.config;
@@ -1313,7 +1611,6 @@ async function createReportData(root, validation, configResult) {
   const specRoot = resolvePath(root, config, "specDir");
   const decisionsRoot = resolvePath(root, config, "decisionsDir");
   const scenariosRoot = resolvePath(root, config, "scenariosDir");
-  const rulesRoot = resolvePath(root, config, "rulesDir");
   const apiRoot = resolvePath(root, config, "apiContractsDir");
   const uiRoot = resolvePath(root, config, "uiContractsDir");
   const dbRoot = resolvePath(root, config, "dataContractsDir");
@@ -1326,7 +1623,6 @@ async function createReportData(root, validation, configResult) {
   const decisionFiles = await collectFiles(decisionsRoot, {
     extensions: [".md"]
   });
-  const ruleFiles = await collectFiles(rulesRoot, { extensions: [".md"] });
   const {
     api: apiFiles,
     ui: uiFiles,
@@ -1336,7 +1632,6 @@ async function createReportData(root, validation, configResult) {
     ...specFiles,
     ...scenarioFiles,
     ...decisionFiles,
-    ...ruleFiles,
     ...apiFiles,
     ...uiFiles,
     ...dbFiles
@@ -1362,7 +1657,6 @@ async function createReportData(root, validation, configResult) {
       specs: specFiles.length,
       scenarios: scenarioFiles.length,
       decisions: decisionFiles.length,
-      rules: ruleFiles.length,
       contracts: {
         api: apiFiles.length,
         ui: uiFiles.length,
@@ -1397,7 +1691,6 @@ function formatReportMarkdown(data) {
   lines.push(`- specs: ${data.summary.specs}`);
   lines.push(`- scenarios: ${data.summary.scenarios}`);
   lines.push(`- decisions: ${data.summary.decisions}`);
-  lines.push(`- rules: ${data.summary.rules}`);
   lines.push(
     `- contracts: api ${data.summary.contracts.api} / ui ${data.summary.contracts.ui} / db ${data.summary.contracts.db}`
   );
@@ -1433,7 +1726,7 @@ function formatReportMarkdown(data) {
   lines.push("");
   lines.push("## \u30C8\u30EC\u30FC\u30B5\u30D3\u30EA\u30C6\u30A3\uFF08\u691C\u8A3C\uFF09");
   const traceIssues = data.issues.filter(
-    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code === "QFAI_CONTRACT_ORPHAN"
+    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code.startsWith("QFAI-TRACE-") || item.code === "QFAI_CONTRACT_ORPHAN"
   );
   if (traceIssues.length === 0) {
     lines.push("- (none)");
@@ -1473,8 +1766,8 @@ async function collectIds(files) {
     DATA: /* @__PURE__ */ new Set()
   };
   for (const file of files) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
-    for (const prefix of ID_PREFIXES) {
+    const text = await (0, import_promises10.readFile)(file, "utf-8");
+    for (const prefix of ID_PREFIXES2) {
       const ids = extractIds(text, prefix);
       ids.forEach((id) => result[prefix].add(id));
     }
@@ -1491,7 +1784,7 @@ async function collectIds(files) {
 async function collectUpstreamIds(files) {
   const ids = /* @__PURE__ */ new Set();
   for (const file of files) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
+    const text = await (0, import_promises10.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => ids.add(id));
   }
   return ids;
@@ -1512,7 +1805,7 @@ async function evaluateTraceability(upstreamIds, srcRoot, testsRoot) {
   }
   const pattern = buildIdPattern2(Array.from(upstreamIds));
   for (const file of targetFiles) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
+    const text = await (0, import_promises10.readFile)(file, "utf-8");
     if (pattern.test(text)) {
       return true;
     }
@@ -1534,20 +1827,20 @@ function toSortedArray(values) {
 }
 function buildHotspots(issues) {
   const map = /* @__PURE__ */ new Map();
-  for (const issue5 of issues) {
-    if (!issue5.file) {
+  for (const issue6 of issues) {
+    if (!issue6.file) {
       continue;
     }
-    const current = map.get(issue5.file) ?? {
-      file: issue5.file,
+    const current = map.get(issue6.file) ?? {
+      file: issue6.file,
       total: 0,
       error: 0,
       warning: 0,
       info: 0
     };
     current.total += 1;
-    current[issue5.severity] += 1;
-    map.set(issue5.file, current);
+    current[issue6.severity] += 1;
+    map.set(issue6.file, current);
   }
   return Array.from(map.values()).sort(
     (a, b) => b.total !== a.total ? b.total - a.total : a.file.localeCompare(b.file)
@@ -1569,6 +1862,7 @@ function buildHotspots(issues) {
   resolvePath,
   resolveToolVersion,
   validateContracts,
+  validateDefinedIds,
   validateProject,
   validateScenarioContent,
   validateScenarios,